MCP Shield
About
Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.
Use this server
Add it to your MCP client. The catalogue lists this config verbatim from its source — it does not run, download, or vouch for the server. Review the command before you run it.
Transportstdio (runs a local command)
Claude Code
claude mcp add mcp-shield -- npx @sophiacave/mcp-shield
Cursor
If the button doesn't open Cursor, use the JSON below — Cursor accepts the same mcpServers config.
VS Code
code --add-mcp '{"name":"mcp-shield","command":"npx","args":["@sophiacave/mcp-shield"]}'
JSON
{
"mcpServers": {
"mcp-shield": {
"command": "npx",
"args": [
"@sophiacave/mcp-shield"
]
}
}
}