Aperion Shield MCP Server

by aperionai Your server? Claim it

local only

Aperion Shield runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 4 Oct 2026.

Local guardrail proxy that blocks destructive MCP tool calls, rug pulls, and tool poisoning

—

Installs / week

not published

Stars

0 open issues

4 Oct 2026

Last commit

from GitHub

—

License

Rust

What the code does

We read the source, 6 d ago · rules 995398eba69f

Evidence

Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.

Opens a reverse shell config/shieldset-atr.yaml:460, src/predicates.rs:296

          - "(?i)(\\bnc\\s+-(e|c|l)\\s|\\bncat\\s|\\bnetcat\\s|/dev/tcp/|\\bbash\\s+-i\\s+>&\\s*/dev/tcp|\\bmkfifo\\b.{0,40}\\bnc\\b|\\bsocat\\b.{0,40}(exec|pty|tcp)|\\brm\\s+/tmp/f\\s*;)"

Deletes files or strips permissions src/scan/ide.rs:324

        "Bash/Write/Read on Cursor go through Shield even when findings is none. In Cursor, ask the agent to write a .env — High-severity paths prompt; Critical (rm -rf /) still denies.".into()

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Touches key and credential files config/shieldset-atr.yaml:230, config/shieldset.yaml:281

…s\\/credentials|~?\\/\\.config\\/gcloud|kubeconfig|\\.kube\\/config|~?\\/\\.netrc|~?\\/\\.docker\\/config\\.json|~?\\/\\.npmrc|~?\\/\\.pypirc)"

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

We found things in this code

Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch Aperion Shield and you get told the day something new turns up.

Alternatives to Aperion Shield

same job, measured the same way

mcp-audit

by firatmio

Transparent audit proxy for MCP servers: logs every tool call, flags poisoning and rug pulls.

44 installs/wk local only

toolprint by JEStats

by jestatsio

package-lock.json for MCP trust: catch MCP rug-pulls, tool poisoning, and leaked secrets.

86 installs/wk local only

agentguard

by agentwares

MCP policy proxy: spend caps, approvals for destructive tools, kill switch, dry-run, audit log.

155 installs/wk local only

mcpm

by getmcpm

MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.

1 121 installs/wk local only

MCP Security Guard

by petrovicistefan

Audit MCP servers for tool poisoning, rug pulls and supply-chain risk (OWASP MCP Top 10).

100 installs/wk local only

Neon Zero-Trust MCP Gateway

by ansarii

AI security firewall & DLP proxy protecting API keys and blocking destructive commands.

4 tools answering

Telegram MCP Server

by tolboy

Local-first TDLib Telegram MCP server with 126 tools, account isolation and production guardrails.

local only

AIShield Security Scanner

by lm203688

Scans MCP servers for tool poisoning, prompt injection and supply chain risks.

95 installs/wk 10 tools local only

Aperion Shield — questions

Answers built from our own checks of this server.

Why is there no uptime for Aperion Shield?

Aperion Shield runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone.

Is Aperion Shield open source?

We cannot say either way: written in Rust and 13 stars on GitHub, but we could not determine the licence, and without one the code is not open source by default.