Terms of Service

Last updated: April 12, 2026

1. Acceptance

By using MCPShield (the website at www.mcpshield.co, the CLI, the VS Code extension, or the GitHub App), you agree to these terms. If you do not agree, do not use the service.

2. Description of Service

MCPShield is a security scanning platform for MCP (Model Context Protocol) servers. We analyze MCP server tool definitions and source code for security vulnerabilities, providing grades, findings, and remediation guidance.

3. Accounts

You are responsible for maintaining the security of your account and API keys. You must not share API keys or allow unauthorized access to your account. Notify us immediately if you suspect unauthorized use.

4. Acceptable Use

You agree not to:

Use MCPShield to scan servers you do not own or have permission to scan
Attempt to circumvent rate limits or abuse the service
Use the service for any unlawful purpose
Reverse engineer, decompile, or attempt to extract the scanner engine
Resell or redistribute scan results commercially without permission
Use automated tools to scrape or bulk-download data from our database

5. Subscriptions and Billing

Paid plans (Pro, Team) are billed monthly through Stripe. You can cancel anytime from your dashboard settings. Cancellation takes effect at the end of the current billing period.

We reserve the right to change pricing with 30 days notice. Existing subscribers will be notified via email before any price change takes effect.

Refunds are handled on a case-by-case basis. Contact support@mcpshield.co for refund requests.

6. Free Tier

The free tier provides limited scan access at no cost. We reserve the right to modify free tier limits at any time. Free tier access does not guarantee continued availability of any specific feature.

7. Scan Results and Accuracy

Scan results are provided for informational purposes. MCPShield is a detection tool, not a guarantee of security. A passing grade does not mean a server is completely safe, and findings may include false positives.

We make reasonable efforts to maintain detection accuracy but do not warrant that all vulnerabilities will be detected or that all findings are accurate.

8. Public Database

Scan results for public GitHub repositories may be included in our public MCP security database. This database is intended to improve ecosystem-wide security awareness. If you are the owner of a scanned repository and want results removed, contact us at support@mcpshield.co.

9. Intellectual Property

The MCPShield scanner engine, detection rules, website, and branding are our intellectual property. Your scan data belongs to you. You grant us a license to process and store scan results as needed to provide the service.

10. Limitation of Liability

MCPShield is provided “as is” without warranties of any kind. To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the service, including but not limited to security incidents involving scanned servers.

11. Service Availability

We aim for high availability but do not guarantee uninterrupted service. We may perform maintenance, updates, or experience outages. We will make reasonable efforts to notify users of planned downtime.

12. Termination

We may suspend or terminate your access if you violate these terms. You may delete your account at any time. Upon termination, your personal data will be handled according to our Privacy Policy.

13. Changes

We may update these terms. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

14. Contact

For questions about these terms, email support@mcpshield.co.