loading…
Search for a command to run...
loading…
Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F security grades.
Security scanner for MCP servers and AI-generated code. Detects leaked API keys, PII, prompt injection, and MCP misconfigs with A-F security grades.
Security scanner for MCP servers and AI-generated code.
One command to security-grade your MCP server.
npm install -g project-shield
Or use directly with npx:
npx project-shield scan .
Add to your MCP client config:
{
"mcpServers": {
"project-shield": {
"command": "npx",
"args": ["-y", "project-shield", "scan", "."]
}
}
}
Security scan a directory or MCP server project. Returns A-F grade with detailed findings.
Parameters:
path (string, required) - Directory to scanformat (string, optional) - Output format: text, json, badgeGet the security grade for a project without full report.
Generate a tamper-proof Evidence Pack with SHA-256 hashed scan results.
| Layer | What | How |
|---|---|---|
| Secrets | API keys, tokens, credentials | Regex + entropy + context analysis |
| PII | Email, phone, SSN | Pattern matching + checksum validation |
| Prompt Injection | Attacks in MCP tool descriptions | Heuristic + pattern detection |
| MCP Misconfig | Missing auth, open permissions, no logging | Config rule engine |
| Grade | Meaning |
|---|---|
| A | Excellent - ship with confidence |
| B | Good - minor improvements suggested |
| C | Clean - some issues to address |
| D | Warning - fix before deploy |
| E | Warning - significant issues found |
| F | Locked - deployment blocked until fixed |
| Plan | Price | Scans | Features |
|---|---|---|---|
| Free | $0 | 5/month | Basic reporting |
| Pro | $29/month | 50/month | PDF reports, Evidence Packs |
| Team | $99/month | Unlimited (5 users) | CI/CD integration |
| Enterprise | $299+/month | Custom | SSO, audit trails |
MIT
Добавь это в claude_desktop_config.json и перезапусти Claude Desktop.
{
"mcpServers": {
"project-shield": {
"command": "npx",
"args": []
}
}
}