Dingdawg Shield MCP server
AI security scanning and trust scoring. Stack-specific threat models. Free local scan.
1 stars
Reviews
Write oneNobody has reviewed Dingdawg Shield yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Dingdawg Shield tools (3)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
governance_checkCheck if an AI system meets governance requirements. Evaluates transparency, accountability, fairness, safety, and privacy controls. Free — runs locally.
security_scanScan a codebase for AI security vulnerabilities. Free tier: 1 local scan per day. Checks SQL injection, XSS, SSRF, path traversal, prompt injection, hardcoded secrets, insecure deserialization, missing auth, data leakage, and more.
trust_scoreGet a quantified trust score for an AI agent or system. $0.05 per check via API, or free local assessment. Returns a 0-100 score with breakdown across reliability, safety, transparency, fairness, and accountability.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan6 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 53 days ago12/15
- Maintainer identityregistry namespace matches repository owner7/10
How Dingdawg Shield compares
Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 77/100
- higher than 55% of 915 Security servers
- Tools
- 3
- the typical Security server has 6
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 60% of 587 Security servers
What its tools let an agent do: 3 read
Install Dingdawg Shield in Claude Code, Cursor or VS Code
Runs npx -y dingdawg-shield on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add dingdawg-shield -- npx -y dingdawg-shield
What the publisher says
From the Dingdawg Shield repository's README, as published. We do not edit it. Read it on GitHub
DingDawg Agent 1
Governance receipts for AI agents.
Every action a governed agent takes generates a cryptographically-signed receipt: what it decided, why, which model, which version, at what time. Built toward EU AI Act Art. 12, Colorado AI Act (SB 24-205), and NIST AI RMF requirements.
The receipt is what turns a policy document into evidence.
What's live today
Backed by 10 governed-agent npm packages (compliance, legal, healthcare, finance, devops, marketing, sales, support, code-review, planning).
Quickstart
curl -X POST https://api.dingdawg.com/v1/developers/signup \
-H "Content-Type: application/json" \
-d '{"email":"you@example.com","name":"Your Name","role":"consumer"}'
# -> {"api_key": "dd_...", ...} store it — shown onceexport DINGDAWG_API_KEY=dd_your_key
npx dingdawg-compliance quick-checkArchitecture
Client (npm package / your agent) --auth: DINGDAWG_API_KEY-->
api.dingdawg.com (FastAPI, Railway)
-> Tier isolation + rate limiting
-> Governance gate (score, log, decide)
-> Audit trail (signed receipt)
-> Stripe metering / billing
-> Response (governed, scored, receipted)Documentation
- Quickstart Guide
- Architecture Overview
- Security Model
- The 7 Innovations
- Constitution Guide
- Skill Development
- Deployment Guide
- API Reference
Contributing
See CONTRIBUTING.md for contribution guidelines.
Security
See SECURITY.md for our responsible disclosure policy.
License
MIT License. See LICENSE for details.
Innovative Systems Global. The name is not aspirational. It is a statement of fact.
Nothing above is checked by us. What we check is on the safety report.
Dingdawg Shield: common questions
- Is Dingdawg Shield MCP server safe?
- Mostly: it is graded B (77/100). Read the Dingdawg Shield safety report
- How do I install Dingdawg Shield?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Dingdawg Shield need an API key?
- Yes. The registry entry asks for
DINGDAWG_API_KEY. - Is Dingdawg Shield maintained?
- The last commit was 91 days ago (2026-08-05). The latest release is v1.0.4.
- What can I use instead of Dingdawg Shield?
- Servers from other publishers that do the same job: Wireshark MCP server, MCPProxy MCP server and Solana Security Standard MCP server.
- How does Dingdawg Shield compare with other Security MCP servers?
- safety score 77/100 (higher than 55% of 915 Security servers); tools 3 (the typical Security server has 6); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Dingdawg Shield
Same job from other publishers: the closest match first, then the best rated.
- WiresharkProfessional network analysis with tshark. Security audits, deep-dives, and threat detection.not reviewedEstablishedA
- MCPProxyLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savingsnot reviewedGrowingB
- Solana Security StandardScan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.not reviewedGrowingA
- MCP Safety WardenMCP proxy adding security scanning, behavioral profiling, risk gating, and safe tool call execution.not reviewedGrowingA
- Npm SentinelAdvanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.not reviewedGrowingA