Injectshield runs on your own machine — the client starts it, so there is no endpoint to ping. 24 installs a week from npm. Last commit 6 Jun 2026.
Prompt-injection firewall for AI agents — scan untrusted text before LLM calls.
Today is the operative word: we check Injectshield every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add injectshield -- npx -y @injectshield/mcp
{
"mcpServers": {
"injectshield": {
"args": [
"-y",
"@injectshield/mcp"
],
"command": "npx"
}
}
}
[mcp_servers.injectshield]
command = "npx"
args = ["-y", "@injectshield/mcp"]
{
"mcpServers": {
"injectshield": {
"args": [
"-y",
"@injectshield/mcp"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"injectshield": {
"args": [
"-y",
"@injectshield/mcp"
],
"command": "npx"
}
}
}
This one needs environment variables set before it will start:
INJECTSHIELD_API_KEY (API key from https://injectshield.dev (free tier: 10K req/mo).), INJECTSHIELD_API_BASE (Override the API base URL for self-hosted deployments.).
The author declared them in the registry entry; get the values from the project itself.
Prompt-injection detector for untrusted text before it reaches an LLM (RU/EN). BYO lovec.tech key.
Detect prompt injection, jailbreaks, and code injection in untrusted text before it reaches an LLM.
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
A real inbox for AI agents: send, receive and thread email, behind a prompt-injection firewall.
Scan a page for hidden prompt-injection payloads targeting AI agents.
Pre-injection context compression for coding agents. Zero LLM calls, zero telemetry, offline-safe.
Security gateway for MCP agents: blocks prompt-injection-driven tool calls before they execute.
Scan prompts, tool definitions and model output for injection, and guard agent tool calls.
Answers built from our own checks of this server.