MCP Shield
io.github.sophiacave/mcp-shield
Security scanner for MCP servers. SSRF, path traversal, injection, auth, secrets. Grade A-F.
Description as published in the official MCP registry.
What we measured
| Endpoint | None listed (runs locally) | registry |
|---|---|---|
| GitHub stars | 0 | github.com/sophiacave/mcp-shield |
| Last push | 2026-06-09 | GitHub API |
| Registry version | 1.0.7 · active · updated 2026-06-09 | registry |
| Package | npm: @sophiacave/mcp-shield | registry |
Signed reports
No signed reports yet. A report carries a signed decision record from the reporter's gate, so it shows a real call went through, not just an opinion. How to file one.
Connect
npx -y @sophiacave/mcp-shieldCommands are built from the registry entry. Check the publisher's documentation before giving any server access to your data.
Related servers
- HORIZON SHIELD Construction Cost Data: JCCDB (Japan) and USCCDB (United States) Public construction cost data for Japan and the U.S., each row with its source URL and…
- HORIZON SHIELD: construction and renovation estimate auditor Fair-price checks for Japanese renovation quotes, with sources and recomputable records.
- HORIZON SHIELD: Construction Estimate Auditor for Japan (KIRA) Agent intake desk for property renovation. Read only, CORS open, fail closed, receipts…
- HORIZON SHIELD YAKUMO (verified contractor directory) Neutral, verification-gated MCP directory of Japan construction contractors…
- triageshield Verify a vuln report's file/line/function claims against a real GitHub repo.
- mcp-shield Trust verification for MCP servers. Check scores, scan for security issues, search 4,200+…
Badge for your README
Shows the result of our latest check and links back to this page.
[](https://openforallofus.com/tools/io.github.sophiacave/mcp-shield)Agents can read this page as data: MCP endpoint https://openforallofus.com/api/mcp, tool get_tool with name io.github.sophiacave/mcp-shield.