Local proxy that wraps MCP servers and blocks destructive calls such as dropping tables or recursive deletes, pins tool catalogs and scans for tool poisoning.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add aperion-shield -- docker run -i --rm ghcr.io/aperionai/shield:shield-v1.0.1~/.codex/config.toml
[mcp_servers.aperion-shield]
command = "docker"
args = ["run", "-i", "--rm", "ghcr.io/aperionai/shield:shield-v1.0.1"]
# codex mcp add aperion-shield -- docker run -i --rm ghcr.io/aperionai/shield:shield-v1.0.1~/.cursor/mcp.json
{
"mcpServers": {
"aperion-shield": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/aperionai/shield:shield-v1.0.1"
]
}
}
}.vscode/mcp.json
{
"servers": {
"aperion-shield": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/aperionai/shield:shield-v1.0.1"
]
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"aperion-shield": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/aperionai/shield:shield-v1.0.1"
]
}
}
}claude_desktop_config.json
{
"mcpServers": {
"aperion-shield": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/aperionai/shield:shield-v1.0.1"
]
}
}
}.trae/mcp.json
{
"mcpServers": {
"aperion-shield": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/aperionai/shield:shield-v1.0.1"
]
}
}
}