Skip to main content
Glama
Sign In
AgentShield MCP Inspector Lite

AgentShield MCP Inspector Lite

by TYKAIRO-AI
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Remote

🛡️ AgentShield MCP Inspector Lite

A TYKAIRO AI product — Founded by Mahmoud Hisham

Free, local-first MCP security inspection for tool metadata, schemas, and high-risk capabilities.

Node.js MCP Edition TYKAIRO AI

AgentShield MCP Inspector Lite analyzes MCP tool names, descriptions, and input schemas and returns explainable verdicts:

  • SAFE

  • REVIEW

  • HIGH RISK

The goal is simple: inspect an MCP tool surface before trusting it.

AgentShield is a risk-inspection tool. A verdict is not proof that software is safe or malicious.

⚡ Quick start

git clone https://github.com/TYKAIRO-AI/AgentShield-MCP-Inspector.git
cd AgentShield-MCP-Inspector
npm install
npm test
npm run scan:sample

Scan your own MCP tool metadata from JSON:

node src/cli.js scan-json examples/sample-tools.json --md-out report.md --json-out report.json

Or run Lite as an MCP server:

node src/index.js

The server exposes the analyze_tools tool.

Related MCP server: sentinel-scan

What Lite does

The starter ruleset looks for signals related to:

  • Shell / OS command execution

  • Destructive file operations

  • Filesystem reads

  • External network access

  • Secrets / credential access

It supports both static JSON scanning and MCP-server use.

Example workflow

MCP tool metadata
      ↓
AgentShield Lite
      ↓
Capability + schema inspection
      ↓
SAFE / REVIEW / HIGH RISK
      ↓
Evidence explaining why

This makes it useful for developers, MCP publishers, reviewers, and teams that want a quick first-pass security check before deeper inspection.

Lite vs Pro

Lite is intentionally focused and public. AgentShield Pro is developed separately and is not included in this repository.

Planned Pro capabilities include:

  • Direct stdio MCP discovery

  • Expanded security rules

  • Allowlist / blocklist policy files

  • Trusted-domain policy

  • Better network classification

  • CI/CD exit codes and security gates

  • Scan history and scan diff

  • SARIF / advanced reporting

  • Source and package inspection

  • Remote MCP scanning

  • Advanced evidence and policy controls

Project status

Edition: Lite
Version: 0.1.0-lite.1
Runtime: Node.js 20+

Issues and feature ideas are welcome. If this project helps you evaluate MCP tools, consider starring the repository so more developers can discover it.

Contributing

See CONTRIBUTING.md.

Security

For security-related reports, see SECURITY.md.

Ownership

Publisher: Mahmoud Hisham
Organization: TYKAIRO AI

Copyright © 2026 Mahmoud Hisham. All rights reserved. See LICENSE.txt.

Available Tools

1 tool
analyze_toolsAnalyze MCP tool metadataB

Basic Lite-edition inspection of MCP tool names, descriptions and JSON Schemas without executing target tools.

Inputs: tools (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A3.7/5.0

    Scored across 1 tool

    Disambiguation5/5

    Only one tool exists, so there is zero risk of an agent confusing it with another. The tool's purpose is clearly defined.

    Naming Consistency5/5

    The single tool uses a clear verb_noun pattern ('analyze_tools'), and with only one name there is no inconsistency to evaluate.

    Tool Count3/5

    A single tool is at the lower boundary of acceptable scope. It may be intentional for a 'Lite' edition, but the set feels very thin.

    Completeness4/5

    The tool covers the core inspection task (names, descriptions, schemas) without execution, but lacks any auxiliary operations like listing, comparing, or exporting results—though these may be outside the Lite scope.

    Maintenance

    ActivitySlowing
    ResponsivenessNo recent community issues

    Resources

    Related MCP Connectors

    Related MCP Servers

    • MCP Tool Security Inspector

      danveil
      A
      license
      Not graded
      quality
      B
      maintenance
      Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift without executing tools.
      1
      MIT

    • sentinel-scan

      Ventrova
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables MCP clients to scan tool manifests and server configs for prompt injection, tool poisoning, excessive agency, and other OWASP-mapped security issues directly through the scan_mcp_manifest tool.
      83 npm
      3
      MIT

    • fde-assessment

      BalajiPillalamarri
      F
      license
      Not graded
      quality
      C
      maintenance
      Enables MCP tool calls with strict schema validation and stdio isolation, while providing a security gateway for tool-level authorization, streaming PII redaction, and model failover routing.
      -

    • mcp-trust-audit-mcp

      tylerscomic-lab
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables users to audit other MCP servers' tool definitions for agentic attack classes such as tool poisoning, sensitive-path references in metadata, and tool shadowing via invisible Unicode or homoglyphs. It can analyze a tools/list payload, check a single description string, or connect to a public remote MCP URL to fetch and audit its tool list.
      MIT