ShieldAPI MCP

Instructions

Implementation Reference

• src/index.ts:190-196 (handler)

  The registration and execution logic for the 'shieldapi.full_scan' tool, which calls `callShieldApi` with the 'full-scan' endpoint.

  server.tool(
    'shieldapi.full_scan',
    'Run all security checks on a target (URL, domain, IP, or email). Most comprehensive scan.',
    { target: z.string().describe('Target to scan — URL, domain, IP address, or email') },
    { title: 'Full Security Scan', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
    async ({ target }) => formatResult(await callShieldApi('full-scan', detectTargetType(target)))
  );

• src/index.ts:101-116 (helper)

  The `callShieldApi` function responsible for making the underlying HTTP request to the ShieldAPI service.

  async function callShieldApi(endpoint: string, params: Record<string, string>): Promise<unknown> {
    const url = new URL(`${SHIELDAPI_URL}/api/${endpoint}`);
    for (const [key, value] of Object.entries(params)) {
      url.searchParams.set(key, value);
    }
    if (demoMode) {
      url.searchParams.set('demo', 'true');
    }
  
    const response = await paymentFetch(url.toString());
    if (!response.ok) {
      const body = await response.text();
      throw new Error(`ShieldAPI ${endpoint} failed (${response.status}): ${body.substring(0, 200)}`);
    }
    return response.json();
  }