Skip to content
Back to search
100
MCP live MCP 2025-03-26 streamable-http

AIShield Security Scanner

io.github.lm203688/aishield

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

Watch this dependency

Get before/after evidence when observed tools, schemas, authentication access, availability or the endpoint changes.

Inspect evidence and set up a watch Share public evidence report
Uptime
100.0%
5 direct probes · 30d
Response
2628ms
last probe
Tools
10
callable
Resources
0
readable
Prompts
0
available
Score: 100/100
Handshake verified by our own probe.
why this score
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
10 tools, 0 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
10 items in total; 3 or more earns these points.
pass Describes itself 10/10
78 characters; more than 30 earns these points.

Tools · 10

aishield_scan

OWASP MCP Top 10 aligned security scan — 235 rules, 5-dimension scoring

aishield_guardrail

Pre-install safety check — pass/block verdict

aishield_prompt_check

Prompt injection detection — Chinese + English

aishield_banned_words

Chinese banned words detection — 6 platform rules

aishield_rug_pull

Rug pull detection — check if a tool has removed security code or added suspicious changes in recent commits

aishield_handshake

MCP handshake verification — analyze MCP config, detect npx auto-install, sensitive env vars, oversized tool descriptions, and attempt HTTP handshake

aishield_digest

Compact trust digest (aishield-digest/v1) — a few hundred bytes plus a content fingerprint, so an agent can answer 'can I trust this?' every turn without re-pulling the full report. Accepts {configs} …

aishield_vertical_risk

Vertical-industry risk scan — detect high-risk claims for finance/medical/gov sectors (unlicensed diagnosis, illegal medical device, financial over-promise, etc.)

agent_register

Agent-First one-click onboarding — register as an Agent, get DID + API Key + quick start guide in a single call

agent_quick_scan

Agent-First quick scan — scan a tool by name and description, no source URL required

How to use

Add to your Claude Desktop / Cursor / Cline MCP config:

{
  "mcpServers": {
    "aishield_security_scanner": {
      "url": "https://aishield.tools/api/v1/mcp",
      "transport": "streamable-http"
    }
  }
}