RelayShield Security Intelligence

io.github.nzdsf2-gif由 GitHub 帳號 nzdsf2-gif 發布v0.3.0更新於 Oct 24, 2026

Breach, SIM swap, infostealer, domain lookalikes, MCP registry risk, prompt-injection detection.

已驗證STDIO僅桌面金融安全與監控

概覽

AI 產生的概覽

本機 MCP 伺服器，讓助理使用 RelayShield 安全情報查詢：外洩、SIM 卡交換、資訊竊取、仿冒網域、錢包、URL/檔案與憑證暴露。

可以做什麼
查詢電子郵件、OAuth 應用程式、工作階段與非人類憑證的外洩與資訊竊取紀錄，以及公開儲存庫中的密鑰和供應鏈廠商暴露。透過即時電信業者資料檢查 SIM 卡交換與 eSIM 狀態。偵測拼錯與仿冒網域，並評估 MCP 登錄風險。以多個引擎掃描 URL 與檔案的惡意軟體，再輪詢取得判定結果。檢查 EVM 錢包鏈上風險及提示注入相關的外洩暴露。
適用情境
適合在信任某個身分、廠商、網域、MCP 伺服器或代理程式權限之前進行查核，也適合排查可疑 URL、檔案或錢包。面向安全與詐欺調查，而非日常任務。
執行需求
以 Python 套件在本機執行（pip install 或 uvx）。需要 RELAYSHIELD_API_URL。存取需二選一：RELAYSHIELD_API_KEY 中的 RelayShield API 金鑰（免費額度每月 100 次，付費方案每月 29 美元起），或 RELAYSHIELD_X_PAYMENT 中的 x402 付款證明；只設其一。需要連線至 RelayShield API 的網路。
安裝前請注意
多數工具收費：按次付費以 Base 上的 USDC 計價（每次 0.05–0.50 美元），呼叫會花錢。RELAYSHIELD_X_PAYMENT 中的付款證明與 RELAYSHIELD_API_KEY 中的金鑰皆為機密。查詢會將電子郵件、電話號碼、網域、URL、檔案與錢包地址傳送給第三方 API。URL 與檔案掃描為非同步並需輪詢。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 RelayShield Security Intelligence，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

relayshield-mcp

mcp-name: io.github.nzdsf2-gif/relayshield-mcp

RelayShield security intelligence as an MCP server — plug breach detection, SIM swap detection, domain lookalike monitoring, OAuth supply chain watchlist, and URL/file scanning directly into Claude and any MCP-compatible AI agent.

Tools

ToolWhat it doesPAYG price
check_breachEmail breach lookup — 13 billion+ records via HIBP$0.10 USDC
check_sim_swapSIM swap / eSIM detection via live carrier data$0.25 USDC
check_domain_lookalikesTyposquat and lookalike domain detection with cert transparency$0.50 USDC
check_oauth_watchlistOAuth-app breach + stolen-token exposure via HIBP + stealer-log corpus$0.30 USDC
check_infostealerInfostealer malware log lookup via Hudson Rock Cavalier$0.15 USDC
scan_walletEVM wallet on-chain risk check via GoPlus Security$0.10 USDC
scan_urlURL malware/phishing scan across 70+ engines (async)$0.05 USDC
scan_fileBinary malware scan across 70+ AV engines (async)$0.10 USDC
check_scan_resultPoll for verdict after scan_url / scan_filefree
check_mcp_registry_riskTyposquat/IOC/registration-age check for MCP servers$0.35 USDC
check_prompt_injection_breachBreach exposure sourced from AI-agent prompt-injection attacks$0.35 USDC
check_supply_chainUp to 10 vendor domains checked for breach/infostealer exposure$0.10 USDC
check_session_riskActive/reusable stolen session (cookie/token) exposure check$0.30 USDC
check_nhi_exposureNon-human-identity credential exposure — API keys, service tokens, PATs$0.40 USDC
check_secret_scanSecrets exposed in public GitHub repositories$0.35 USDC

check_oauth_watchlist, check_supply_chain, check_session_risk, check_nhi_exposure, and check_secret_scan cover related ground — connected-app, session, and machine-credential exposure for an identity or its supply chain — and are a natural set to use together when vetting an agent's current authority, not just a login.

Access modes

Subscription — API key from api.relayshield.net/developers. All 15 tools available. Free tier: 100 calls/month. Paid tiers from $29/month.

Pay-as-you-go — No API key needed. Pay per check in USDC on Base (x402 protocol). Set RELAYSHIELD_X_PAYMENT with your payment proof. All 15 tools available ($0.05–$0.50/check, check_scan_result free). Call a tool with no payment set to receive pricing and payment instructions.

Discovery — Set neither key nor payment. Tool calls return payment requirements and a subscription link.

Install

bash
pip install relayshield-mcp

Or run without installing:

bash
uvx relayshield-mcp

Configure Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

Subscription (RelayShield API key):

json
{  "mcpServers": {    "relayshield": {      "command": "relayshield-mcp",      "env": {        "RELAYSHIELD_API_URL": "https://api.relayshield.net",        "RELAYSHIELD_API_KEY": "your-relayshield-api-key-here"      }    }  }}

Pay-as-you-go (x402 USDC on Base):

json
{  "mcpServers": {    "relayshield": {      "command": "relayshield-mcp",      "env": {        "RELAYSHIELD_API_URL": "https://api.relayshield.net",        "RELAYSHIELD_X_PAYMENT": "your-x402-payment-proof-here"      }    }  }}

Quit and relaunch Claude Desktop after editing.

Configure Claude Code (CLI)

bash
claude mcp add relayshield \  --command relayshield-mcp \  --env RELAYSHIELD_API_URL=https://api.relayshield.net \  --env RELAYSHIELD_API_KEY=your-relayshield-api-key-here

Usage examples

Once configured, ask Claude:

Check whether [email protected] has been breached.
Has there been a SIM swap on +14155551234?
Check acme.com for lookalike domains.
Are any OAuth apps connected to [email protected] in a recent breach?
Scan this URL for malware: https://suspicious-link.example.com

For URL and file scans, Claude automatically polls check_scan_result every 5 seconds until the verdict is ready.

Environment variables

VariableDescription
RELAYSHIELD_API_URLAPI Gateway base URL (required)
RELAYSHIELD_API_KEYRelayShield subscription key (subscription mode) — get one at api.relayshield.net/developers
RELAYSHIELD_X_PAYMENTx402 payment proof — USDC on Base (pay-as-you-go mode)

Set RELAYSHIELD_API_KEY or RELAYSHIELD_X_PAYMENT — not both. API key takes priority if both are set.

Links

來源：README.md，提交 85a11ac

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

2
  1. v0.3.0最新Sep 27, 2026
  2. v0.2.12Sep 16, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。