Skip to main content
Glama
Turkeyz1

AgentShield MCP Inspector Lite

by Turkeyz1

AgentShield MCP Inspector Lite

Free public edition of AgentShield for basic MCP tool-metadata security inspection.

Publisher: Mahmoud Hisham
Edition: Lite
Version: 0.1.0-lite.1
Runtime: Node.js 20+

What Lite does

AgentShield Lite analyzes MCP tool names, descriptions, and input schemas and returns explainable verdicts:

  • SAFE

  • REVIEW

  • HIGH RISK

Lite includes a deliberately limited starter ruleset for:

  • Shell / OS command execution

  • Destructive file operations

  • Filesystem reads

  • External network access

  • Secrets / credential access

It supports static JSON scanning and also runs as an MCP server exposing the analyze_tools tool.

Related MCP server: MCP Tool Security Inspector

What is reserved for AgentShield Pro

The paid Pro edition is being developed separately and is not included in this public repository. Planned Pro capabilities include:

  • Direct stdio MCP discovery

  • Expanded security rules

  • Allowlist / blocklist policy files

  • Trusted-domain policy

  • Better network classification

  • CI/CD exit codes and security gates

  • Scan history and scan diff

  • SARIF / advanced reporting

  • Source and package inspection

  • Remote MCP scanning

  • Advanced evidence and policy controls

Install

npm install

Test

npm test

Try the sample

npm run scan:sample

Scan tool metadata from JSON

node src/cli.js scan-json examples/sample-tools.json --md-out report.md --json-out report.json

Run Lite as an MCP server

node src/index.js

The Lite MCP server exposes:

  • analyze_tools

Security note

AgentShield performs heuristic metadata/schema inspection. A SAFE verdict is not proof that software is safe.

Pro

AgentShield Pro is kept outside this public repository. A purchase link will be added when the first Pro release is ready.

Ownership

Copyright © 2026 Mahmoud Hisham. All rights reserved. See LICENSE.txt.

Available Tools

1 tool
analyze_toolsAnalyze MCP tool metadataB

Basic Lite-edition inspection of MCP tool names, descriptions and JSON Schemas without executing target tools.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolsYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the behavioral burden. It usefully discloses that the tool does not execute target tools, implying a non-mutating safety profile. It does not describe output format, limitations, or what 'Basic Lite-edition' means operationally.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one compact sentence that front-loads the action and includes a useful safety qualifier. 'Basic Lite-edition' is somewhat redundant and undefined, but the overall structure is tight and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter inspection tool, the description covers the input domain and the non-execution safety aspect. However, with no output schema and no sibling tools, the complete absence of return-behavior information and the undefined 'Lite-edition' scope leave meaningful gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has only property names and 0% description coverage, so the description must supply parameter meaning. It connects the lone 'tools' parameter to MCP tool metadata (names, descriptions, JSON Schemas), which helps. But it adds no constraints, optionality guidance, or format details, so it only partially compensates for the missing schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('inspection' of 'MCP tool names, descriptions and JSON Schemas') and a clear resource scope. It also explicitly distinguishes the tool from executing target tools. 'Basic Lite-edition' is vague, but the core purpose is still clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'without executing target tools' implies this is the safe, lightweight metadata-analysis choice rather than a runtime tool. However, it does not explicitly name alternatives, prerequisites, or conditions under which this tool should or should not be used.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 1 tool updatev0.1.0-lite.1
    • First observedanalyze_tools

TDQS

A3.7/5.0

Scored across 1 tool

Disambiguation5/5

Only one tool exists, so there is zero risk of an agent confusing it with another. The tool's purpose is clearly defined.

Naming Consistency5/5

The single tool uses a clear verb_noun pattern ('analyze_tools'), and with only one name there is no inconsistency to evaluate.

Tool Count3/5

A single tool is at the lower boundary of acceptable scope. It may be intentional for a 'Lite' edition, but the set feels very thin.

Completeness4/5

The tool covers the core inspection task (names, descriptions, schemas) without execution, but lacks any auxiliary operations like listing, comparing, or exporting results—though these may be outside the Lite scope.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    A
    maintenance
    Performs explainable, deterministic static analysis of MCP tool metadata to detect misleading instructions, concealed capabilities, and schema drift without executing tools.
    1
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP clients to scan tool manifests and server configs for prompt injection, tool poisoning, excessive agency, and other OWASP-mapped security issues directly through the scan_mcp_manifest tool.
    49 npm
    71 PyPI
    1
    MIT