A side-by-side look at the Scamcheck MCP Server and Shieldly IO MCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose Scamcheck MCP Server for security work as a local process; choose Shieldly IO MCP for security as a local process. You can also run both side by side in one mcpServers block.
SCAMCHECK_API_KEY.scan_message.SHIELDLY_API_KEY.analyze_iam_policy, analyze_cloudformation_template.Rows where the two servers differ are marked.
| Spec | ||
|---|---|---|
| Category | Security | Security |
| Quality signal | 57/100 · Good | 57/100 · Good |
| Install command | Confirmed | Confirmed |
| Transport | Local subprocess (stdio) | Local subprocess (stdio) |
| Auth | Not declared | No auth required |
| Pricing | Not declared | Freemium |
| Required env vars | SCAMCHECK_API_KEY | SHIELDLY_API_KEY |
| Verified owner | Community listing | Community listing |
| GitHub stars | 0 | 0 |
| Directory activity | 2 views 0 installs 0 upvotes | 2 views 0 installs 0 upvotes |
| Tools | 1 | 2 |
| Full listing | View Scamcheck MCP Server | View Shieldly IO MCP |
scan_messageScan a suspicious message, URL, or text for scam indicators using ScamCheck AI. Returns a verdict (Likely Scam / Suspicious / Likely Safe), risk score (0-100), category, confidence, reasons flagged, and recommended actions. Use this whenever a user shares a message they received and wants to know if it's a scam.analyze_iam_policyAI-Powered security analysis of an AWS IAM policy (identity policy or cross-account trust+identity pair). Flags privilege-escalation paths, wildcards, and other over-permissive access. Runs in demo mode (rate-limited, no signup) if SHIELDLY_API_KEY is not set.analyze_cloudformation_templateAI-Powered security analysis of a CloudFormation template — extracts IAM roles/policies and flags over-permissive access. Runs in demo mode (rate-limited, no signup) if SHIELDLY_API_KEY is not set.Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
{
"mcpServers": {
"scamcheck-mcp-server": {
"command": "npx",
"args": [
"scamcheck-mcp-server"
],
"env": {
"SCAMCHECK_API_KEY": "YOUR_SCAMCHECK_API_KEY_HERE"
}
}
}
}
{
"mcpServers": {
"shieldly-io-mcp": {
"command": "npx",
"args": [
"-y",
"@shieldly/mcp"
],
"env": {
"SHIELDLY_API_KEY": "YOUR_SHIELDLY_API_KEY_HERE"
}
}
}
}