MCP.Market

ShieldFive MCP server

by shieldfive·io.github.shieldfive/mcp·v0.7.1
No reviews yet

Move files off your computer into an E2E-encrypted vault, verified first. Decrypts locally.

A85/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A85/100

full report

Adoption
Growing

0 stars232 downloads/wk

Reviews

Write one

Nobody has reviewed ShieldFive yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

ShieldFive tools (21, 3 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • create_local_folderwrite action

    Create a directory (and any missing parents) inside the allowed roots.

  • find_duplicates

    Find files with byte-identical contents. Identity is decided by a full SHA-256

  • find_large_files

    List files at or above a size threshold, largest first.

  • find_old_files

    List files not modified for a given number of days. Modification time is a weak

  • list_local

    List files in an allowed local directory, with sizes and modification dates.

  • move_local

    Move a file, directory or symlink to another location inside the allowed roots.

  • rename_local

    Rename an item in place; a symlink is renamed itself. new_name must be a bare

  • storage_summary

    Total file count and bytes for the allowed roots, broken down by file extension

  • trash_local

    Move files or folders into a .shieldfive-mcp-trash directory inside their own

  • vault_connect

    Connect this assistant to the user’s ShieldFive vault. Opens ShieldFive in the user’s browser, where

  • vault_create_folderwrite action

    Create a folder inside one this connection covers. Needs "organize". Without confirm: true only reports the plan.

  • vault_find_duplicates

    Find byte-identical files in the vault. Same-size files are downloaded, decrypted in memory and

  • vault_list_files

    List files in the ShieldFive vault folders this connection covers, with decrypted names, paths,

  • vault_move

    Move a file or folder into another folder this connection covers. Needs "organize". Without

  • vault_move_in

    Free up space on this machine: move local files into a ShieldFive vault folder with ONE approval.

  • vault_read_file

    Decrypt a text file in memory and return its contents inside an <untrusted-file-content> block.

  • vault_rename

    Rename a file or folder. Needs the "organize" permission. Without confirm: true only reports the

  • vault_search_files

    Search the vault by name, path, file type, size or date. Runs locally over names decrypted in

  • vault_storage_stats

    Total usage in this connection’s scope, the biggest folders and files, and a breakdown by file type.

  • vault_trash

    Move up to … files or folders into this connection’s folder in the owner’s

  • vault_uploadwrite action

    Encrypt a file from the allowed local folders on this machine and put it in a ShieldFive folder

Public scan report

scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it

no findings
  • Code scan27 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
Overall 85/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How ShieldFive compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
85/100
higher than 70% of 48,243 servers
Tools
21
the typical server has 7
Tools that change things
14%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
232
more than 77% of 12,306 servers with a package

What its tools let an agent do: 15 read · 1 create · 4 change · 1 delete

Release history: 6 versions in the registry since 2026-09-19, latest 2026-10-13, typically one every 1 day.

Install ShieldFive in Claude Code, Cursor or VS Code

Runs npx -y @shieldfive/mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add mcp -- npx -y @shieldfive/mcp
Add to Cursor

What the publisher says

From the ShieldFive repository's README, as published. We do not edit it. Read it on GitHub

@shieldfive/mcp

A Model Context Protocol server that lets Claude, ChatGPT, Cursor or a local model tidy two things:

move, and move to the Bin. It works on the folders you grant, decrypts on your machine, and every change can be undone;

  • your ShieldFive vault: find duplicates, see what takes the space, rename,
  • folders on your own disk: the same jobs, with no network access at all.

ShieldFive's servers never see a file name or a byte of content in the clear, and that holds with this server running too. Decryption happens inside this process, on your computer. What the assistant then does with what it reads is a separate question, answered under Security model.

<!-- DEMO: a 40-second screen recording of a duplicate-cleanup session in Claude Desktop: "find duplicates in my Photos" → groups with sizes → "trash the copies" → preview → confirm → the items appear in ShieldFive's Bin → one is undone from Settings → AI assistants. Record against a demo vault, never a real one. -->

Connect your vault in 60 seconds

Requires Node 20 or newer.

claudedesktopconfig.json (Cursor uses the same block in ~/.cursor/mcp.json):

  1. Add the server to your assistant. For Claude Desktop, add this to
{
     "mcpServers": {
       "shieldfive": { "command": "npx", "args": ["-y", "@shieldfive/mcp"] }
     }
   }

For Claude Code: claude mcp add shieldfive -- npx -y @shieldfive/mcp

vault_connect, which opens ShieldFive in your browser.

  1. Restart the assistant and ask it to tidy up my ShieldFive vault. It calls

expiry (1 hour to 90 days), then click Authorize.

  1. In that tab, choose the folders, Read only or Read and organize, and an

That is the whole setup: the connection is delivered straight to the server running on your computer — over 127.0.0.1, never through ShieldFive — and stored in your system keychain. Nothing is copied by hand.

To connect before you start a conversation, run npx -y @shieldfive/mcp login: same browser page, same result. login --paste takes a connection string you copied from Settings → AI assistants instead, for a machine with no browser.

npx @shieldfive/mcp status shows which connection is configured and whether ShieldFive still accepts it. npx @shieldfive/mcp logout removes it from the keychain. Revoking it in ShieldFive is what cuts off access everywhere.

For CI or a machine without a keychain, set SHIELDFIVEGRANT to the connection string instead. Anything that can read the server's environment can then read the connection, so prefer the keychain wherever there is one. Setting SHIELDFIVEGRANT=none keeps one client local-only on a machine whose keychain holds a connection for another.

How the browser hand-off is kept honest

http://127.0.0.1:/callback itself. A crafted link cannot send your connection anywhere but your own machine.

  • The page never accepts a callback URL, only a port number, and builds

exactly the loopback address (so a rebound DNS name is refused), no Origin but ShieldFive's, and a 256-bit state compared in constant time. Then it closes.

  • The listener accepts exactly one delivery: a POST to /callback, Host

land in browser history.

  • The connection string travels in a form body, never in a URL, so it does not

most 10 minutes.

  • The listener exists only while a connection is being authorized, and for at

Security model

In plain terms:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

ShieldFive: common questions

Is ShieldFive MCP server safe?
Yes, by our scan: it is graded A (85/100). Read the ShieldFive safety report
How do I install ShieldFive?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does ShieldFive need an API key?
Yes. The registry entry asks for SHIELDFIVE_GRANT.
Is ShieldFive maintained?
The last commit was 23 days ago (2026-10-13). The latest release is v0.7.1.
What can I use instead of ShieldFive?
Servers from other publishers that do the same job: Computer MCP server and SSH Manager MCP server.
How does ShieldFive compare with other MCP servers?
safety score 85/100 (higher than 70% of 48,243 servers); tools 21 (the typical server has 7); tools that change things 14% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to ShieldFive

Same job from other publishers: the closest match first, then the best rated.

  • Computer
    A private persistent computer: files that survive between runs, a bash shell and JavaScript.
    A
  • SSH Manager
    SSH for AI agents: commands, files, backups and health, with approval, a vault and an audit trail
    A