AgentShield MCP Inspector Lite
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@AgentShield MCP Inspector LiteAnalyze these MCP tool definitions and flag any high-risk ones."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
AgentShield MCP Inspector Lite
Free public edition of AgentShield for basic MCP tool-metadata security inspection.
Publisher: Mahmoud Hisham
Edition: Lite
Version: 0.1.0-lite.1
Runtime: Node.js 20+
What Lite does
AgentShield Lite analyzes MCP tool names, descriptions, and input schemas and returns explainable verdicts:
SAFEREVIEWHIGH RISK
Lite includes a deliberately limited starter ruleset for:
Shell / OS command execution
Destructive file operations
Filesystem reads
External network access
Secrets / credential access
It supports static JSON scanning and also runs as an MCP server exposing the analyze_tools tool.
Related MCP server: MCP Tool Security Inspector
What is reserved for AgentShield Pro
The paid Pro edition is being developed separately and is not included in this public repository. Planned Pro capabilities include:
Direct stdio MCP discovery
Expanded security rules
Allowlist / blocklist policy files
Trusted-domain policy
Better network classification
CI/CD exit codes and security gates
Scan history and scan diff
SARIF / advanced reporting
Source and package inspection
Remote MCP scanning
Advanced evidence and policy controls
Install
npm installTest
npm testTry the sample
npm run scan:sampleScan tool metadata from JSON
node src/cli.js scan-json examples/sample-tools.json --md-out report.md --json-out report.jsonRun Lite as an MCP server
node src/index.jsThe Lite MCP server exposes:
analyze_tools
Security note
AgentShield performs heuristic metadata/schema inspection. A SAFE verdict is not proof that software is safe.
Pro
AgentShield Pro is kept outside this public repository. A purchase link will be added when the first Pro release is ready.
Ownership
Copyright © 2026 Mahmoud Hisham. All rights reserved. See LICENSE.txt.
Available Tools
1 toolanalyze_toolsAnalyze MCP tool metadataB
Basic Lite-edition inspection of MCP tool names, descriptions and JSON Schemas without executing target tools.
| Name | Required | Description | Default |
|---|---|---|---|
| tools | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral burden. It usefully discloses that the tool does not execute target tools, implying a non-mutating safety profile. It does not describe output format, limitations, or what 'Basic Lite-edition' means operationally.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one compact sentence that front-loads the action and includes a useful safety qualifier. 'Basic Lite-edition' is somewhat redundant and undefined, but the overall structure is tight and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter inspection tool, the description covers the input domain and the non-execution safety aspect. However, with no output schema and no sibling tools, the complete absence of return-behavior information and the undefined 'Lite-edition' scope leave meaningful gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has only property names and 0% description coverage, so the description must supply parameter meaning. It connects the lone 'tools' parameter to MCP tool metadata (names, descriptions, JSON Schemas), which helps. But it adds no constraints, optionality guidance, or format details, so it only partially compensates for the missing schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('inspection' of 'MCP tool names, descriptions and JSON Schemas') and a clear resource scope. It also explicitly distinguishes the tool from executing target tools. 'Basic Lite-edition' is vague, but the core purpose is still clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'without executing target tools' implies this is the safe, lightweight metadata-analysis choice rather than a runtime tool. However, it does not explicitly name alternatives, prerequisites, or conditions under which this tool should or should not be used.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
v0.1.0-lite.1- First observed
analyze_tools
TDQS
Scored across 1 tool
Only one tool exists, so there is zero risk of an agent confusing it with another. The tool's purpose is clearly defined.
The single tool uses a clear verb_noun pattern ('analyze_tools'), and with only one name there is no inconsistency to evaluate.
A single tool is at the lower boundary of acceptable scope. It may be intentional for a 'Lite' edition, but the set feels very thin.
The tool covers the core inspection task (names, descriptions, schemas) without execution, but lacks any auxiliary operations like listing, comparing, or exporting results—though these may be outside the Lite scope.
Maintenance
Related MCP Connectors
Find, vet, and run MCP tools through a secure audited gateway with prompt-injection risk scoring
Security & DLP proxy for MCP: tool-poisoning scans, PII redaction on tool args/results. Beta.
Statically audits MCP tool surfaces for token cost, schema quality, and design issues.
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceScans MCP tools for trust drift, composition risks, and runtime policy violations, with optional LLM explanations.-
- AlicenseNot gradedqualityAmaintenancePerforms explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift without executing tools.1MIT
- FlicenseNot gradedqualityCmaintenanceEnables AI agents to safely call MCP tools through a security gateway that enforces per-role authorization and least-privilege tool scoping.1-
- AlicenseNot gradedqualityBmaintenanceEnables MCP clients to scan tool manifests and server configs for prompt injection, tool poisoning, excessive agency, and other OWASP-mapped security issues directly through the scan_mcp_manifest tool.49 npm71 PyPI1MIT