Shellward MCP Server

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

Local serverstdioPython

What is the Shellward MCP server?

Connect Shellward to Claude, Cursor or any other MCP client and it stops being a tab you switch to. AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. The shellward mcp server is what makes that connection.

What the server does

想在浏览器里看?npx shellward scan --open(扫完直接打开报告)或 --serve(本地 http://localhost 提供报告)——数据全程不出本机

  • 8 defense layers — prompt guard, input auditor, tool blocker, output scanner, security gate, outbound guard, data flow guard, session guard
  • DLP model — data returns in full (no redaction), outbound sends are blocked when PII was recently accessed
  • PII detection — SSN, credit cards, API keys (OpenAI/GitHub/AWS), JWT, passwords — plus Chinese ID card (GB 11643 checksum), carrier-validated mobile, UnionPay bank card (Luhn) — precision-tuned to cut false positives
  • 37 injection rules — 20 Chinese + 17 English, risk scoring, mixed-language detection
  • MCP tool-poisoning scan — detects hidden instructions, invisible characters, concealment ("hide from user"), secret-file access & exfiltration hints in a tool's description/parameters
  • MCP rug-pull detection — fingerprints each tool's description on first sight, flags silent changes across runs

Installation

Installation goes through your MCP client rather than a global install: point it at shellward on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.

Credentials and setup notes

Configuration is passed through the environment: SHELLWARD_BASELINE_PATH. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

Where it fits

This sits in the team communication group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. It is maintained by jnMetaCode; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against Shellward's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Worth knowing first

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

How to install the Shellward MCP server

{
  "mcpServers": {
    "shellward": {
      "command": "npx",
      "args": ["-y", "-p", "shellward", "shellward-mcp"]
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
SHELLWARD_BASELINE_PATHFilesystem location the server is allowed to use.Optional

Frequently asked questions

It connects Shellward to MCP-compatible AI assistants such as Claude and Cursor. Instead of copying data back and forth by hand, the assistant works with Shellward directly.