MCP Shield

MCP Shield

[CI]

[License: MIT] [Python 3.10+] [Tests: 28 passing] [MCP Compatible]

Open-source security scanner for MCP servers. 20 rules across 6 categories. Scan any server in seconds. Get a grade from A to F.

36.7% of MCP servers are SSRF-vulnerable (BlueRock, 2026). 82% have path traversal flaws. Only 17% are production-ready. MCP Shield finds the vulnerabilities before attackers do.

Quick Start

git clone https://github.com/sophiacave/mcp-shieldcd mcp-shield
# Scan a filepython3 src/cli.py scan path/to/mcp_server.py
# Scan a projectpython3 src/cli.py scan path/to/mcp-project/

What It Checks (20 Rules)

Testing

python3 tests/test_integration.py# 28 tests, 0 failures

MCP Server Integration

Add to ~/.claude/mcp.json:

{  "mcpServers": {    "mcp-shield": {      "command": "python3",      "args": ["/path/to/mcp-shield/src/mcp_server.py"]    }  }}

Claude Code tools: shield_scan_file, shield_scan_directory, shield_scan_code

Example Output

MCP Shield: my-server/ — 3 finding(s)
  [CRIT] SSRF-01: Potential SSRF: Dynamic URL from user input    requests call with dynamic URL that may include user input    Location: server.py:45    Fix: Validate URL against allowlist. Block internal IPs.    CWE: CWE-918
  [HIGH] INJ-03: Command injection: subprocess with shell=True    subprocess called with shell=True. User input in args = RCE.    Location: tools.py:112    Fix: Use subprocess with shell=False and pass args as list.    CWE: CWE-78
  [MED] AUTH-01: No authentication detected on tool handlers    MCP tool handlers found but no auth logic detected    Fix: Add authentication middleware.    CWE: CWE-306
Grade: F | 1 critical, 1 high, 1 medium

Features

• Zero dependencies — Pure Python, no pip installs required
• 20 security rules across SSRF, path traversal, injection, auth, config, and logging
• CWE references — Every finding maps to a Common Weakness Enumeration ID
• Actionable fixes — Each finding includes specific remediation steps
• A-F grading — Instant security posture assessment
• Dual mode — Run as CLI or as an MCP server inside Claude Code
• Fast — Scans a typical MCP server in under 1 second

Why This Exists

The MCP ecosystem has 9,400+ servers and 97M monthly SDK downloads. Security tooling hasn't kept up. We built MCP Shield because every MCP server deployed without a security scan is a liability.

Built by Like One, a 501(c)(3) nonprofit. Security tooling should be free.

License

MIT — Like One