io.github.sparkvibe-io/GuardianShield

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

What can you do with io.github.sparkvibe-io/GuardianShield?

Code Vulnerability Scanning — SQL injection, XSS, command injection, path traversal with CWE IDs and auto-fix remediation
Cross-line Data Flow Analysis — DeepEngine tracks tainted data from sources to sinks across multiple lines using AST-based taint propagation (Python) and regex (JS/TS)
Dependency Security — Version-aware CVE matching against OSV.dev for PyPI, npm, Go, and Packagist ecosystems
Manifest Parsing — Auto-detects 11 formats (requirements.txt, package.json, yarn.lock, go.mod, composer.json, and more)
Prompt Injection Defense — 9+ detection patterns for instruction override, role hijacking, ChatML injection
PII Detection — Email, SSN, credit card, phone, IP — with automatic redaction in findings
Secret Detection — AWS keys, GitHub tokens, Stripe keys, JWTs, passwords, connection strings
Safety Profiles — 5 built-in profiles (general, education, healthcare, finance, children)

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package guardianshield

Claude Code

claude mcp add guardianshield -e 'GUARDIANSHIELD_PROFILE=<GUARDIANSHIELD_PROFILE>' -e 'GUARDIANSHIELD_AUDIT_PATH=<GUARDIANSHIELD_AUDIT_PATH>' -e 'GUARDIANSHIELD_DEBUG=<GUARDIANSHIELD_DEBUG>' -- uvx guardianshield==1.2.1

JSON configuration (Claude Desktop, Cursor, VS Code)

{
    "mcpServers": {
        "guardianshield": {
            "command": "uvx",
            "args": [
                "guardianshield==1.2.1"
            ],
            "env": {
                "GUARDIANSHIELD_PROFILE": "<GUARDIANSHIELD_PROFILE>",
                "GUARDIANSHIELD_AUDIT_PATH": "<GUARDIANSHIELD_AUDIT_PATH>",
                "GUARDIANSHIELD_DEBUG": "<GUARDIANSHIELD_DEBUG>"
            }
        }
    }
}

Environment variables

GUARDIANSHIELD_PROFILE Default safety profile (general, education, healthcare, finance, children)
GUARDIANSHIELD_AUDIT_PATH Path to the SQLite audit database
GUARDIANSHIELD_DEBUG Set to 1 for debug logging

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents

GuardianShield
Features
Install
Quick Start
Editor Integration
MCP Tools
Configuration
Documentation
License

GuardianShield

[]()

Universal AI security layer — an open-source MCP server for code scanning, PII detection, prompt injection defense, secret detection, dependency auditing, and audit logging.

Zero dependencies · 27 MCP tools · 5 safety profiles · 108+ detection patterns

Features

Code Vulnerability Scanning — SQL injection, XSS, command injection, path traversal with CWE IDs and auto-fix remediation
Cross-line Data Flow Analysis — DeepEngine tracks tainted data from sources to sinks across multiple lines using AST-based taint propagation (Python) and regex (JS/TS)
Dependency Security — Version-aware CVE matching against OSV.dev for PyPI, npm, Go, and Packagist ecosystems
Manifest Parsing — Auto-detects 11 formats (requirements.txt, package.json, yarn.lock, go.mod, composer.json, and more)
Prompt Injection Defense — 9+ detection patterns for instruction override, role hijacking, ChatML injection
PII Detection — Email, SSN, credit card, phone, IP — with automatic redaction in findings
Secret Detection — AWS keys, GitHub tokens, Stripe keys, JWTs, passwords, connection strings
Safety Profiles — 5 built-in profiles (general, education, healthcare, finance, children)
Audit Logging — SQLite-backed scan history with finding retrieval and filtering

Install

pip install guardianshield

Quick Start

# Register with Claude Code
claude mcp add guardianshield -- guardianshield-mcp

# Or run directly
guardianshield-mcp

Editor Integration

# Claude Code
claude mcp add guardianshield -- guardianshield-mcp

# VS Code (.vscode/mcp.json)
{"servers": {"guardianshield": {"type": "stdio", "command": "guardianshield-mcp"}}}

# Cursor (.cursor/mcp.json)
{"mcpServers": {"guardianshield": {"command": "guardianshield-mcp"}}}

# Claude Desktop (claude_desktop_config.json)
{"mcpServers": {"guardianshield": {"command": "guardianshield-mcp"}}}

MCP Tools

Scanning

Tool	Description
`scan_code`	Scan source code for vulnerabilities and hardcoded secrets
`scan_file`	Scan a single file (auto-detects language from extension)
`scan_directory`	Recursively scan a directory with filtering and progress streaming
`scan_input`	Check user/agent input for prompt injection attempts
`scan_output`	Check AI output for PII leaks and content violations
`check_secrets`	Detect hardcoded secrets and credentials
`scan_files`	Scan multiple files in one call
`scan_diff`	Parse unified diff and scan only added lines

Dependency Security

Tool	Description
`check_dependencies`	Check packages for known CVEs via OSV.dev (PyPI, npm, Go, Packagist)
`sync_vulnerabilities`	Sync the local OSV vulnerability database
`parse_manifest`	Parse any supported manifest file (11 formats) into dependency objects
`scan_dependencies`	Scan a directory for manifest files and check all deps for vulnerabilities

False Positive Management

Tool	Description
`mark_false_positive`	Mark a finding as false positive (flags future matches)
`list_false_positives`	List active false positive records with optional filter
`unmark_false_positive`	Remove a false positive record by fingerprint

Engine Management

Tool	Description
`list_engines`	List available analysis engines with capabilities
`set_engine`	Set active analysis engines for code scanning

Three engines ship built-in: regex (line-by-line pattern matching, enabled by default), deep (cross-line taint tracking), and semantic (structure-aware confidence adjustment).

CI & Developer Workflow

Tool	Description
`export_sarif`	Export findings as SARIF 2.1.0 JSON for GitHub Code Scanning and CI
`save_baseline`	Save current findings as a baseline for delta scanning
`scan_with_baseline`	Scan code and report only new findings vs. baseline
`check_quality_gate`	Evaluate findings against severity thresholds (pass/fail/warn)
`scan_files`	Scan multiple files in one call
`scan_diff`	Parse unified diff and scan only added lines

Configuration & Utilities

Tool	Description
`get_profile`	Get current safety profile configuration
`set_profile`	Switch safety profile (general, education, healthcare, finance, children)
`test_pattern`	Test a regex pattern against sample code for custom pattern development
`audit_log`	Query the security audit log
`get_findings`	Retrieve past findings with filters
`shield_status`	Get health, configuration, and OSV cache statistics

Configuration

Set environment variables to customize behavior:

Variable	Description	Default
`GUARDIANSHIELD_PROFILE`	Default safety profile	`general`
`GUARDIANSHIELD_AUDIT_PATH`	Path to SQLite audit database	`~/.guardianshield/audit.db`
`GUARDIANSHIELD_DEBUG`	Enable debug logging (`1`)	disabled

Documentation

Full documentation: sparkvibe-io.github.io/GuardianShield

License

Apache 2.0

Frequently asked questions

What is io.github.sparkvibe-io/GuardianShield?

AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs

How do I install io.github.sparkvibe-io/GuardianShield?

It runs on your machine. In Claude Code: claude mcp add guardianshield -e 'GUARDIANSHIELD_PROFILE=<GUARDIANSHIELD_PROFILE>' -e 'GUARDIANSHIELD_AUDIT_PATH=<GUARDIANSHIELD_AUDIT_PATH>' -e 'GUARDIANSHIELD_DEBUG=<GUARDIANSHIELD_DEBUG>' -- uvx guardianshield==1.2.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.sparkvibe-io/GuardianShield need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.sparkvibe-io/GuardianShield open source?

Yes. Its code is on GitHub under the Apache-2.0 license.

Who maintains io.github.sparkvibe-io/GuardianShield?

It is published by sparkvibe-io. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.

Server details

Listed in: Official MCP Registry
Publisher: sparkvibe-io
Category: Developer tools
Runs: Local
GitHub stars: ★ 3
License: Apache-2.0
Language: Python
Last commit: Mar 3, 2026
Open issues: 3
Version: 1.2.1
Published: Mar 3, 2026

io.github.sparkvibe-io/GuardianShield

Similar servers

Vulnerability Exposure Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CIS...
debuff Let coding agents play, test and tune your 2D web game: live state, explained errors, r...
Advanced GitLab MCP server 64 CQRS tools exposing 235 GitLab operations across 26 entity types
ContextStream MCP Server The context platform for AI agents: code search, team decisions, and grounded project c...
ljos Local memory, a work tracker and a shell-command guard shared by coding agents on one m...
Sendora Sendora's docs and API for coding agents: send test mail, read the log, set up webhooks.
Whiteboard MCP Local Excalidraw whiteboard your coding agent draws on live, and sees what you draw back.
Hronaut Browser MCP A visible desktop browser for coding agents, with a separate workspace for each project.

Developer tools