Agent-Shield is answering right now. Last checked 3 min ago. Last commit 9 Oct 2026.
Security scanner for AI agents: prompt injection, leaked secrets, PII, and SSRF-risk URL detection.
What the code does
We read the source, 2 d ago · rules ccca72095570
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
"dns_exfiltration": re.compile(r'[a-zA-Z0-9.-]+\.(?:canarytokens\.com|burpcollaborator\.net|interactsh\.com)'),
el.innerHTML = vals.map(v =>
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.
claude mcp add agent-shield --transport http https://agent-shield.startekenterprises.com/mcp{
"mcpServers": {
"agent-shield": {
"url": "https://agent-shield.startekenterprises.com/mcp"
}
}
}[mcp_servers.agent-shield]
url = "https://agent-shield.startekenterprises.com/mcp"{
"mcpServers": {
"agent-shield": {
"url": "https://agent-shield.startekenterprises.com/mcp"
}
}
}{
"mcpServers": {
"agent-shield": {
"url": "https://agent-shield.startekenterprises.com/mcp"
}
}
}This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://agent-shield.startekenterprises.com/mcp | streamable-http | needs auth | 76 ms | 3 min ago |
Alternatives to Agent-Shield
same job, measured the same wayAI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
Security firewall for AI agents — scans MCP calls for injection, secrets, and risks.
Scan for prompt injection, secrets, PII, and vet MCP servers before installation
Security layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.
MCP server security scanner: detects prompt injection, credential leaks, SSRF, tool poisoning.
Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.
Security scanning and threat detection for AI agents
Scans MCP servers for tool poisoning, prompt injection and supply chain risks.
Agent-Shield — questions
Answers built from our own checks of this server.