How do I install Mcpshield?

Copy the stdio config for Cursor, Claude Desktop, Claude Code, or VS Code on this page. It uses the publisher's install, not a PlugMCP proxy.

Does Mcpshield need an API key?

No required environment variable is listed on this record.

What transport does Mcpshield use?

Mcpshield runs locally over stdio.

Mcpshield

Q: When was Mcpshield last checked?

Last checked 2026-10-16. Security scanner for MCP servers - detects tool poisoning and injection

by io.github.MCPShield-Dev

Security scanner for MCP servers - detects tool poisoning and injection

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Local command

npx -y [email protected]

Provider

Claude Code

claude mcp add io.github.mcpshield-dev-mcpshield -- npx -y [email protected]

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.mcpshield-dev-mcpshield": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Related MCP

Related skills

View all

MCPShield CLI

Scan MCP servers and GitHub repositories for security vulnerabilities.

Install

npm install -g mcpshield

Setup

Get a free API key at mcpshield.co/settings, then:

mcpshield auth mcp_sk_your_key_here

Usage

# Scan an HTTP MCP server
mcpshield scan --url https://mcp-server.example.com/mcp

# Scan a GitHub repository
mcpshield scan --github https://github.com/user/repo

# JSON output (for CI/CD)
mcpshield scan --url https://mcp-server.example.com/mcp --json

# Filter by severity
mcpshield scan --url https://mcp-server.example.com/mcp --severity high

Exit Codes

0 — Scan completed, no critical findings
1 — Error (invalid key, rate limit, scan failure)
2 — Scan completed with critical findings

Environment Variables

MCPSHIELD_API_KEY — API key (alternative to mcpshield auth)
MCPSHIELD_API_URL — Custom API endpoint (for self-hosted)

License

MIT