APIShield WAF v4.0 MCP

com.run402.apishield-waf/mcpVersion 4.0.0

50-vector prompt-injection, llms.txt poisoning, SSRF & OpenAPI scanner ($1 USDC).

Status

Responds374 msNov 14, 2026, 14:13 UTCAnswered our handshake without sign-in.

We could not refresh it, so this page shows the last copy.

Data from the official MCP Registry, checked by run.zero. How we check

Streamable HTTP

https://apishield-waf.run402.com/api/mcpResponds374 msNov 14, 2026, 14:13 UTC

No sign-in

claude mcp add --transport http apishield-waf https://apishield-waf.run402.com/api/mcp

1
2
3

Settings > Connectors > Add custom connector
Name: apishield-waf
Remote MCP server URL: https://apishield-waf.run402.com/api/mcp

{
  "mcpServers": {
    "apishield-waf": {
      "url": "https://apishield-waf.run402.com/api/mcp"
    }
  }
}

code --add-mcp '{"name":"apishield-waf","type":"http","url":"https://apishield-waf.run402.com/api/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

4 tools

Tools of APIShield WAF v4.0 MCP
	Description		Read-only	Idempotent	Open world
`audit_domain`6-Agent SaaS Contract, GDPR Art. 28 DPA & EU AI Act Auditor — scans any public HTTPS domain and returns deterministic readiness scores and remediation artifacts.	6-Agent SaaS Contract, GDPR Art. 28 DPA & EU AI Act Auditor — scans any public HTTPS domain and returns deterministic readiness scores and remediation artifacts.	Not declared	Not declared	Not declared	Not declared
`get_package_manifest`Returns SHA-256 checksums, byte sizes, and file trees for all turnkey SaaS source .ZIP archives and Executive Digital Pack documents.	Returns SHA-256 checksums, byte sizes, and file trees for all turnkey SaaS source .ZIP archives and Executive Digital Pack documents.	Not declared	Not declared	Not declared	Not declared
`submit_buyer_offer`Creates an instant $1 Flash Trial or custom buyout settlement link (Tonkeeper TON / Base USDC).	Creates an instant $1 Flash Trial or custom buyout settlement link (Tonkeeper TON / Base USDC).	Not declared	Not declared	Not declared	Not declared
`verify_payment_and_unlock`Verifies a Base USDC/USDT or Tonkeeper TON/USDT-TON payment (by tx_hash, wallet address, or order reference) and returns the full unredacted Pro deliverables and 6-file download pack.	Verifies a Base USDC/USDT or Tonkeeper TON/USDT-TON payment (by tx_hash, wallet address, or order reference) and returns the full unredacted Pro deliverables and 6-file download pack.	Not declared	Not declared	Not declared	Not declared

Registry status: Active
Published: Oct 18, 2026
Updated: Oct 18, 2026
Website: https://apishield-waf.run402.com/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): AI models Security Finance and paymentsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared