Shark MCP Server
Security scanner for AI agent tools. Local static scan of MCP IDE configs (41 rules, toxic flow heuristics, AAuth visibility, auto-fix, tool pinning). Optional proxy + in-browser dashboard: traffic, findings, AAuth Explorer, YARA, Playground. Smart Scan o
context tax
queued
security
queued
cold start
queued
freshness
Slowing6mo ago
Install Shark MCP server
Install in Claude Code
claude mcp add shark -- npx -y @mcp-shark/mcp-sharkInstall in Cursor
{
"mcpServers": {
"shark": {
"command": "npx",
"args": [
"-y",
"@mcp-shark/mcp-shark"
]
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).
Install in Claude Desktop
{
"mcpServers": {
"shark": {
"command": "npx",
"args": [
"-y",
"@mcp-shark/mcp-shark"
]
}
}
}Settings → Developer → Edit Config (claude_desktop_config.json), then restart.
Install in VS Code
{
"servers": {
"shark": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@mcp-shark/mcp-shark"
]
}
}
}Add to .vscode/mcp.json in your workspace.
Install in Windsurf
{
"mcpServers": {
"shark": {
"command": "npx",
"args": [
"-y",
"@mcp-shark/mcp-shark"
]
}
}
}Add to ~/.codeium/windsurf/mcp_config.json.
Freshness
Slowing — last maintenance signal 6mo ago. The newest of the signals below sets the band.
Last commit (default branch)
2026-04-26 · 6mo ago · GitHub
Latest release
2026-04-26 · 6mo ago · GitHub · v1.7.2
Package published
no data · npm/PyPI
Registry entry updated
no data · official registry
FAQ
›How do I install the Shark MCP server in Claude Code?
Run: claude mcp add shark -- npx -y @mcp-shark/mcp-shark. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.
›Does Shark require an API key?
No required environment variables are declared in its published metadata.
›Can I use Shark as a remote (hosted) MCP server?
No hosted endpoint is published; it runs locally over stdio.
›Is Shark in the official MCP registry?
No. It was indexed from npm.
Alternatives to Shark
Other browser automation MCP servers.
Browser UseActiveControl a real Chrome browser to complete any task: fill forms, extract data, book flights.
ScraplingActiveWeb scraping with stealth HTTP, real browsers, and Cloudflare bypass. CSS selectors supported.
NetdataActiveDiscovery, exploration, reporting and root cause analysis over Netdata metrics, logs, systems, containers, processes and network connections.
MetabaseActiveLets AI clients search, explore, query, and visualize data in a Metabase instance.
PostHogActiveOfficial PostHog MCP Server for product analytics, feature flags, experiments, and more.
BrowserActiveA fast, lightweight MCP server that empowers LLMs with browser automation via Puppeteer’s structured accessibility data, featuring optional vision mode for complex visual understanding and flexible, cross-platform configuration.