Agentshield MCP Server by affaan-m

by affaan-m• 1.3k•• Scanned•Claim this listing•Request removal
Security & Testingai agentanthropicclaude codehackathonmcp

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

Agentshield is an open-source mcp server by affaan-m, written mainly in TypeScript, with 1,344 GitHub stars and the MIT license. Its code was last updated Oct 18, 2026. The latest npm release is ecc-agentshield 1.6.0, published Sep 10, 2026, with 17,781 downloads last week.

Scan summary: scanned Nov 13, 2026 at commit b089130. Seen able to run shell commands, read environment and secrets, connect to the internet. Scan policy

How to install Agentshield

Built from the start command in the project's README: npx ecc-agentshield scan. Check the README for required keys or settings.

Claude Code · Terminal
claude mcp add agentshield -- npx ecc-agentshield scan
Claude Desktop · claude_desktop_config.json
{
  "mcpServers": {
    "agentshield": {
      "command": "npx",
      "args": [
        "ecc-agentshield",
        "scan"
      ]
    }
  }
}
Cursor · .cursor/mcp.json
{
  "mcpServers": {
    "agentshield": {
      "command": "npx",
      "args": [
        "ecc-agentshield",
        "scan"
      ]
    }
  }
}
VS Code · Terminal
code --add-mcp '{"name":"agentshield","command":"npx","args":["ecc-agentshield","scan"]}'

What Agentshield can touch

  • Run shell commandsFound in the code by our scan
  • Run dynamic codeNot seen in this scan
  • Read or write filesNot seen in this scan
  • Read environment and secretsFound in the code by our scan
  • Control a web browserNot seen in this scan
  • Connect to databasesNot seen in this scan
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetFound in the code by our scan

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit b089130, Nov 13, 2026. See the scan policy.

Before you install Agentshield

AgenticMart scanned Agentshield on Nov 13, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
  • Based on its description and topics, it likely needs to use a code-hosting token (GitHub/GitLab).

Before you install

  1. Use a fine-grained token limited to the repos it needs.
  2. Pin the version you reviewed instead of always installing the latest release.
  3. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by affaan-m on GitHub, 1,344 stars and 300 forks. Popularity is not proof of safety.
  • Last code change: Oct 18, 2026.
  • Open-source license: MIT.

Agentshield is an open-source mcp server by affaan-m, written mainly in TypeScript. AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

At a glance

Stars
1.3k
Forks
300
Language
TypeScript
License
MIT
Created
Feb 2026
Last update
Oct 18, 2026
Type
MCP Server
Price
Free

Topics

ai-agentanthropicclaude-codehackathonmcpopussecurity

Questions about Agentshield

What is Agentshield?

AI agent security scanner. Detect vulnerabilities in agent configurations, MCP servers, and tool permissions. Available as CLI, GitHub Action, ECC plugin, and GitHub App integration. 🛡️

Who maintains Agentshield?

Agentshield is maintained by affaan-m on GitHub (affaan-m/agentshield). AgenticMart lists it from public repository data.

Is Agentshield safe to use?

AgenticMart scanned Agentshield on Nov 13, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does Agentshield use?

It is published under the MIT license.

Agentshield alternatives

View more →

Similar mcp servers in Security & Testing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Agentshield (this page)
affaan-m
1.3kMITOct 18, 2026Scanned, no flagged issues
Hexstrike AI
0x4m4
13kMITAug 3, 2026Scanned, no flagged issues
Viper
FunnyWolf
5.3kNone foundMay 31, 2026Not scanned yet
Open Ontologies
fabio-rovai
2.7kMITOct 30, 2026Scanned, no flagged issues
Qu1cksc0pe
CYB3RMX
2.1kGPL-3.0Sep 18, 2026Scanned, no flagged issues
Cve MCP Server
mukul975
1.7kApache-2.0Oct 1, 2026Scanned, no flagged issues