# alberthild/shieldapi-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/alberthild/shieldapi-mcp  
**GitHub Stars:** 1  
**Views:** 4  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/alberthild-shieldapi-mcp

## Description
Security intelligence for AI agents: password breach checks (900M+ HIBP hashes), email/domain/IP/URL reputation, prompt injection detection (200+ patterns), and skill supply chain scanning. Pay-per-request via x402 USDC micropayments or free demo mode, no API key needed.

## Tools
Capabilities this server exposes over MCP:

- **check_url** — Check a URL for malware, phishing, and other threats. Uses URLhaus + heuristic analysis.
- **check_password** — Check if a password hash (SHA-1) has been exposed in known data breaches via HIBP.
- **check_password_range** — Look up a SHA-1 hash prefix in the HIBP k-Anonymity database.
- **check_domain** — Check domain reputation: DNS records, blacklists (Spamhaus, SpamCop, SORBS), SPF/DMARC, SSL.
- **check_ip** — Check IP reputation: blacklists, Tor exit node detection, reverse DNS.
- **check_email** — Check if an email address has been exposed in known data breaches via HIBP.
- **full_scan** — Run all security checks on a target (URL, domain, IP, or email). Most comprehensive scan.
- **scan_skill** — Scan an AI agent skill/plugin for security issues across 8 risk categories (Snyk ToxicSkills taxonomy). Checks for prompt injection, malicious code, suspicious downloads, credential handling, secret detection, third-party content, unverifiable dependencies, and financial access patterns. Static analysis only — no code execution. Returns risk score (0-100), severity-ranked findings with file locations, and human-readable summary.
- **check_prompt** — Detect prompt injection in text. Analyzes across 4 categories (direct injection, encoding tricks, exfiltration, indirect injection) with 200+ detection patterns. Designed for real-time inline usage before processing untrusted user input. Returns boolean verdict, confidence score (0-1), matched patterns with evidence, and decoded content if encoding obfuscation was detected. Response time <100ms p95.
- **check_mcp_trust** — Get a multi-signal trust score for any MCP server endpoint. Analyzes security (domain reputation, SSL, SPF/DMARC), injection risk (tool description scanning), supply chain safety (toxic skill categories), reliability (uptime, latency, protocol compliance), and on-chain reputation (AgentProof ERC-8004). Returns composite trust score (0-100), tier (platinum/gold/silver/bronze/unranked), and detailed per-signal breakdown. Use this to evaluate whether an MCP server is safe to connect to.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "shieldapi-mcp": {
    "command": "npx",
    "args": ["-y","shieldapi-mcp"],
    "env": {
      "SHIELDAPI_URL": "",
      "SHIELDAPI_WALLET_PRIVATE_KEY": ""
    }
  }
}
```

**Requires environment variables:** `SHIELDAPI_URL`, `SHIELDAPI_WALLET_PRIVATE_KEY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What alberthild/shieldapi-mcp MCP server does

The alberthild/shieldapi-mcp MCP server provides security-oriented tools for agents handling potentially unsafe content or infrastructure. It can inspect URLs for malware and phishing indicators, evaluate domains and IP addresses using reputation and network signals, and check email addresses or SHA-1 password hashes against breach data associated with Have I Been Pwned. The `full_scan` tool combines relevant checks for a URL, domain, IP address, or email target.

It also covers AI-specific risks. `check_prompt` analyzes text for prompt injection across direct instruction overrides, encoding tricks, exfiltration attempts, and indirect injection patterns. `scan_skill` statically reviews an AI skill or plugin for eight risk categories, including malicious code, credential handling, secrets, suspicious downloads, dependencies, and financial access. `check_mcp_trust` returns a composite assessment of an MCP endpoint using security, injection, supply-chain, reliability, and on-chain reputation signals.

## How it works

The MCP process runs locally and forwards tool requests to the ShieldAPI API. Calls can run in demo mode without a wallet, subject to daily per-endpoint limits. The README describes 10 free calls per day for most endpoints, with lower limits for some operations such as password-prefix checks, full scans, and skill scans.

For paid access, the process uses the x402 payment flow. When the API requests payment, the server can use USDC on Base from the configured EVM wallet and then return the requested security result. Listed paid prices range from $0.001 to $0.02 per request, depending on the endpoint.

## Setup and configuration

Install and run the server with:

```bash
npx shieldapi-mcp
```

Claude Desktop and Cursor can configure the same command with `-y` and the package name `shieldapi-mcp`. Leaving the wallet variable unset selects the free demo mode. Paid usage requires USDC on Base and the wallet's EVM private key.

Supported configuration variables include:

- `SHIELDAPI_URL`: API base URL; the documented default is `https://shield.vainplex.dev`.
- `SHIELDAPI_WALLET_PRIVATE_KEY`: EVM private key used for x402 payments. It is optional for demo access.

## Tools and capabilities

- `check_url`: checks URL malware and phishing risk using URLhaus and heuristic analysis.
- `check_password` and `check_password_range`: perform HIBP breach checks for SHA-1 hashes or hash prefixes.
- `check_domain`: examines DNS, blacklists, SPF, DMARC, and SSL signals.
- `check_ip`: checks blacklists, Tor exit-node status, and reverse DNS.
- `check_email`: checks whether an email address appears in known breaches.
- `full_scan`: combines applicable checks for one target.
- `check_prompt`: returns an injection verdict, confidence, matched evidence, and decoded content when obfuscation is found.
- `scan_skill`: reports a 0–100 risk score and severity-ranked findings with file locations; it does not execute code.
- `check_mcp_trust`: produces a 0–100 trust score, tier, and per-signal breakdown for an MCP endpoint.

## Limitations and notes

Results depend on the external ShieldAPI service and its underlying data sources. The skill scanner performs static analysis only, so it does not observe behavior by executing the submitted code. Free access is rate-limited by endpoint and does not provide unlimited usage. Paid requests require a funded wallet, USDC on Base, and safe handling of the configured private key. The documented prompt detector is intended for inline screening before processing untrusted text and reports a confidence score rather than a guarantee of correctness.

The alberthild/shieldapi-mcp MCP server is released under the MIT license. Its API base URL, x402 discovery document, and OpenAPI document are documented in the project README for clients that need direct service information.

For agents evaluating whether to connect to another MCP service, the alberthild/shieldapi-mcp MCP server's trust check is the relevant tool: it combines endpoint security, tool-description injection analysis, supply-chain signals, reliability, and AgentProof ERC-8004 reputation into one assessment. That score should be treated as an input to a connection decision, not as proof that an endpoint is safe.

_Full upstream README: https://allmcps.com/mcp/alberthild-shieldapi-mcp/readme_