Products

Solutions

Industries

Services

Resources

REQUEST A DEMO

Home

Products

Shield

FREE · LOCAL · OPEN SOURCE · APACHE 2.0

Stop destructive tool calls before they reach the tool.

APERION Shield sits between an AI coding agent and the MCP servers it can call. It inspects the request locally and can allow, warn, require approval, or block the operation before a database, repository, filesystem, cloud API, or tool server receives it.

Read the Shield documentation

Part of the APERION Trust Fabric

Explore Trust Fabric

Smartflow

Maestro

MECHANISM

One local middleman across the MCP lifecycle.

APERION Shield terminal demo blocking an AI agent’s database-drop and recursive-delete tool calls.

WRAP

Point the MCP host at Shield. Shield starts or connects to the upstream server and proxies the interaction transparently.

INSPECT

Evaluate each tool call against the installed shieldset, workspace context, prior decisions, burst behavior, and any configured identity gate.

DECIDE

Block critical operations, queue high-risk operations for approval, warn on medium-risk calls, and allow low-risk calls.

WATCH BOTH DIRECTIONS

Pin the tool catalog, scan descriptions and results, and detect changes associated with tool poisoning, prompt injection, or supply-chain compromise.

LIFECYCLE COVERAGE

Guardrails before, during, and beyond each tool call.

Before installation

Scan an MCP server before trusting it.

At runtime

Apply local rules to each tool call without a hosted account or telemetry requirement.

At the operating-system boundary

Use the supported sandbox controls to constrain the upstream tool process.

Across an enterprise fleet

Connect the enterprise edition to Smartflow for centrally managed policy, approvals, and audit evidence.

Free where you build. Governed where you scale.

APERION SHIELD

Local MCP protection, ready now.

Free, local, open source, and designed for individual developers and teams that want immediate MCP protection.

SMARTFLOW SHIELD

The enterprise operating model.

Central policy, governed enrollment, approvals, organization-wide visibility, and integration with the broader runtime evidence chain.

Start local. Prove the pattern. Govern the fleet when you are ready.

Get Shield on GitHub

Discuss enterprise Shield

The runtime governance layer for enterprise AI agents in regulated industries.

Comparisons

Smartflow vs. LiteLLM

Smartflow vs. Portkey

Smartflow vs. TrueFoundry

Smartflow vs. Cloudflare AI Gateway

View all comparisons

Stop destructive tool calls before they reach the tool.

Stop destructive tool calls before they reach the tool.

Stop destructive tool calls before they reach the tool.

Stop destructive tool calls before they reach the tool.

One local middleman across the MCP lifecycle.

One local middleman across the MCP lifecycle.

One local middleman across the MCP lifecycle.

One local middleman across the MCP lifecycle.

WRAP

WRAP

INSPECT

INSPECT

DECIDE

DECIDE

WATCH BOTH DIRECTIONS

WATCH BOTH DIRECTIONS

Guardrails before, during, and beyond each tool call.

Guardrails before, during, and beyond each tool call.

Guardrails before, during, and beyond each tool call.

Before installation

Before installation

Before installation

At runtime

At runtime

At runtime

At the operating-system boundary

At the operating-system boundary

At the operating-system boundary

Across an enterprise fleet

Across an enterprise fleet

Across an enterprise fleet

Free where you build. Governed where you scale.

Free where you build. Governed where you scale.

Free where you build. Governed where you scale.

Local MCP protection, ready now.

The enterprise operating model.

Start local. Prove the pattern. Govern the fleet when you are ready.

Start local. Prove the pattern. Govern the fleet when you are ready.

Start local. Prove the pattern. Govern the fleet when you are ready.

Products

Solutions

Industries

Resources

Company