Install Shieldapi in Claude Code
This server doesn't publish a package to a registry, so follow the install steps in its README. Once it runs, register it with Claude Code:
claude mcp add shieldapi -- <command to start the server>Frequently asked questions
What does the Shieldapi MCP server do?
Security intelligence: HIBP password breach checks, email/domain/IP/URL reputation, prompt injection detection and skill supply chain scanning.
Is the Shieldapi MCP server free?
The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.
Does Shieldapi run locally or remotely?
Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.
How do I add Shieldapi to Claude Code?
Follow the install steps in the project's README at https://github.com/alberthild/shieldapi-mcp, then register it with "claude mcp add".
More security & identity MCP servers
View allSieve
gautam-u/sieve-mcp
Local macOS scanner for secrets leaked into AI tool chat transcripts, with redacted findings, placeholder-only redaction and Keychain-backed command execution.
Shield
rob925/mcp-shield
Static security scanner for MCP servers and agent tools: detects secrets, shell execution, risky tool descriptions, environment access and prompt injection.
Skillssafe
GUCCI-atlasv/skillssafe-mcp
Scan SKILL.md files, MCP configs and system prompts for credential theft, prompt injection, zero-width character attacks and ClawHavoc indicators.
SecureAudit
rev2ret/SecureAudit-MCP
Static C/C++ memory-safety scanning and PE/ELF binary protection audits (ASLR, DEP/NX, SafeSEH, PIE), with remediation via secure templates.
Smallprint Action
gostanos/smallprint-action/mcp
Query the Small Print record: versioned, diffed tool descriptions and schemas of MCP servers, skills and plugins, with graded changes and public advisories.
Scamverify
scamverifyai/scamverify-mcp
Scam and threat checks for phone numbers, URLs, texts, emails, documents and QR codes using FTC/FCC complaints, URLhaus and ThreatFox, with risk scores.