Show HN: MCP-Shield – Detect security issues in MCP servers
Published on: 2025-04-28 18:15:01
MCP-Shield scans your installed MCP (Model Context Protocol) servers and detects vulnerabilities like tool poisoning attacks, exfiltration channels and cross-origin escalations.
Usage
Get help:
npx mcp-shield -h
Run default scan:
npx mcp-shield
With Claude API key for enhanced analysis:
npx mcp-shield --claude-api-key YOUR_API_KEY
With a specific config file:
npx mcp-shield --path ~ /path/to/config.json
With the --identify-as flag:
npx mcp-shield --identify-as claude-desktop
Options:
--path : Scan a specific path for MCP configuration files ( .mcp/*.json , claude_desktop_config.json ). If omitted, scans standard locations ( ~/.config/.mcp , ~/Library/Application Support/Claude , ~/.continue ).
: Scan a specific path for MCP configuration files ( , ). If omitted, scans standard locations ( , , ). --claude-api-key : (Optional) Provide an Anthropic Claude API key for enhanced vulnerability analysis using AI.
: (Optional) Provide an Anthropic Claude API key for
... Read full article.