shellward
CommunityMCP server by jnMetaCode · updated · ★ 139 · 101 downloads a week
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP. shellward is a community project by jnMetaCode, not verified by a company domain.
Last commit 23 days ago
Apache-2.0: permissive, fine for commercial use
Clear description, published package or server URL, 139 stars, original repository
Tells the assistant to ignore its instructions or hide actions from you
What you need
| Setting | Needed | What it is |
|---|---|---|
SHELLWARD_Environment variable | Optional | Security mode: enforce (block + log) or audit (log only) |
SHELLWARD_Environment variable | Optional | Locale: auto, zh, or en |
SHELLWARD_Environment variable | Optional | Injection detection threshold 0-100 (lower = stricter) |
From the publisher's entry in the official MCP Registry. Required settings are already in the install config below as placeholders.
Install shellward
Built from the published package, never by AIclaude mcp add shellward -- npx -y shellwardRun in your terminal. Add --scope user to use it in every project.
{
"mcpServers": {
"shellward": {
"command": "npx",
"args": [
"-y",
"shellward"
]
}
}
}Settings, Developer, Edit config. Paste into claude_desktop_config.json and restart.
{
"mcpServers": {
"shellward": {
"command": "npx",
"args": [
"-y",
"shellward"
]
}
}
}Add to ~/.cursor/mcp.json (all projects) or .cursor/mcp.json (this project).
{
"servers": {
"shellward": {
"command": "npx",
"args": [
"-y",
"shellward"
]
}
}
}Add to .vscode/mcp.json. VS Code uses "servers", not "mcpServers".
codex mcp add shellward -- npx -y shellward{
"mcpServers": {
"shellward": {
"command": "npx",
"args": [
"-y",
"shellward"
]
}
}
}Add to ~/.gemini/config/mcp_config.json (all projects) or .agents/mcp_config.json (this project).
gemini mcp add shellward npx -y shellwardGemini CLI was replaced by Antigravity CLI in June 2026 and remains only for enterprise licences and paid API keys.
MCP servers run with your permissions and can read what you give them access to. Some need an API key: check the README and add it under env in the shellward block.
Security check
D- Tells the assistant to ignore its instructions or hide actions from youIn
README.md:Ignore previous instructions - Downloads a script from the internet and runs itIn
README.md:curl|sh - Deletes files across your home folder or whole diskIn
README.md:rm -rf /
Checked automatically: README.md, package.json. This looks for known risky patterns and is not a full audit. How grades work
Alternatives to shellward
All alternatives →Your OpenWork org's skills, plugins, workflows, and connections through one OAuth MCP URL.
Model Context Protocol for TypeScript — public Zod schemas (spec + OAuth/OpenID) (with updated dependencies)
Model Context Protocol registry, transports, and OAuth bridges for Electric Agents
Remote proxy for Model Context Protocol, allowing local-only clients to connect to remote servers using oAuth
Public Preview — Security proxy for MCP servers: The Firewall for Model Context Protocol
OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.
shellward: common questions
How do I install shellward?
In Claude Code run claude mcp add shellward -- npx -y shellward. For Claude Desktop, Cursor and VS Code, paste the config shown above and restart. See the install guides.
Is shellward the official server?
shellward is a community project by jnMetaCode, not verified by a company domain.
Is shellward free?
The code is published under the Apache-2.0 licence. The service it connects to may have its own pricing.
Is shellward safe to use?
It scores 79 of 100. Grades: maintenance A, licence A, quality B. Security check: grade D (tells the assistant to ignore its instructions or hide actions from you). Review the code before you install. How grades work.
What are alternatives to shellward?
Similar MCP servers: OpenWork MCP Gateway, Modelcontextprotocol Core, Agents MCP, MCP Remote.
Does shellward work with ChatGPT?
Not directly. It runs locally, and ChatGPT only connects to remote servers with a URL. Use it in Claude Code, Claude Desktop, Cursor, VS Code or Codex.
