MCP.so
Sign In

Stdio Shellguard

@studiomeyer-io

RepositoryHomepage

About Stdio Shellguard

Defense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security 200k-server stdio-RCE class (LiteLLM CVE-2025-69256). MIT, TypeScript, Node >= 20.

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-stdio-shellguard": {
      "command": "npx",
      "args": [
        "-y",
        "-p",
        "mcp-stdio-shellguard",
        "mcp-shellguard-audit",
        "scan",
        "./src"
      ]
    }
  }
}

Tools

No tools detected

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Stdio Shellguard?

Defense-in-depth bundle for MCP stdio servers: drop-in guardExec/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security 200k-server stdio-RCE class (LiteLLM CVE-2025-69256). MIT, TypeScript, Node >= 20.

How to use Stdio Shellguard?

The README includes setup instructions such as npx -y -p mcp-stdio-shellguard mcp-shellguard-audit scan ./src.

Key features of Stdio Shellguard

  • MCP spec: 2025-06-18
  • SDK: @modelcontextprotocol/sdk ^1.29.0
  • Node: >= 20
  • License: MIT
  • Author: Matthias Meyer (StudioMeyer)

Use cases of Stdio Shellguard

  • Connect an MCP-compatible client to this repository's service.
  • Review the README-backed setup before enabling it in production.

FAQ from Stdio Shellguard

Where is the source code for Stdio Shellguard?

The source code is linked from the repository URL on this page.

Does Stdio Shellguard include a standard MCP config?

If the README contains a parseable MCP configuration block, it is shown in the Config tab.

Frequently asked questions

Where is the source code for Stdio Shellguard?

The source code is linked from the repository URL on this page.

Does Stdio Shellguard include a standard MCP config?

If the README contains a parseable MCP configuration block, it is shown in the Config tab.

Comments

Basic information

License

MIT

Author

studiomeyer-io

Submitted by

Matthias Meyer - StudioMeyer

More MCP servers

Subtext

Subtext by Fullstory

Session replay, built for agents. Subtext is agentic session review: it captures production sessions of your app and connects them to your coding agent — Claude Code, Cursor, Codex, Devin, your own harness — so it can

9

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

1

bsv.cx

Andy Rowe

Timestamp and verify evidence on-chain. Let your agent prove what it saw and when. bsv.cx gives an AI agent verifiable memory. Timestamp a hash of any output, archive a web page as it looked, or fetch a URL with a recei

Lamina — On-brand product photos, video & try-ons

Lamina

Generate on brand product videos from Claude Code (or any assistant) in one line. Lamina turns a brief + your brand kit into finished product photos, video reels, and campaign banners - no prompt engineering; brand guard

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.