Aperion Shield MCP Server

by aperionai Your server? Claim it

local only

Aperion Shield runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 18 Sep 2026.

Local guardrail proxy that blocks destructive MCP tool calls, rug pulls, and tool poisoning

—

Installs / week

not published

Stars

0 open issues

18 Sep 2026

Last commit

from GitHub

—

License

Rust

What the code does

We read the source, 3 h ago · rules 3dff92dd89df

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Opens a reverse shell config/shieldset-atr.yaml:460, src/predicates.rs:261

          - "(?i)(\\bnc\\s+-(e|c|l)\\s|\\bncat\\s|\\bnetcat\\s|/dev/tcp/|\\bbash\\s+-i\\s+>&\\s*/dev/tcp|\\bmkfifo\\b.{0,40}\\bnc\\b|\\bsocat\\b.{0,40}(exec|pty|tcp)|\\brm\\s+/tmp/f\\s*;)"

Deletes files or strips permissions src/scan/ide.rs:321

        "Bash/Write/Read on Cursor go through Shield even when findings is none. In Cursor, ask the agent to write a .env — High-severity paths prompt; Critical (rm -rf /) still denies.".into()

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Touches key and credential files config/shieldset-atr.yaml:230, config/shieldset.yaml:275

…s\\/credentials|~?\\/\\.config\\/gcloud|kubeconfig|\\.kube\\/config|~?\\/\\.netrc|~?\\/\\.docker\\/config\\.json|~?\\/\\.npmrc|~?\\/\\.pypirc)"

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Aperion Shield and you get told the day something new turns up.

Alternatives to Aperion Shield

same job, measured the same way

mcp-audit

by firatmio

Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls.

33 installs/wk local only

agentguard

by agentwares

MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.

353 installs/wk local only

mcpm

by getmcpm

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

529 installs/wk local only

Telegram MCP Server

by tolboy

Local-first TDLib Telegram MCP server with 110 tools, account isolation and production guardrails.

local only

AIShield Security Scanner

by lm203688

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

46 installs/wk 9 tools local only

MCP Seatbelt

by kryptosai

MCP runtime security proxy. Blocks dangerous AI agent tool calls with a policy engine.

112 installs/wk local only

Sentinel Scan

by ventrova

MCP security scanner: detect tool poisoning, prompt injection & rug-pulls - 10 OWASP heuristics.

74 installs/wk local only

Januscope

by giancarloerra

Local MCP proxy for tool restrictions, response redaction, audit logs, and database schema context.

337 installs/wk local only

Aperion Shield — questions

Answers built from our own checks of this server.

Why is there no uptime for Aperion Shield?

Aperion Shield runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Aperion Shield open source?

We cannot say either way: written in Rust and 8 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.