APIShield WAF v4.0 MCP Server

com.run402.apishield-waf/mcpv4.0.0

50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).

remoteofficial registry

context tax

pending

security

pending

cold start

hosted

freshness

Activetoday

Our reading of APIShield WAF v4.0, from the data

APIShield WAF v4.0 is a security MCP server, listed in the official MCP Registry.

We haven't measured its tool list yet, so its token cost is unknown.

Maintenance is active: the last public signal was in the last day (2026-10-18). For comparison, 67% of security servers are active or maintained.

It runs as a hosted endpoint, so there is nothing to install.

Install APIShield WAF v4.0 MCP server

claude mcp add --transport http apishield-waf https://apishield-waf.run402.com/api/mcp

{
  "mcpServers": {
    "apishield-waf": {
      "url": "https://apishield-waf.run402.com/api/mcp"
    }
  }
}

{
  "mcpServers": {
    "apishield-waf": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://apishield-waf.run402.com/api/mcp"
      ]
    }
  }
}

Or add it as a custom connector under Settings → Connectors. The config above bridges via mcp-remote.

{
  "servers": {
    "apishield-waf": {
      "type": "http",
      "url": "https://apishield-waf.run402.com/api/mcp"
    }
  }
}

{
  "mcpServers": {
    "apishield-waf": {
      "serverUrl": "https://apishield-waf.run402.com/api/mcp"
    }
  }
}

Remote endpoints

streamable-httphttps://apishield-waf.run402.com/api/mcp

Freshness

Active — last maintenance signal today. The newest of the signals below sets the band.

Last commit (default branch)
no data · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-10-18 · today · official registry · v4.0.0

How it compares in Security

Against the most-starred security servers we index. Token cost is per model turn, measured from each server's live tool list.

Server	Stars	Tools	Tokens / turn	Freshness	Runs
APIShield WAF v4.0 (this)	—	—	not measured	Active	hosted
Semgrep	17,123	—	not measured	Active	—
Ida Pro	13,002	—	not measured	Active	—
Ghidra	11,390	—	not measured	Active	—
Robin: AI-Powered Dark Web OSINT	7,591	—	not measured	Active	local
Claude Code Ultimate Guide	6,196	—	not measured	Active	local

All security MCP servers

FAQ

›How do I install the APIShield WAF v4.0 MCP server in Claude Code?

Run: claude mcp add --transport http apishield-waf https://apishield-waf.run402.com/api/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does APIShield WAF v4.0 require an API key?

No required environment variables are declared in its published metadata.

›Can I use APIShield WAF v4.0 as a remote (hosted) MCP server?

Yes. It is a hosted MCP server; connect to its URL with any client that supports remote MCP.

›Is APIShield WAF v4.0 in the official MCP registry?

Yes, as com.run402.apishield-waf/mcp.

Sources and method

Official MCP Registry entry: updated 2026-10-18
Last checked against all sources: 2026-10-19

The description, packages and links come from the maintainer's own published metadata. Token cost, security signals, freshness and the reading above are MCPSkillHub's own measurements; see the methodology. Spot an error? Request a correction or claim the listing.