Shellward MCP Server

AI 应用合规网关 - 为中国监管而生的 AI Agent 安全合规工具（网安法 2026 / PIPL / 等保2.0 / 数据出境 / AI标识）。先一行命令体检项目合规风险，再在运行时拦截提示注入、数据外泄与危险命令。中文威胁检测 + 中文 PII + 零依赖 - - 英文工具不做的事。. It runs locally over stdio via the published package.

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-06-23 · ★ 131 · #37 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

Apache-2.0 · TypeScript servers · how we verify → /methodology

01 · Install Shellward

Claude Code

claude mcp add jnmetacode-shellward -- npx -y shellward

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "jnmetacode-shellward": {
      "command": "npx",
      "args": [
        "-y",
        "shellward"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

npm package shellward - unscoped; check the name against the project README before installing

registry namespace io.github.jnMetaCode is GitHub-verified and matches the repo owner

03 · What Shellward can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.7.21 · 2026-06-23

响应 issue #2(首个外部需求):项目根放 .shellward.json 声明CI门禁规则(failOn/maxFindings/allowOverseas),scan --ci 据此通过/失败。实现策略在push声明→运行时执行的纵深防御。全套328测试。

v0.7.20 · 2026-06-23

web 客户端与报告支持中英文:顶部中文/EN 切换,按 ?lang= 或浏览器语言自动判定;首页/错误页/报告全双语。全套318测试。

v0.7.19 · 2026-06-23

浏览器选文件夹必弹原生上传框(代码删不掉,观感不正规)。主推 npx shellward scan --open:项目目录一行命令自动出报告并开浏览器,无上传无弹框不出本机。web客户端本地输入改回路径栏+目录浏览(服务端直读无弹框)。全套315测试。

04 · Who maintains Shellward

shellward is maintained by jnmetacode. It's the only MCP server we track from this author; the repo dates to Mar 2026.

05 · Facts

repository: github.com/jnmetacode/shellward
category: security - ranked #37 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 10+ releases in the last 90 days (latest 2026-06-23)
registry: io.github.jnMetaCode/shellward (active, first published 2026-03-23)
packages: npm:shellward

06 · Shellward FAQ

What is Shellward?

Is Shellward still maintained?

Yes - as of 2026-08-25, its last commit was 2026-06-23 and it shipped 10+ releases in the last 90 days. We re-verify nightly.

How do I install Shellward?

Run `npx -y shellward`. You can also paste the ready-made client config above.

Does Shellward run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Shellward

Alternatives to Shellward

Maintained security servers if Shellward isn't the fit.

Pairs well with

Servers that cover what Shellward doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Patch Tuesday · Web Metadata, OpenGraph & Contact Extractor · ServiceNow MCP Server · Observatory · Seatbelt

More TypeScript MCP servers · Sevdesk MCP · Reddit MCP Server (jordanburke) · SSH Client MCP Server · Lore (jordanhindo) · Wc26 · see all