arrowshield-mcp 0.1.3

ArrowShield MCP server

arrowshield-mcp

ArrowShield MCP server — security scanning tools for AI coding agents (Cursor, Claude Code, and other MCP-compatible IDEs).

Private beta — early access. Get an API key at https://app.arrowshield.io/settings/api-keys

Install

Run directly with uv (no install needed):

uvx arrowshield-mcp

Or install into an environment:

uv pip install arrowshield-mcp     # or: pip install arrowshield-mcp

There is also an npm shim that delegates to uvx:

npx @arrowshield/mcp

Configure your IDE

The server runs over stdio and is spawned by your IDE. It needs ARROWSHIELD_API_KEY in its environment.

Cursor — add to ~/.cursor/mcp.json (or a project .cursor/mcp.json):

{
  "mcpServers": {
    "arrowshield": {
      "command": "uvx",
      "args": ["arrowshield-mcp"],
      "env": { "ARROWSHIELD_API_KEY": "as_live_YOUR_KEY" }
    }
  }
}

Claude Code — one command:

claude mcp add arrowshield --env ARROWSHIELD_API_KEY=as_live_YOUR_KEY -- uvx arrowshield-mcp

Any MCP-compatible client works with the same command / args / env shape.

Launch / verify

# Check it's installed
uvx arrowshield-mcp --version

# Run the stdio server (what your IDE launches for you)
ARROWSHIELD_API_KEY=as_live_YOUR_KEY uvx arrowshield-mcp

# Run as a remote HTTP server instead
ARROWSHIELD_API_KEY=as_live_YOUR_KEY uvx arrowshield-mcp serve --host 0.0.0.0 --port 8080

Environment variables

Variable	Required	Description
ARROWSHIELD_API_KEY	yes	Your API key (as_live_…).
ARROWSHIELD_API_URL	no	Override the API endpoint (defaults to production).
ARROWSHIELD_PROJECT_DIR	no	Project directory to scan (defaults to the current working directory).