{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_j8a6k4gwtdhs","handle":"mcp-shield-cli","url":"https://wellknown.network/agents/mcp-shield-cli","links":{"self":"https://wellknown.network/agents/mcp-shield-cli/record.json","html":"https://wellknown.network/agents/mcp-shield-cli","markdown":"https://wellknown.network/agents/mcp-shield-cli/record.md","api":"https://wellknown.network/api/v1/agents/mcp-shield-cli","status":"https://wellknown.network/api/v1/agents/mcp-shield-cli/status","claim":"https://wellknown.network/agents/mcp-shield-cli/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-shield-cli/claim.json","badge":"https://wellknown.network/agents/mcp-shield-cli/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-shield-cli/history","tools":"https://wellknown.network/api/v1/agents/mcp-shield-cli/tools"},"ard":{"identifier":"urn:air::server:mcp-shield-cli","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-shield-cli","summary":"Security scanner, runtime proxy, and audit logger for MCP servers","description":"# MCP Shield\n\n[![License: Apache 2.0](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![Python 3.11+](https://img.shields.io/badge/python-3.11+-blue.svg)](https://www.python.org/downloads/)\n\nLike [Bandit](https://github.com/PyCQA/bandit) for Python code, but for MCP servers.\n\nSecurity scanner, runtime proxy, and audit logger for [Model Context Protocol](https://modelcontextprotocol.io/) servers.\n\n## Install\n\n```bash\npip install mcp-shield-cli\n```\n\nRequires Python 3.11+ and Node.js (for npx-based MCP servers).\n\n## Usage\n\n### `mcp-shield test` — scan a server\n\n```bash\n# Scan a local stdio server\nmcp-shield test \"npx -y @modelcontextprotocol/server-filesystem /tmp\"\n\n# Scan a remote HTTP server\nmcp-shield test \"http://localhost:8080/mcp\"\n\n# Run only specific suites (compliance, security, advisory, or all)\nmcp-shield test \"npx server\" --suite security\nmcp-shield test \"npx server\" --suite security --suite advisory\n\n# Pass environment variables to the server process\nmcp-shield test \"npx server\" --env API_KEY=sk-123 --env DB_URL=postgres://host/db\n\n# Save JSON report to file\nmcp-shield test \"npx server\" --output report.json\n\n# JSON to stdout (for piping)\nmcp-shield test \"npx server\" --format json\n\n# SARIF output (for GitHub Code Scanning)\nmcp-shield test \"npx server\" --format sarif\n\n# SARIF to file (can combine with any --format)\nmcp-shield test \"npx server\" --sarif-output report.sarif\n\n# Both terminal and JSON output\nmcp-shield test \"npx server\" --format both --output report.json\n\n# CI mode: exit code 1 if any high+ severity check fails\nmcp-shield test \"npx server\" --fail-on high\n\n# Enable ML-based poisoning detection (DeBERTa, slower but more accurate)\nmcp-shield test \"npx server\" --ml\n\n# Set connection/check timeout (default 30s)\nmcp-shield test \"npx server\" --timeout 10\n```\n\nExample output:\n\n```\n Check        | Result | Severity | Message\n COMP-001     |  PASS  | critical | Handshake OK\n COMP-002     |  PASS  | er…","publisher":null,"homepage":"https://github.com/thuggeelya/mcp-shield","repository":"https://github.com/thuggeelya/mcp-shield","version":"0.2.3","license":null,"protocols":["mcp"],"tags":["audit","mcp","model-context-protocol","proxy","security","testing"],"pricing":null,"endpoints":[{"url":"pypi:mcp-shield-cli","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"code.testing","name":"Testing","confidence":1,"provenance":"declared"},{"slug":"dev.filesystem","name":"Filesystem","confidence":0.882,"provenance":"derived"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.779,"provenance":"derived"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-shield-cli","registry":"pypi","observedAt":"2026-10-28T14:24:33.670Z","publishedAt":"2026-03-05T22:28:03.804223Z","latestVersion":"0.2.3"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-shield-cli","url":"https://pypi.org/project/mcp-shield-cli/","firstSeenAt":"2026-09-10T04:22:59.272Z","fetchedAt":"2026-10-28T14:22:54.268Z","normalizedAt":"2026-10-28T14:22:54.268Z"}]},"firstSeenAt":"2026-09-10T04:22:59.272Z","updatedAt":"2026-10-28T14:24:33.670Z"}