Skip to content
appsgit

Shellward

Shellward is an MCP server that adds tools to AI assistants such as Claude Desktop, Claude Code and Cursor. AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. It has 139 GitHub stars, is released under the Apache-2.0 license and runs locally with npx -y shellward.

github.com/jnMetaCode/shellward (opens in a new tab)

Data as of from the GitHub API and the official MCP registry; description from the project's repository. Report an error

View on GitHub (opens in a new tab)

Install Shellward

Generated from the server's MCP registry entry. Replace your-value with your own values.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "shellward": {
      "command": "npx",
      "args": [
        "-y",
        "shellward"
      ],
      "env": {
        "SHELLWARD_MODE": "your-value",
        "SHELLWARD_LOCALE": "your-value",
        "SHELLWARD_THRESHOLD": "your-value"
      }
    }
  }
}

Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.

Claude Code

claude mcp add --env SHELLWARD_MODE=your-value --env SHELLWARD_LOCALE=your-value --env SHELLWARD_THRESHOLD=your-value --transport stdio shellward -- npx -y shellward

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "shellward": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "shellward"
      ],
      "env": {
        "SHELLWARD_MODE": "your-value",
        "SHELLWARD_LOCALE": "your-value",
        "SHELLWARD_THRESHOLD": "your-value"
      }
    }
  }
}

Project file; use ~/.cursor/mcp.json to enable it in every project.

VS Code

.vscode/mcp.json
{
  "servers": {
    "shellward": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "shellward"
      ],
      "env": {
        "SHELLWARD_MODE": "your-value",
        "SHELLWARD_LOCALE": "your-value",
        "SHELLWARD_THRESHOLD": "your-value"
      }
    }
  }
}

Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).

Environment variables

Variables the server reads at startup.

NameRequiredDescription
SHELLWARD_MODENoSecurity mode: enforce (block + log) or audit (log only)
SHELLWARD_LOCALENoLocale: auto, zh, or en
SHELLWARD_THRESHOLDNoInjection detection threshold 0-100 (lower = stricter)

About Shellward

scan 是确定性扫描：它能告诉你「项目里有境外模型端点」，但判断不了个人信息有没有真的流过去；14 个法规控制项里也有 11 个它只能标「需人工确认」。这一段交给你的编码 agent 来做——Claude Code、Cursor、Codex 等支持 Agent Skills 的工具都能用。

  • openclaw
  • prompt-injection
  • security
  • ai-agent
  • ai-security
  • llm-security
  • shellward
  • pii-detection
  • agent-security
  • cursor

Similar MCP servers

More other MCP servers

All Other

FAQ

Shellward FAQ

Still curious? Email info@appsgit.com.

How do I install the Shellward MCP server?

Add the command npx -y shellward to your MCP client: put it in claude_desktop_config.json for Claude Desktop, run claude mcp add for Claude Code, or add it to .cursor/mcp.json (Cursor) or .vscode/mcp.json (VS Code). The snippets on this page are ready to paste.

Is Shellward free?

The server is open source under the Apache-2.0 license, so running it is free. It does not declare any required API key.

Is Shellward actively maintained?

The most recent commit was on Sep 28, 2026. The latest release is v0.7.21, published Jun 23, 2026. appsgit only lists MCP servers with a commit in the last six months.