riseandignite/mcp-shield
Security scanner for MCP servers
Overview
riseandignite/mcp-shield is a TypeScript MCP server licensed under MIT. Security scanner for MCP servers
Ranked #6018 out of 25632 indexed tools.
Ecosystem
TypeScript MIT
Signal Breakdown
Stars 547
Freshness 10mo ago
Issue Health 50%
Contributors 1
Dependents 0
Forks 32
Description Brief
License MIT
How to Improve
Description low impact
Freshness high impact
Contributors medium impact
Matched Queries
From the README
# MCP-Shield MCP-Shield scans your installed MCP (Model Context Protocol) servers and detects vulnerabilities like tool poisoning attacks, exfiltration channels and cross-origin escalations. ## Usage Run default scan: ```bash npx mcp-shield ``` With Claude API key for enhanced analysis: ```bash npx mcp-shield --claude-api-key YOUR_API_KEY ``` With a specific config file: ```bash npx mcp-shield --path ~/path/to/config.json ``` With the `--identify-as` flag: ```bash npx mcp-shield --identify-as claude-desktop ``` Get help: ```bash npx mcp-shield -h ``` With a safe list of servers to exclude from scanning: ```bash npx mcp-shield --safe-list "github,slack,whatsapp" ``` **Options:** - `--path <path>`: Scan a specific path for MCP configuration files (`.mcp/*.json`, `claude_desktop_config.json`). If omitted, scans standard locations (`~/.config/.mcp`, `~/Library/Application Support/Claude`, `~/.continue`). - `--claude-api-key <key>`: (Optional) Provide an Anthropic Claude APIRead full README on GitHub →
Are you the maintainer? Claim this listing