Breach detection, SIM swap, domain lookalikes, OAuth watchlist, URL scanning. Subscription or PAYG.
Config is the same across clients — only the file and path differ.
{
"mcpServers": {
"io-github-nzdsf2-gif-relayshield-mcp": {
"command": "<see-readme>",
"args": []
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Breach detection, SIM swap, domain lookalikes, OAuth watchlist, URL scanning. Subscription or PAYG.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories — click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
This server is missing a description. Tools and install config are also missing.If you've used it, help the community.
Add informationBe the first to review
Have you used this server?
Share your experience — it helps other developers decide.
Sign in to write a review.
Others in security
AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.
An evil MCP server used for redteam testing
MCP server for Atomic Red Team
Signed receipts for agent, API, and MCP interactions. Portable and offline-verifiable.
MCP Security Weekly
Get CVE alerts and security updates for io.github.nzdsf2-gif/relayshield-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
mcp-name: io.github.nzdsf2-gif/relayshield-mcp
RelayShield security intelligence as an MCP server — plug breach detection, SIM swap detection, domain lookalike monitoring, OAuth supply chain watchlist, and URL/file scanning directly into Claude and any MCP-compatible AI agent.
| Tool | What it does | PAYG price |
|---|---|---|
check_breach | Email breach lookup — 13 billion+ records via HIBP | $0.10 USDC |
check_sim_swap | SIM swap / eSIM detection via live carrier data | $0.25 USDC |
check_domain_lookalikes | Typosquat and lookalike domain detection with cert transparency | $0.50 USDC |
check_oauth_watchlist | OAuth supply chain breach check — Slack, GitHub, Notion, Zapier, and more | $0.15 USDC |
scan_url | URL malware/phishing scan across 70+ engines (async) | subscription only |
scan_file | Binary malware scan across 70+ AV engines (async) | subscription only |
check_scan_result | Poll for verdict after scan_url / scan_file | free |
Subscription — API key from RapidAPI. All 7 tools available. Free tier: 100 calls/month. Paid tiers from $29/month.
Pay-as-you-go — No API key needed. Pay per check in USDC on Base (x402 protocol). Set RELAYSHIELD_X_PAYMENT with your payment proof. 4 tools available ($0.10–$0.50/check). Call a tool with no payment set to receive pricing and payment instructions.
Discovery — Set neither key nor payment. Tool calls return payment requirements and a subscription link.
pip install relayshield-mcp
Or run without installing:
uvx relayshield-mcp
Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
Subscription (RapidAPI key):
{
"mcpServers": {
"relayshield": {
"command": "relayshield-mcp",
"env": {
"RELAYSHIELD_API_URL": "https://xhh3tfrhng.execute-api.us-east-1.amazonaws.com/prod",
"RELAYSHIELD_API_KEY": "your-rapidapi-key-here"
}
}
}
}
Pay-as-you-go (x402 USDC on Base):
{
"mcpServers": {
"relayshield": {
"command": "relayshield-mcp",
"env": {
"RELAYSHIELD_API_URL": "https://xhh3tfrhng.execute-api.us-east-1.amazonaws.com/prod",
"RELAYSHIELD_X_PAYMENT": "your-x402-payment-proof-here"
}
}
}
}
Quit and relaunch Claude Desktop after editing.
claude mcp add relayshield \
--command relayshield-mcp \
--env RELAYSHIELD_API_URL=https://xhh3tfrhng.execute-api.us-east-1.amazonaws.com/prod \
--env RELAYSHIELD_API_KEY=your-rapidapi-key-here
Once configured, ask Claude:
Check whether user@example.com has been breached.
Has there been a SIM swap on +14155551234?
Check acme.com for lookalike domains.
Are any OAuth apps connected to user@example.com in a recent breach?
Scan this URL for malware: https://suspicious-link.example.com
For URL and file scans, Claude automatically polls check_scan_result every 5 seconds until the verdict is ready.
| Variable | Description |
|---|---|
RELAYSHIELD_API_URL | API Gateway base URL (required) |
RELAYSHIELD_API_KEY | RapidAPI subscription key (subscription mode) |
RELAYSHIELD_X_PAYMENT | x402 payment proof — USDC on Base (pay-as-you-go mode) |
Set RELAYSHIELD_API_KEY or RELAYSHIELD_X_PAYMENT — not both. API key takes priority if both are set.