AIShield Security Scanner
io.github.lm203688/aishieldScans MCP servers for tool poisoning, prompt injection and supply chain risks.
Watch this dependency
Get before/after evidence when observed tools, schemas, authentication access, availability or the endpoint changes.
Inspect evidence and set up a watch Share public evidence report
Score: 100/100
Handshake verified by our own probe.
why this score
Tools · 10
OWASP MCP Top 10 aligned security scan — 235 rules, 5-dimension scoring
Pre-install safety check — pass/block verdict
Prompt injection detection — Chinese + English
Chinese banned words detection — 6 platform rules
Rug pull detection — check if a tool has removed security code or added suspicious changes in recent commits
MCP handshake verification — analyze MCP config, detect npx auto-install, sensitive env vars, oversized tool descriptions, and attempt HTTP handshake
Compact trust digest (aishield-digest/v1) — a few hundred bytes plus a content fingerprint, so an agent can answer 'can I trust this?' every turn without re-pulling the full report. Accepts {configs} …
Vertical-industry risk scan — detect high-risk claims for finance/medical/gov sectors (unlicensed diagnosis, illegal medical device, financial over-promise, etc.)
Agent-First one-click onboarding — register as an Agent, get DID + API Key + quick start guide in a single call
Agent-First quick scan — scan a tool by name and description, no source URL required
How to use
Add to your Claude Desktop / Cursor / Cline MCP config:
{
"mcpServers": {
"aishield_security_scanner": {
"url": "https://aishield.tools/api/v1/mcp",
"transport": "streamable-http"
}
}
}