trackmcp
Back to directory
MCPShield-Dev

mcpshield

View on GitHub

MCPShield

0 stars TypeScriptOthers Updated Apr 13, 2026

Documentation

MCPShield CLI

Scan MCP servers and GitHub repositories for security vulnerabilities.

Powered by MCPShield — the MCP security scanner with 59+ detection rules covering the OWASP MCP Top 10.

Install

bash
npm install -g mcpshield

Setup

Get a free API key at mcpshield.co/settings, then:

bash
mcpshield auth mcp_sk_your_key_here

Usage

bash
# Scan an HTTP MCP server
mcpshield scan --url https://mcp-server.example.com/mcp

# Scan a GitHub repository
mcpshield scan --github https://github.com/user/repo

# JSON output (for CI/CD)
mcpshield scan --url https://mcp-server.example.com/mcp --json

# Filter by severity
mcpshield scan --url https://mcp-server.example.com/mcp --severity high

Exit Codes

  • `0` — Scan completed, no critical findings
  • `1` — Error (invalid key, rate limit, scan failure)
  • `2` — Scan completed with critical findings

Environment Variables

  • `MCPSHIELD_API_KEY` — API key (alternative to `mcpshield auth`)
  • `MCPSHIELD_API_URL` — Custom API endpoint (for self-hosted)

License

MIT

Frequently asked questions

What is mcpshield?

mcpshield is MCPShield

How do I install mcpshield?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is mcpshield open source?

Yes — it is hosted on GitHub at https://github.com/MCPShield-Dev/mcpshield.

Related MCP tools

modelcontextprotocolservers

Model Context Protocol Servers

90,051 TypeScript
bytedanceUI-TARS-desktop

The Open-Source Multimodal AI Agent Stack: Connecting Cutting-Edge AI Models and Agent Infra

38,840 TypeScript
agentvlmvision+11
czlonkowskin8n-mcp

A MCP for Claude Desktop / Claude Code / Windsurf / Cursor to build n8n workflows for you

22,825 TypeScript
mcpmcp-servern8n+1
glipsFigma-Context-MCP

MCP server to provide Figma layout information to AI coding agents like Cursor

15,766 TypeScript
aicursorfigma+2
elie222inbox-zero

The world's best AI personal assistant for email. Open source app to help you reach inbox zero fast.

12,148 TypeScript
aiemailnextjs+14
instantdbinstant

Instant is the best backend for AI-coded apps. You get auth, permissions, storage, presence, and streams — everything you need to ship apps your users will love.

10,507 TypeScript

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP