AI · alternatives · 2026
24 alternatives to ShieldMCP
MCP Security Scanner
Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes.
- 1
I noticed the growing security concerns around MCP (https://news.ycombinator.com/item?id=43600192) and built an open source tool that can detect several patterns of tool poisoning attacks, exfiltration channels and cross-origin manipulations. MCP-Shield scans your installed servers (Cursor, Claude Desktop, etc.) and shows what each tool is trying to do at the instruction level, beyond just the API surface. It catches hidden instructions that try to read sensitive files, shadow other tools' behavior, or exfiltrate data. Example of what it detects: - Hidden instructions…
2025 · github.com · its alternatives →
- 2
Browser MCP connects AI applications to your browser so you can automate tasks using AI. Supported by Claude, Cursor, VS Code, Windsurf, and more.
2025 · browsermcp.io · its alternatives →
- 3
MCP Defender▲152Hi HN, MCP Defender is an open source desktop app that automatically proxies your MCP traffic in AI apps like Cursor, Claude, Windsurf and VSCode. It then scans all requests and responses between the apps and the MCP tools they call. If it detects anything malicious, it alerts you and lets you allow or block the tool call. While the threat landscape of MCP is still being actively researched, there are dangerous things that MCP Defender can block today. For example, a developer asks Cursor to fix a Github issue with an attached crash log. However, the Github issue was created by an attacker…
2025 · mcpdefender.com · its alternatives →
- 4
Web to MCP▲353Send any website components to Cursor or Claude via MCP
2025 · web-to-mcp.com · its alternatives →
- 5
FloMCP▲63Ship MCP servers with 32 security checks in under 5 minutes
Apr 2026 · flomcp.com · its alternatives →
- 6
Hi all! I normally work on the PyTorch project but I've been on baby leave for the past month, so I've been playing around with AI as a user rather than a framework implementor. I really liked the agent experience with Claude Code, but I couldn't really justify spending so many dollars on API costs for random side projects. I already pay for a Claude Pro subscription though, and it turns out you can simulate many of Claude Code's features with an MCP. If you have a Pro subscription, check this out! I think it really captures the Claude Code experience quite well, without forcing you to pay…
2025 · github.com · its alternatives →
- 7
Glance ▲87Real browser for Claude Code Test, Screenshot, Automate
Mar 2026 · glance.debugbase.io · its alternatives →
- 8
Hi HN! We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team. The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns: Hidden Unicode in "error messages" - Paste a colleague's error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you've used for months? Last week's update added credential theft Tool redefinition - Malicious tool redefines "deploy to prod" to run…
2025 · github.com · its alternatives →
- 9
Every MCP tool call dumps raw data into Claude Code's 200K context window. A Playwright snapshot costs 56 KB, 20 GitHub issues cost 59 KB. After 30 minutes, 40% of your context is gone. I built an MCP server that sits between Claude Code and these outputs. It processes them in sandboxes and only returns summaries. 315 KB becomes 5.4 KB. It supports 10 language runtimes, SQLite FTS5 with BM25 ranking for search, and batch execution. Session time before slowdown goes from ~30 min to ~3 hours. MIT licensed, single command install: /plugin marketplace add mksglu/claude-context-mode…
Feb 2026 · github.com · its alternatives →
- 10
Scan any website for security flaws in one click
Nov 2025 · chromewebstore.google.com · its alternatives →
- 11
Audit MCPs for security vulnerabilities.
May 2026 · mcpscanner.yxsh.in · its alternatives →
- 12MT
https://github.com/mcp-shark/mcp-shark Site: https://mcpshark.sh/ I built MCPShark, a traffic inspector for the Model Context Protocol (MCP). It sits between your editor/LLM client and MCP servers so you can: • See all MCP traffic (requests, responses, tools, resources) in one place • Debug sessions when tools don’t behave as expected • Optionally run “Smart Scan” checks to flag risky tools / configs
Dec 2025 · its alternatives →
- 13MV
A few days ago I posted MCPShark (a traffic inspector for the Model Context Protocol). I just shipped a VS Code / Cursor extension that lets you view MCP traffic directly in the editor, so you’re not jumping between terminals, logs, and "I think this is what got sent". VS Code Marketplace: https://marketplace.visualstudio.com/items?itemName=MCPShark... Main repo: https://github.com/mcp-shark/mcp-shark Feature requests / issues: https://github.com/mcp-shark/mcp-shark/issues Site: https://mcpshark.sh/ If…
Dec 2025 · its alternatives →
- 14
MCPSafe▲6We've been scanning MCP (Model Context Protocol) servers to understand the security posture of the ecosystem. After 306 servers and 1,211 vulnerabilities, here's what we found: - 69 critical vulnerabilities - 32 servers using eval() on untrusted input - 31 SQL injection vulnerabilities - 32 servers with hardcoded API credentials 10.5% of servers have at least one critical vulnerability. MCP servers run with your permissions. AI agents trust them implicitly. A prompt injection can exploit them remotely. MCPSafe (https://mcpsafe.org) lets you scan before you connect. Free tier…
Feb 2026 · mcpsafe.org · its alternatives →
- 15
TraceBug▲17Instant bug reports your AI agent can actually debug
Jul 2026 · tracebug.dev · its alternatives →
- 16
VibeScan▲9Beta tool that runs OWASP/Nuclei/ZAP checks fast and prioritizes fixes; would love test runs on your staging domains and blunt feedback.
2025 · vibescan.co.kr · its alternatives →
- 17
One command to security-grade your MCP server
Feb 2026 · shield.codemeant.dev · its alternatives →
- 18
ContextGuard▲12I built ContextGuard after discovering that 43% of MCP servers have critical security vulnerabilities. MCP (Model Context Protocol) is the new standard that lets Claude Clients(Desktop, Windsurf, Cursor, etc.) access external tools and data sources - think of it as a plugin system for AI assistants. The problem: When you give those clients access to your filesystem, databases, or APIs through MCP servers, you're opening up serious attack vectors. Prompt injection, data leakage, and path traversal attacks are all possible. Most developers building MCP servers don't have security expertise,…
2025 · github.com · its alternatives →
- 19
MCP+Claude= Local Automation with AI for a fixed flat price
2025 · desktopcommander.app · its alternatives →
- 20
Scan MCP▲7MCP scanning & threat observability for AI-native tools
2025 · scanmcp.com · its alternatives →
- 21
Website security scanner — 60 seconds, 75+ tests + features
Jul 2026 · securewatchonline.com · its alternatives →
- 22
AllMCPs▲3Browse, submit, and upvote unique or useful MCP servers to incorporate in your daily workflows.
Aug 2026 · allmcps.com · its alternatives →
- 23
The app store for AI tools. Find, trust, and install
Mar 2026 · mcp-marketplace.io · its alternatives →
- 24
MCPScan▲2Discover & audit shadow Model Context Protocol servers
Aug 2026 · kuldeepster574.gumroad.com · its alternatives →
Also compare
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →