MCP stdio ShellGuard runs on your own machine — the client starts it, so there is no endpoint to ping. 37 installs a week from npm. Last commit 13 Sep 2026.
Defense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.
Today is the operative word: we check MCP stdio ShellGuard every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add stdio-shellguard -- npx -y mcp-stdio-shellguard
{
"mcpServers": {
"stdio-shellguard": {
"args": [
"-y",
"mcp-stdio-shellguard"
],
"command": "npx"
}
}
}
[mcp_servers.stdio-shellguard]
command = "npx"
args = ["-y", "mcp-stdio-shellguard"]
{
"mcpServers": {
"stdio-shellguard": {
"args": [
"-y",
"mcp-stdio-shellguard"
],
"command": "npx"
}
}
}
{
"mcpServers": {
"stdio-shellguard": {
"args": [
"-y",
"mcp-stdio-shellguard"
],
"command": "npx"
}
}
}
Audit AI agent configs for prompt injection & rogue MCP servers; vet packages
Security scanner for MCP servers - detects tool poisoning and injection
Static blast-radius audit for MCP servers before agent install. Manifest optional.
Governance proxy for MCP servers: allowlist, forced dry run, human confirmation, blast radius, audit
MCP server for JWT decoding and inspection
Reference MCP stdio server for observing Vercel projects and deployments.
Read-only stdio MCP server for a versioned convention card in Claude Code.
MCP server for DefectDojo: 24 tools with RBAC, HMAC audit chain, and SIEM forwarding
Answers built from our own checks of this server.