Mcp Shield
Check trust scores and security issues for MCP servers before you add them to Claude Code or Cursor in production.
Overview
com.craftedtrust/mcp-shield is a Ship-phase MCP server that verifies trust, scans security issues, and searches 4,200+ MCP servers before you connect them to agents.
What is this MCP server?
- Trust verification MCP with scores and security scanning for MCP servers
- Search across a catalog of 4,200+ MCP servers from the agent
- Streamable HTTP API at mcp.craftedtrust.com (manifest version 2.0.0)
- Supports trust-gated agent patterns before wiring unknown remotes into prod configs
- Catalog search covers 4,200+ MCP servers per server description
- MCP Shield manifest version 2.0.0
- Remote endpoint https://mcp.craftedtrust.com/api/v1/mcp (streamable-http)
What problem does it solve?
Solo builders add MCP remotes by URL without a fast way to see trust scores or known security problems across thousands of servers.
Who is it for?
Builders shipping agent products that consume many third-party MCP remotes and want a repeatable trust gate in security review.
Skip if: Teams with zero external MCP usage or formal enterprise vetting pipelines that already supersede catalog checks.
What do I get? / Deliverables
You can score, scan, and search MCP servers from your agent workflow so only vetted integrations reach launch configs.
- Trust and security findings for candidate MCP servers
- Search results from a 4,200+ server directory to compare alternatives
- Documented pre-launch gate before enabling new agent tool remotes
Recommended MCP Servers
Journey fit
How it compares
MCP trust and audit integration, not an app feature MCP or chemistry-style domain calculator.
Common Questions / FAQ
Who is com.craftedtrust/mcp-shield for?
Solo and indie builders who install multiple MCP servers and need trust scores and security scans before production agent configs.
When should I use com.craftedtrust/mcp-shield?
During Ship security review and again in Operate when you onboard new community MCP endpoints to Claude Code, Cursor, or similar hosts.
How do I add com.craftedtrust/mcp-shield to my agent?
Register https://mcp.craftedtrust.com/api/v1/mcp as a streamable HTTP MCP remote in your client, then use trust check, scan, and server search tools before enabling other remotes.