Security intelligence tools for AI agents — prompt injection detection, skill security scanning, URL/domain/IP/email/password checks.
ShieldAPI MCP (shieldapi-mcp) is an MCP project maintained in the alberthild/shieldapi-mcp repository. The maintainer describes its purpose as “Security intelligence tools for AI agents — prompt injection detection, skill security scanning, URL/domain/IP/email/password checks”. Read the project documentation for the complete scope.
The documented npm package is shieldapi-mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
The example declares SHIELDAPI_WALLET_PRIVATE_KEY. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| check_prompt | Detect prompt injection (208 patterns, 8 languages, 4 decoders, <100ms) |
| scan_skill | Scan AI skills/plugins for supply chain attacks (204 patterns, 8 risk categories) |
| check_url | URL safety — malware, phishing (URLhaus + heuristics) |
| check_password | Password breach check — SHA-1 hash against 900M+ HIBP records |
| check_password_range | HIBP k-Anonymity prefix lookup |
| check_domain | Domain reputation — DNS, blacklists, SPF/DMARC, SSL |
| check_ip | IP reputation — blacklists, Tor exit node, reverse DNS |
| check_email | Email breach lookup via HIBP |
| full_scan | All checks combined on a single target |
{
"mcpServers": {
"shieldapi": {
"command": "npx",
"args": [
"-y",
"shieldapi-mcp"
],
"env": {
"SHIELDAPI_WALLET_PRIVATE_KEY": "YOUR_SHIELDAPI_WALLET_PRIVATE_KEY"
}
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
| Variable | Description | Required |
|---|---|---|
| SHIELDAPI_WALLET_PRIVATE_KEY | Declared in the maintainer’s client configuration. | Check documentation |
Your assistant inside the workspace — read channels, search history, post messages and tame the noise.
Build a programmable telecommunications stack for connecting telephony services with the Internet via a cloud-based utility.
Receipt tracker with no friction: receipts arrive by email and file themselves
This project implements a Model Context Protocol (MCP) server that enables sending Telegram messages through AI assistants like Claude Desktop.
Automated resume screening for small businesses: post jobs, rank applicants, email candidates.
Firmfold: company enrichment by domain/email/name: logo, tech, contacts, jobs, firmographics.