ShieldAPI MCP (shieldapi-mcp)
About
MCP server providing 9 security intelligence tools for AI agents. Real-time threat detection with pay-per-request USDC micropayments via x402 protocol. Free tier included (3 calls/day, no account needed).
Details
- Author
- alberthild
- Downloads
- 293
- Categories
- Developer Tools, Security, AI
Jump to
- Check passwords against 900M+ breached hashes (HIBP)
- Prompt injection detection with 200+ patterns under 100ms
- AI skill/plugin supply chain scanner with 8 risk categories
- Pay-per-request USDC micropayments via x402 on Base
- No API key required; works instantly in demo mode
- Includes email, domain, IP, and URL reputation checks
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
ShieldAPI MCP (shieldapi-mcp)Command (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Run npx shieldapi-mcp to start the MCP server. All tools are available in demo mode out of the box; to use paid mode, add a wallet for x402 USDC micropayments on Base.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"shieldapi mcp (shieldapi-mcp)": {
"shieldapi": {
"command": "npx",
"args": [
"-y",
"shieldapi-mcp"
],
"env": {
"SHIELDAPI_WALLET_PRIVATE_KEY": "0x..."
}
}
}
}
}McpServers
{
"shieldapi": {
"command": "npx",
"args": [
"-y",
"shieldapi-mcp"
],
"env": {
"SHIELDAPI_WALLET_PRIVATE_KEY": "0x..."
}
}
}Security intelligence for AI agents
ShieldAPI provides 9 security tools via MCP — from password breach checks to prompt injection detection. All tools work in free demo mode out of the box. Paid mode uses x402 USDC micropayments on Base.Tools
| Tool | What it does | Price | |---|---|---| |check_password | SHA-1 hash against 900M+ breached passwords (HIBP) | $0.001 |
| check_password_range | k-Anonymity password range lookup | $0.001 |
| check_email | Email breach exposure via HIBP | $0.005 |
| check_domain | DNS, SPF/DMARC, SSL, blacklist reputation | $0.003 |
| check_ip | Blacklists, Tor exit detection, reverse DNS | $0.002 |
| check_url | Phishing, malware, brand impersonation | $0.003 |
| full_scan | All checks combined in one call | $0.010 |
| check_prompt | Prompt injection detection — 200+ patterns, <100ms | $0.005 |
| scan_skill | AI skill/plugin supply chain scanner — 8 risk categories | $0.020 |
Quick Start
``bash
npx shieldapi-mcp
``
All tools work immediately in demo mode — no wallet, no API key needed.
Highlights
- Prompt Injection Detection: 200+ patterns including Base64, ROT13, Unicode homoglyphs, DAN/jailbreak, exfiltration attempts - Skill Supply Chain Security: Scans for malicious code, credential leaks, suspicious downloads — based on Snyk ToxicSkills taxonomy - Real Breach Data: 900M+ password hashes from Have I Been Pwned - x402 Native: First security MCP server with pay-per-request USDC micropayments - No API Key: Works out of the box in demo mode, add a wallet for paid modeLinks
- Live API - x402scan Listing - npm - GitHubSign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
