{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_cf4u2gmr6a9d","handle":"mcp-shield-audit","url":"https://wellknown.network/agents/mcp-shield-audit","links":{"self":"https://wellknown.network/agents/mcp-shield-audit/record.json","html":"https://wellknown.network/agents/mcp-shield-audit","markdown":"https://wellknown.network/agents/mcp-shield-audit/record.md","api":"https://wellknown.network/api/v1/agents/mcp-shield-audit","status":"https://wellknown.network/api/v1/agents/mcp-shield-audit/status","claim":"https://wellknown.network/agents/mcp-shield-audit/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-shield-audit/claim.json","badge":"https://wellknown.network/agents/mcp-shield-audit/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-shield-audit/history","tools":"https://wellknown.network/api/v1/agents/mcp-shield-audit/tools"},"ard":{"identifier":"urn:air::server:mcp-shield-audit","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-shield-audit","summary":"Security audit framework for MCP (Model Context Protocol) servers","description":"<p align=\"center\"> \n  <h1 align=\"center\">MCP Shield</h1> \n  <p align=\"center\"> \n    <strong>Security audit framework for MCP servers — before you install them.</strong> \n  </p> \n  <p align=\"center\"> \n    <a href=\"https://pypi.org/project/mcp-shield-audit/\"><img src=\"https://img.shields.io/pypi/v/mcp-shield-audit?color=blue&label=PyPI\" alt=\"PyPI\"></a> \n    <a href=\"https://github.com/GaboITB/mcp-shield/actions\"><img src=\"https://img.shields.io/github/actions/workflow/status/GaboITB/mcp-shield/ci.yml?label=CI\" alt=\"CI\"></a> \n    <a href=\"https://github.com/GaboITB/mcp-shield/blob/master/LICENSE\"><img src=\"https://img.shields.io/github/license/GaboITB/mcp-shield\" alt=\"License\"></a> \n    <img src=\"https://img.shields.io/pypi/pyversions/mcp-shield-audit\" alt=\"Python\"> \n    <img src=\"https://img.shields.io/badge/dependencies-0-brightgreen\" alt=\"Zero deps\"> \n  </p> \n</p> \n \n--- \n \nMCP Shield scans MCP (Model Context Protocol) servers **before installation** to detect supply chain attacks, prompt injection, tool poisoning, and rug pulls. It analyzes source code, MCP metadata, and runtime behavior across **3 detection surfaces** with **17 detectors**, **359 tests**, and **zero dependencies**. Battle-tested on **31+ real-world MCP servers**. \n \n> **Why?** MCP servers run with your AI agent's permissions. A malicious MCP can exfiltrate your codebase, inject prompts, or run arbitrary commands — all while appearing legitimate. MCP Shield catches these threats *before* they reach your agent. \n \n## Quick Start \n \n```bash \npip install mcp-shield-audit \n \n# Scan a GitHub repo \nmcp-shield scan https://github.com/user/mcp-server \n \n# Scan all your installed MCPs at once \nmcp-shield scan --all \n \n# Full audit: static + live protocol + Docker sandbox + bait-and-switch \nmcp-shield scan https://github.com/user/mcp-server --full \n``` \n \n**Example output:** \n \n``` \n+== MCP Shield ==========================================+ \n| my-mcp           12 tools   Grade: B  Score: 37       | \n| Criti…","publisher":null,"homepage":"https://github.com/GaboITB/mcp-shield","repository":"https://github.com/GaboITB/mcp-shield","version":"3.0.1","license":null,"protocols":["mcp"],"tags":["mcp","security","audit","ai","llm","supply-chain"],"pricing":null,"endpoints":[{"url":"pypi:mcp-shield-audit","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.825,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-shield-audit","registry":"pypi","observedAt":"2026-11-09T18:26:11.637Z","publishedAt":"2026-04-05T12:53:08.673857Z","latestVersion":"3.0.1"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-shield-audit","url":"https://pypi.org/project/mcp-shield-audit/","firstSeenAt":"2026-09-10T04:22:59.025Z","fetchedAt":"2026-11-09T18:24:55.214Z","normalizedAt":"2026-11-09T18:24:55.214Z"}]},"firstSeenAt":"2026-09-10T04:22:59.025Z","updatedAt":"2026-11-09T18:26:11.637Z"}