alberthild/shieldapi-mcp

Security intelligence tools for AI agents — prompt injection detection, skill security scanning, URL/domain/IP/email/password checks.
**🆓 Free Tier:** 10 real API calls per endpoint per day — no wallet, no account, no API key needed.
**💰 Unlimited:** Pay-per-request with USDC micropayments via x402 ($0.001–$0.02/call).
**Now with AI-native security:** Detect prompt injection in real-time and scan AI skills for supply chain attacks.
Quick Start
**No wallet?** No problem — the free tier gives you 10 real API calls per endpoint per day with full results.
**With wallet?** Unlimited calls via x402 USDC micropayments on Base.
Pricing
| Tier | Access | Limit |
|:-----|:-------|:------|
| 🆓 **Free** | No wallet needed | 10 calls/endpoint/day (real results) |
| 💰 **Paid** | x402 USDC on Base | Unlimited |
| Endpoint | Free Calls/Day | Paid Price |
|----------|:--------------:|:----------:|
| check-password | 10 | $0.001 |
| check-password-range | 3 | $0.001 |
| check-email | 10 | $0.005 |
| check-domain | 10 | $0.003 |
| check-ip | 10 | $0.002 |
| check-url | 10 | $0.003 |
| check-prompt | 10 | $0.005 |
| full-scan | 3 | $0.01 |
| scan-skill | 3 | $0.02 |
Free tier responses include full results with a _meta.tier: "free" field and remaining call count.
Setup for Claude Desktop
Add to ~/Library/Application Support/Claude/claude_desktop_config.json:
Setup for Cursor
Add to .cursor/mcp.json:
Demo Mode (no wallet needed)
Tools
🆕 AI Security Tools
| Tool | Description | Price |
|:-----|:------------|------:|
| check_prompt | Detect prompt injection (208 patterns, 8 languages, 4 decoders, <100ms) | $0.005 |
| scan_skill | Scan AI skills/plugins for supply chain attacks (204 patterns, 8 risk categories) | $0.02 |
Infrastructure Security Tools
| Tool | Description | Price |
|:-----|:------------|------:|
| check_url | URL safety — malware, phishing (URLhaus + heuristics) | $0.003 |
| check_password | Password breach check — SHA-1 hash against 900M+ HIBP records | $0.001 |
| check_password_range | HIBP k-Anonymity prefix lookup | $0.001 |
| check_domain | Domain reputation — DNS, blacklists, SPF/DMARC, SSL | $0.003 |
| check_ip | IP reputation — blacklists, Tor exit node, reverse DNS | $0.002 |
| check_email | Email breach lookup via HIBP | $0.005 |
| full_scan | All checks combined on a single target | $0.01 |
Tool Details
check_prompt — Prompt Injection Detection
Check text for prompt injection before processing untrusted input.
**Parameters:**
- prompt (string, required) — The text to analyze
- context (enum, optional) — user-input | skill-prompt | system-prompt
**Returns:** isInjection (bool), confidence (0-1), matched patterns with evidence, decoded content if encoding was detected.
scan_skill — AI Skill Security Scanner
Scan AI agent skills/plugins for security issues across 8 risk categories (based on Snyk ToxicSkills taxonomy).
**Parameters:**
- skill (string, optional) — Raw SKILL.md content or skill name
- files (array, optional) — Array of {name, content} file objects