LocalFree

Aperion Shield MCP server

AperionAI/shield

Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt injection.

11 GitHub stars1 forks
Source code Website

Install Aperion Shield in Claude Code

Claude Code
claude mcp add aperion-shield -- docker run -i --rm ghcr.io/aperionai/shield:shield-v1.0.1
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "aperion-shield": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/aperionai/shield:shield-v1.0.1"
      ]
    }
  }
}

Frequently asked questions

What does the Aperion Shield MCP server do?

Local guardrail proxy for MCP servers: blocks destructive tool calls, pins tool catalogs against rug pulls and scans for tool poisoning and prompt injection.

Is the Aperion Shield MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does Aperion Shield run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add Aperion Shield to Claude Code?

Run: claude mcp add aperion-shield -- docker run -i --rm ghcr.io/aperionai/shield:shield-v1.0.1

More security & identity MCP servers

View all

Chronoverify

2257

beeswaxpat/chronoverify-mcp

Verify a photo's capture time and provenance: C2PA Content Credentials validation, EXIF/XMP consistency checks and pixel forensics combined into one verdict.

LocalAccount neededTypeScript

Zitadel

11

takleb3rry/zitadel-mcp

Zitadel identity management: manage users, projects, OIDC apps, roles and service accounts in natural language.

LocalAccount neededTypeScript

HVTracker

1312

YugantM/hvtracker-mcp

Pre-connect supply-chain trust checks for AI agents, frameworks and MCP servers: evidence-based HVTrust scores and verdicts from public signals (package provenance, OSSF Scorecard, signed commits, advisories), plus scan_stack to check a whole requirements.txt, package.json or MCP client config at once.

Local + RemoteAccount neededPython

Secretctl

11

forest6511/secretctl

Secrets manager that injects credentials into commands as environment variables so agents never see plaintext secrets, and sanitizes command output.

LocalFreeGo

Bruno MCP Studio

11

Ostico/bruno-mcp-studio

Author, edit and run Bruno collections as files: HTTP, WebSocket, gRPC, per-request pass/fail.

LocalFree

Opnsense

11

coreyhines/opnsense-mcp

OPNsense firewall operations via API: query ARP, DHCP, firewall rules, logs, interfaces, system status and packet captures.

LocalAccount neededPython