APIShield WAF v4.0 MCP Server

by run402-apishield-waf Your server? Claim it

answering

APIShield WAF v4.0 MCP is answering right now. Last checked 2 min ago. It exposes 4 tools.

50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).

Uptime history 15 days of history

15 days agonow

100.0%

Uptime 24h

92 of 92 checks

Tools

read from the server

590 ms

Response time

average over 24h

open, no key

Access

streamable-http

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 19 October 2026. No other catalogue keeps this.

19 Oct a tool appeared verify_payment_and_unlock

19 Oct a tool changed the parameters it asks for verify_payment_and_unlock

Nothing serious here today

Today is the operative word: we check APIShield WAF v4.0 MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add mcp --transport http https://apishield-waf.run402.com/api/mcp

Settings → Connectors → Add custom connector, then paste this address

https://apishield-waf.run402.com/api/mcp

~/.codex/config.toml

[mcp_servers.mcp]
url = "https://apishield-waf.run402.com/api/mcp"

.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://apishield-waf.run402.com/api/mcp"
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://apishield-waf.run402.com/api/mcp"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

audit

audit_domain

6-Agent SaaS Contract, GDPR Art. 28 DPA & EU AI Act Auditor — scans any public HTTPS domain and returns deterministic readiness scores and remediation artifacts.

package

get_package_manifest

Returns SHA-256 checksums, byte sizes, and file trees for all turnkey SaaS source .ZIP archives and Executive Digital Pack documents.

submit

submit_buyer_offer

Creates an instant $1 Flash Trial or custom buyout settlement link (Tonkeeper TON / Base USDC).

verify

verify_payment_and_unlock

Verifies a Base USDC/USDT or Tonkeeper TON/USDT-TON payment (by tx_hash, wallet address, or order reference) and returns the full unredacted Pro deliverables and 6-file download pack.

Endpoints

URL	Transport	State	Latency	Checked
https://apishield-waf.run402.com/api/mcp	streamable-http	answering	735 ms	2 min ago

Alternatives to APIShield WAF v4.0 MCP

same job, measured the same way

Houyidb MCP

by houyidb-community

MCP server exposing HouyiDB vector search, collection status, and opt-in writes.

360 installs/wk local only

Local FAISS MCP Server

by nonatofabio

Local FAISS vector database for RAG with document ingestion, semantic search, and MCP prompts.

116 installs/wk local only

Prompt Injection Scanner

by guardbee

Scans RAG content/scraped pages for indirect prompt injection

604 installs/wk local only

Prompt Injection Scanner

by 4hmetuyar

Scans RAG content/scraped pages for indirect prompt injection

local only

GPT Chat

by codechap

MCP server for the OpenAI ChatGPT API — chat, vision, and embeddings

local only

IA-QA — 152 QA & Dev Tools for AI Agents

by jcjamet

152 free QA tools for agents: injection scan, evals, RAG, web audits. Smaller packs: /mcp/{pack}.

152 tools answering

SQLite Local AI Memory

by cheveguerra

100% In-Process Bare-Metal Hybrid Memory Engine & MCP Server for LLMs (SQLite + Int8 Vectors).

603 installs/wk local only

VideoVector MCP Server

by vectormethods

Model Context Protocol server for the VectorMethods VideoVector media intelligence API.

346 installs/wk local only

APIShield WAF v4.0 MCP — questions

Answers built from our own checks of this server.

What can APIShield WAF v4.0 MCP do?

It exposes 4 tools, read directly from the server on our last check. Among them: audit_domain, get_package_manifest, submit_buyer_offer, verify_payment_and_unlock. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →

Is APIShield WAF v4.0 MCP working right now?

We send a real MCP handshake every 15 minutes. Over the last 24 hours 92 of 92 checks got a reply (100.0%), average response time 590 ms. The bar chart above shows every period we have measured.

How do I connect APIShield WAF v4.0 MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.

Does APIShield WAF v4.0 MCP need an API key?

No. APIShield WAF v4.0 MCP completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.

How fast is APIShield WAF v4.0 MCP?

It answers our handshake in 590 ms on average, which is faster than 19% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.