relayshield-mcp

mcp-name: io.github.nzdsf2-gif/relayshield-mcp

RelayShield security intelligence as an MCP server — plug breach detection, SIM swap detection, domain lookalike monitoring, OAuth supply chain watchlist, and URL/file scanning directly into Claude and any MCP-compatible AI agent.

Tools

check_oauth_watchlist, check_supply_chain, check_session_risk, check_nhi_exposure, and check_secret_scan cover related ground — connected-app, session, and machine-credential exposure for an identity or its supply chain — and are a natural set to use together when vetting an agent's current authority, not just a login.

Access modes

Subscription — API key from api.relayshield.net/developers. All 15 tools available. Free tier: 100 calls/month. Paid tiers from $29/month.

Pay-as-you-go — No API key needed. Pay per check in USDC on Base (x402 protocol). Set RELAYSHIELD_X_PAYMENT with your payment proof. All 15 tools available ($0.05–$0.50/check, check_scan_result free). Call a tool with no payment set to receive pricing and payment instructions.

Discovery — Set neither key nor payment. Tool calls return payment requirements and a subscription link.

Install

pip install relayshield-mcp

Or run without installing:

uvx relayshield-mcp

Configure Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

Subscription (RelayShield API key):

{
  "mcpServers": {
    "relayshield": {
      "command": "relayshield-mcp",
      "env": {
        "RELAYSHIELD_API_URL": "https://api.relayshield.net",
        "RELAYSHIELD_API_KEY": "your-relayshield-api-key-here"
      }
    }
  }
}

Pay-as-you-go (x402 USDC on Base):

{
  "mcpServers": {
    "relayshield": {
      "command": "relayshield-mcp",
      "env": {
        "RELAYSHIELD_API_URL": "https://api.relayshield.net",
        "RELAYSHIELD_X_PAYMENT": "your-x402-payment-proof-here"
      }
    }
  }
}

Quit and relaunch Claude Desktop after editing.

Configure Claude Code (CLI)

claude mcp add relayshield \
  --command relayshield-mcp \
  --env RELAYSHIELD_API_URL=https://api.relayshield.net \
  --env RELAYSHIELD_API_KEY=your-relayshield-api-key-here

Free checks server (no key, no signup)

relayshield-free-mcp ships in the same package and exposes RelayShield's free, keyless threat-intel checks as four MCP tools. It is the funnel into the paid server above: every summary links the deeper paid checks where they apply.

pip install relayshield-mcp
# or: uvx relayshield-mcp
relayshield-free-mcp

Claude Desktop — add to claude_desktop_config.json:

{
  "mcpServers": {
    "relayshield-free": {
      "command": "relayshield-free-mcp",
      "env": {
        "RELAYSHIELD_API_URL": "https://api.relayshield.net",
        "RS_SOURCE_TAG": "mcp-free-claude"
      }
    }
  }
}

ChatGPT — ChatGPT connects to MCP servers through Developer Mode connectors, which require a remote HTTP endpoint; it does not launch a local stdio server. A hosted RelayShield MCP endpoint is planned — until then, use Claude Desktop, Claude Code, Cursor, or any other stdio-capable MCP client. Set RS_SOURCE_TAG=mcp-free-chatgpt once the hosted endpoint is live so usage is attributed to the ChatGPT channel. check_breach stays disabled until a partner key is set via RELAYSHIELD_API_KEY.

Partner keys — distributors (Claude, ChatGPT, registries) each get their own RelayShield partner key with a per-key daily call cap, set via RELAYSHIELD_API_KEY. Separate keys per channel mean one channel's abuse never takes down the others, and RS_SOURCE_TAG attributes usage per channel. The server runs fine without any key — link, wallet, and email checks stay keyless on the free tier.

Usage examples

Once configured, ask Claude:

Check whether user@example.com has been breached.

Has there been a SIM swap on +14155551234?

Check acme.com for lookalike domains.

Are any OAuth apps connected to user@example.com in a recent breach?

Scan this URL for malware: https://suspicious-link.example.com

For URL and file scans, Claude automatically polls check_scan_result every 5 seconds until the verdict is ready.

Environment variables

Set RELAYSHIELD_API_KEY or RELAYSHIELD_X_PAYMENT — not both. API key takes priority if both are set.

Links

• Landing page
• Get an API key
• GitHub
• Telegram bot / miniApp — free scam checks in chat
• WhatsApp scam-check bot — message a link, wallet, or email