Shellward MCP Server

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

Local serverstdioPython

What is the Shellward MCP Server?

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

What the server does

想在浏览器里看?npx shellward scan --open(扫完直接打开报告)或 --serve(本地 http://localhost 提供报告)——数据全程不出本机。

  • 8 defense layers — prompt guard, input auditor, tool blocker, output scanner, security gate, outbound guard, data flow guard, session guard
  • DLP model — data returns in full (no redaction), outbound sends are blocked when PII was recently accessed
  • PII detection — SSN, credit cards, API keys (OpenAI/GitHub/AWS), JWT, passwords — plus Chinese ID card (GB 11643 checksum), carrier-validated mobile, UnionPay bank card (Luhn) — precision-tuned to cut false positives
  • 37 injection rules — 20 Chinese + 17 English, risk scoring, mixed-language detection
  • MCP tool-poisoning scan — detects hidden instructions, invisible characters, concealment ("hide from user"), secret-file access & exfiltration hints in a tool's description/parameters
  • MCP rug-pull detection — fingerprints each tool's description on first sight, flags silent changes across runs

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

How to install the Shellward MCP Server

{
  "mcpServers": {
    "shellward": {
      "command": "npx",
      "args": ["-y", "-p", "shellward", "shellward-mcp"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
SHELLWARD_BASELINE_PATHFilesystem location the server is allowed to use.Optional

Frequently asked questions

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.