Guardianshield
by sparkvibe-iocommunityv1.2.1
3
1
GuardianShield is an MCP server for scanning code, files, directories, diffs, and model inputs/outputs for vulnerabilities, secrets, prompt injection, and PII. It also checks dependencies against CVEs, supports safety profiles, false-positive tracking, audit logging, and SARIF export for CI.
From the registry: AI security layer: code scanning, PII detection, prompt injection, secrets, CVEs
Install & configure
Prerequisites
- requiredInstall guardianshieldInstall via pip
https://pypi.org/project/guardianshield/$ pip install guardianshield
Install in your client
Paste into the AI you're chatting with — it will figure out the rest
Please install the `guardianshield` MCP server into my current AI client (that's you).
Required prerequisites (do these first if not already done):
- **Install guardianshield** — Install via pip Run: `pip install guardianshield` (https://pypi.org/project/guardianshield/)
Canonical MCP server config (stdio transport):
- command: `guardianshield-mcp`
- args: []
- optional environment variables:
- `GUARDIANSHIELD_PROFILE`: Default safety profile (example: `general`)
- `GUARDIANSHIELD_AUDIT_PATH`: Path to SQLite audit database (example: `~/.guardianshield/audit.db`)
- `GUARDIANSHIELD_DEBUG`: Enable debug logging (example: `1`)
Add this MCP server to my current client's config in the correct format for you. If you need secrets or credentials I haven't provided, ASK me — do not invent values or leave raw placeholders. After adding it, tell me how to verify the server is connected.Tools (27)
scan_code
Scan source code for vulnerabilities and hardcoded secrets
scan_file
Scan a single file and auto-detect the language from its extension
scan_directory
Recursively scan a directory with filtering and progress streaming
scan_input
Check user or agent input for prompt injection attempts
scan_output
Check AI output for PII leaks and content violations
check_secrets
Detect hardcoded secrets and credentials
scan_files
Scan multiple files in one call
scan_diff
Parse a unified diff and scan only added lines
check_dependencies
Check packages for known CVEs via OSV.dev across supported ecosystems
sync_vulnerabilities
Sync the local OSV vulnerability database
parse_manifest
Parse supported manifest files into dependency objects
scan_dependencies
Scan a directory for manifest files and check dependencies for vulnerabilities
mark_false_positive
Mark a finding as a false positive
Environment variables
GUARDIANSHIELD_PROFILEDefault safety profileGUARDIANSHIELD_AUDIT_PATHPath to the SQLite audit databaseGUARDIANSHIELD_DEBUGEnable debug loggingPackages
guardianshield
pypiv1.2.1transport: stdio
Details
- Language
- Python
- License
- Apache-2.0
- Released
- Mar 3, 2026
- Last commit
- Mar 3, 2026
- Registry name
- io.github.sparkvibe-io/GuardianShield