Mcpshield
@jrooig/mcpshield · by jrooig
A local firewall for AI agents: pauses dangerous MCP tool calls (shell, file deletes, secret exfiltration) for your approval before they run — live in the connection, 100% on your machine.
No known CVEs
MIT license
Actively maintained
Last commit 14d ago
Works with most clients
Transport: stdio
0 tools
Grade F
MCPpedia last refreshed this data
Mcpshield is an MCP server that a local firewall for AI agents: pauses dangerous MCP tool calls (shell, file deletes, secret exfiltration) for your approval before they run — live in the connection, 100% on your machine. Its tool list has not been published yet over stdio, requires no API key, and scores 57/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"mcpshield": {
"args": [
"-y",
"@jrooig/mcpshield"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/mcpshield)
Read me
What Mcpshield does
MCP-Shield is a local firewall for AI agents. It sits inline between your MCP client (Claude Code, Cursor, VS Code, and others) and the tools it can access, inspecting every tool call in real time and stopping dangerous actions—such as shell commands, file deletion, or secret exfiltration—until you choose to approve, deny, or edit them. > This isn't a one-time MCP server scanner. It's a live firewall that monitors every tool invocation as it happens, giving you control before any action reache
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@jrooig/mcpshield' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
57/100across 5 weighted dimensions
0255075100
23
10
14
10
−43
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.devNo known CVEs.
Checked @jrooig/mcpshield against OSV.dev.
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Mcpshield safe to use?
- Mcpshield has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
- How do I install Mcpshield?
- Mcpshield supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Mcpshield?
- Mcpshield is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is Mcpshield actively maintained?
- Mcpshield is actively maintained — last commit was 14 days ago. It has 1 GitHub stars.
Related
Similar servers
Others in ai-ml / security
Dsh MCP Client97MCP client bridge: connects to MCP servers and registers their tools on ctx.tools
196.7k 4
Gpt Researcher97An autonomous agent that conducts deep research on any data using any LLM providers
29.2k 5
Modelcontextprotocol96The official MCP server implementation for the Perplexity API Platform
2.5k 4
I
io.github.mims-harvard/tooluniverse961000+ scientific tools for AI scientists: life science, reserach, literature, and more.
1.7k 4
MCP Security Weekly
Get CVE alerts and security updates for Mcpshield and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.