Transparent MCP security proxy: tool metadata integrity, call validation, and response analysis. Apache-2.0.
概览
Open-source runtime security at the Model Context Protocol boundary. ShieldMCP sits between an agent and its MCP server, checking through one inspectable pipeline. Deploy it as a transparent stdio or legacy SSE proxy, or integrate its asynchronous Python API. The default detector runs locally without model downloads or API keys. A* refers to the : ACL, EMNLP. The EMNLP paper appears as in the official presentation schedule; its Anthology link will be added when available. The distinctive design combines , with local detection and reproducible inspection. This is an alpha research framework; test the configured controls against your own agents, tools, and workloads. Experimental governance/cache APIs require explicit integration and are not enabled by the default CLI proxy. The default heuristic backend needs no model downloads or API keys. The browser demo computes pipeline verdicts live against curated scenarios and user inputs; it is not a live agent benchmark.
README
以下为原文 README 节选，完整内容请查看原文。
ShieldMCP sits between an agent and its MCP server, checking tool metadata, outbound arguments, and inbound responses through one inspectable pipeline. Deploy it as a transparent stdio or legacy SSE proxy, or integrate its asynchronous Python API.
Apache-2.0 licensed code and released model artifacts, including commercial use and integration under the same license. The default detector runs locally without model downloads or API keys.
Research papers
| Venue | Paper | Resources |
|---|---|---|
| ACL 2026 · Industry Track Published · A* conference | Securing the Tool Layer: A Threat Taxonomy and Runtime Defense Framework for Model Context Protocol Deployments | Anthology · PDF · DOI |
| EMNLP 2026 · System Demonstrations Accepted and scheduled · A* conference | ShieldMCP: An Interactive System for Runtime Security of Model Context Protocol Tool Calls | Camera-ready paper · Official program |
安装
This server does not publish a one-line install command.
Open the repository installation guide 新手？先看 mcpskill.org 教程 →