Summary
Gives Claude direct access to RelayShield's security intelligence APIs through seven tools: breach lookups across 13 billion records via HIBP, live SIM swap detection from carrier data, typosquat domain monitoring using certificate transparency, OAuth supply chain breach checks for apps like Slack and GitHub, and async URL/file malware scanning across 70+ engines. Runs on either a RapidAPI subscription (free tier: 100 calls/month, paid from $29/month) or pure pay-as-you-go via USDC on Base using the x402 protocol at $0.10 to $0.50 per check. Useful when you need security checks inline with AI workflows without building integrations yourself.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →relayshield-mcp
mcp-name: io.github.nzdsf2-gif/relayshield-mcp
RelayShield security intelligence as an MCP server — plug breach detection, SIM swap detection, domain lookalike monitoring, OAuth supply chain watchlist, and URL/file scanning directly into Claude and any MCP-compatible AI agent.
Tools
| Tool | What it does | PAYG price |
|---|---|---|
check_breach | Email breach lookup — 13 billion+ records via HIBP | $0.10 USDC |
check_sim_swap | SIM swap / eSIM detection via live carrier data | $0.25 USDC |
check_domain_lookalikes | Typosquat and lookalike domain detection with cert transparency | $0.50 USDC |
check_oauth_watchlist | OAuth-app breach + stolen-token exposure via HIBP + stealer-log corpus | $0.30 USDC |
check_infostealer | Infostealer malware log lookup via Hudson Rock Cavalier | $0.15 USDC |
scan_wallet | EVM wallet on-chain risk check via GoPlus Security | $0.10 USDC |
scan_url | URL malware/phishing scan across 70+ engines (async) | $0.05 USDC |
scan_file | Binary malware scan across 70+ AV engines (async) | $0.10 USDC |
check_scan_result | Poll for verdict after scan_url / scan_file | free |
check_mcp_registry_risk | Typosquat/IOC/registration-age check for MCP servers | $0.35 USDC |
check_prompt_injection_breach | Breach exposure sourced from AI-agent prompt-injection attacks | $0.35 USDC |
check_supply_chain | Up to 10 vendor domains checked for breach/infostealer exposure | $0.10 USDC |
check_session_risk | Active/reusable stolen session (cookie/token) exposure check | $0.30 USDC |
check_nhi_exposure | Non-human-identity credential exposure — API keys, service tokens, PATs | $0.40 USDC |
check_secret_scan | Secrets exposed in public GitHub repositories | $0.35 USDC |
check_oauth_watchlist, check_supply_chain, check_session_risk, check_nhi_exposure, and
check_secret_scan cover related ground — connected-app, session, and machine-credential exposure
for an identity or its supply chain — and are a natural set to use together when vetting an agent's
current authority, not just a login.
Access modes
Subscription — API key from api.relayshield.net/developers. All 15 tools available. Free tier: 100 calls/month. Paid tiers from $29/month.
Pay-as-you-go — No API key needed. Pay per check in USDC on Base (x402 protocol). Set RELAYSHIELD_X_PAYMENT with your payment proof. All 15 tools available ($0.05–$0.50/check, check_scan_result free). Call a tool with no payment set to receive pricing and payment instructions.
Discovery — Set neither key nor payment. Tool calls return payment requirements and a subscription link.
Install
pip install relayshield-mcp
Or run without installing:
uvx relayshield-mcp
Configure Claude Desktop
Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
Subscription (RelayShield API key):
{
"mcpServers": {
"relayshield": {
"command": "relayshield-mcp",
"env": {
"RELAYSHIELD_API_URL": "https://api.relayshield.net",
"RELAYSHIELD_API_KEY": "your-relayshield-api-key-here"
}
}
}
}
Pay-as-you-go (x402 USDC on Base):
{
"mcpServers": {
"relayshield": {
"command": "relayshield-mcp",
"env": {
"RELAYSHIELD_API_URL": "https://api.relayshield.net",
"RELAYSHIELD_X_PAYMENT": "your-x402-payment-proof-here"
}
}
}
}
Quit and relaunch Claude Desktop after editing.
Configure Claude Code (CLI)
claude mcp add relayshield \
--command relayshield-mcp \
--env RELAYSHIELD_API_URL=https://api.relayshield.net \
--env RELAYSHIELD_API_KEY=your-relayshield-api-key-here
Usage examples
Once configured, ask Claude:
Check whether user@example.com has been breached.
Has there been a SIM swap on +14155551234?
Check acme.com for lookalike domains.
Are any OAuth apps connected to user@example.com in a recent breach?
Scan this URL for malware: https://suspicious-link.example.com
For URL and file scans, Claude automatically polls check_scan_result every 5 seconds until the verdict is ready.
Environment variables
| Variable | Description |
|---|---|
RELAYSHIELD_API_URL | API Gateway base URL (required) |
RELAYSHIELD_API_KEY | RelayShield subscription key (subscription mode) — get one at api.relayshield.net/developers |
RELAYSHIELD_X_PAYMENT | x402 payment proof — USDC on Base (pay-as-you-go mode) |
Set RELAYSHIELD_API_KEY or RELAYSHIELD_X_PAYMENT — not both. API key takes priority if both are set.
Links
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →Configuration
RELAYSHIELD_API_URL*API Gateway base URL — https://xhh3tfrhng.execute-api.us-east-1.amazonaws.com/prod
RELAYSHIELD_API_KEYsecretRapidAPI subscription key (subscription mode — all 7 tools available)
RELAYSHIELD_X_PAYMENTsecretx402 payment proof — USDC on Base (pay-as-you-go mode — 4 tools, no API key needed)
Categories
Registryactive
Packagerelayshield-mcp
TransportSTDIO
AuthRequired
UpdatedMay 18, 2026
