Is io.github.The-Pixel-Boys/shield-kya safe to use?

io.github.The-Pixel-Boys/shield-kya has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.The-Pixel-Boys/shield-kya?

io.github.The-Pixel-Boys/shield-kya supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.The-Pixel-Boys/shield-kya do?

io.github.The-Pixel-Boys/shield-kya provides 4 tools: Commands, Comparison, LIMITATIONS, Links. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.The-Pixel-Boys/shield-kya?

io.github.The-Pixel-Boys/shield-kya is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.The-Pixel-Boys/shield-kya actively maintained?

io.github.The-Pixel-Boys/shield-kya is actively maintained - last commit was 3 days ago. It has 3 GitHub stars.

io.github.The-Pixel-Boys/shield-kya

@shield-agent/kya

Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval.

3 1.6k/wk 4 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio

4 tools · ~147 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.The-Pixel-Boys/shield-kya is an MCP server that audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval. Its tool list has not been published yet over stdio, requires no API key, and scores 91/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-the-pixel-boys-shield-kya": {
      "args": [
        "-y",
        "@shield-agent/kya"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-the-pixel-boys-shield-kya)](https://mcppedia.org/s/io-github-the-pixel-boys-shield-kya)

Read me

What io.github.The-Pixel-Boys/shield-kya does

Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@shield-agent/kya' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

91/100across 5 weighted dimensions

How we score →

0255075100

−9

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @shield-agent/kya against OSV.dev.

Inventory

Tools (4)

Click any tool to inspect its schema.

~147 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.The-Pixel-Boys/shield-kya safe to use?: io.github.The-Pixel-Boys/shield-kya has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.The-Pixel-Boys/shield-kya?: io.github.The-Pixel-Boys/shield-kya supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.The-Pixel-Boys/shield-kya do?: io.github.The-Pixel-Boys/shield-kya provides 4 tools: Commands, Comparison, LIMITATIONS, Links. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.The-Pixel-Boys/shield-kya?: io.github.The-Pixel-Boys/shield-kya is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.The-Pixel-Boys/shield-kya actively maintained?: io.github.The-Pixel-Boys/shield-kya is actively maintained - last commit was 3 days ago. It has 3 GitHub stars.

Similar servers

Others in other

View all →

io.github.vshulcz/deja-vu95

deja-vu: local memory over the session histories of forty-three coding agents.

1.5k 6

MCP Wordpress Remote95

MCP WordPress Remote proxy server

188 10

Argo95

专门为 agent 打造的 agent 搜索工具，具备多语言搜索能力，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。

260 1

Football Docs94

Searchable football data provider documentation for AI coding agents. Like Context7 for football data.

228 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.The-Pixel-Boys/shield-kya and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-the-pixel-boys-shield-kya": {
      "args": [
        "-y",
        "@shield-agent/kya"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-the-pixel-boys-shield-kya)](https://mcppedia.org/s/io-github-the-pixel-boys-shield-kya)

Read me

What io.github.The-Pixel-Boys/shield-kya does

Audit trail and traceability for AI agents. MCP gate: evaluate, ingest, request approval.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y '@shield-agent/kya' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

`@shield-agent/kya`

Audit trail and traceability for AI agents. See what every coding agent did and check each tool call against policy. KYA records every tool call your coding agents make, on a local dashboard, and by default denies a short list of destructive commands, secret reads and exfiltration (list below). Everything else is recorded, not blocked. Local hooks fail open. Real blocking and human approval run on the MCP policy path against a hosted workspace (the Shield Agent cloud service). One command. Free forever under MIT.

npm i -g @shield-agent/kya@latest && kya start
# Permission denied (EACCES) on Linux? No sudo and no install needed:
npx @shield-agent/kya@latest start

Requires Node.js 22+ (24 recommended). Restart Cursor / Claude Code / Codex once so MCP loads. Hosted desk: shield-agent.com.

CLI and local MCP gate for Shield’s Know Your Agent path.

An agent that asks Shield first gets Allow, Review, or Deny: you register the agent, wrap the tool (or route it through the MCP gate or the hosted plane), and Review waits for a person. Local hooks only record and block the never-list and the guard pack (see Hook interception). Hosted is where enforcement lives. This package does not scan your network. Agents that never call evaluate stay invisible on purpose.

Walkthrough: how you use it.

npx @shield-agent/kya@latest --help
npx @shield-agent/kya@latest --version

--version, -v, -V and kya version print the installed package version on one line and exit 0. They read the local package only: no network, no banner, no config.

Requires Node.js 22+ (engines.node: >=22); 24 is the recommended line. Node 20 and 21 are unsupported but work: the CLI prints a one-line warning. Node 18 and older are unsupported and some features break there (HTTP serve-mcp, the gateway OTLP receiver). Below 22 the CLI offers to install Node 24 for you (via volta / fnm / nvm / brew), reinstall itself, and finish the command. If you decline, it just prints the warning and continues. kya hook never warns or prompts.

It works with any host that speaks MCP or OpenAPI. Vertical packs are optional. Shield is the only policy decision point (the one place that decides Allow or Deny). This gate never auto-approves an irreversible side effect (a change you cannot undo).

If KYA_API_KEY is empty against an authenticated plane, network commands exit non-zero. eval-tool, wrap, and invoke exit 0 on ALLOW, 4 on REQUIRE_APPROVE, and 1 on DENY or unknown, so a line like eval-tool && write cannot skip the gate. wrap runs in observe mode by default, so it exits 0 on REQUIRE_APPROVE too. Set KYA_HOLD=1 or pass --hold to get the 4.

--offline runs sample evaluate without a paid cloud (useful for DENY and REQUIRE_APPROVE demos). Creating an agent is itself a tool: offline, kya.agent.register comes back REQUIRE_APPROVE. Allow, break-glass, and approve mint modes (the modes that create approvals) live on the control plane.

One liner

npm i -g @shield-agent/kya@latest && kya s

... [View full README on GitHub](https://github.com/the-pixel-boys/shield-kya#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

91/100across 5 weighted dimensions

How we score →

0255075100

−9

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @shield-agent/kya against OSV.dev.

Inventory

Tools (4)

Click any tool to inspect its schema.

~147 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.The-Pixel-Boys/shield-kya safe to use?: io.github.The-Pixel-Boys/shield-kya has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.The-Pixel-Boys/shield-kya?: io.github.The-Pixel-Boys/shield-kya supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.The-Pixel-Boys/shield-kya do?: io.github.The-Pixel-Boys/shield-kya provides 4 tools: Commands, Comparison, LIMITATIONS, Links. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.The-Pixel-Boys/shield-kya?: io.github.The-Pixel-Boys/shield-kya is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.The-Pixel-Boys/shield-kya actively maintained?: io.github.The-Pixel-Boys/shield-kya is actively maintained - last commit was 3 days ago. It has 3 GitHub stars.