// SCAN REPORT

Shepherd MCP

18 tools. 0 can modify or destroy data without limits.

Read-only server. Low risk, but rate limits prevent runaway API costs.

Last updated: 4 Jul 2026

0 can modify or destroy data

18 read-only

18 tools total

Community server · catalogue entry verified 04/07/2026

How to control Shepherd MCP ↓

TOOL MAP

What Shepherd MCP exposes to your agents

Read (18) Write / Execute (0) Destructive / Financial (0)

Running more than one server? Check your whole stack →

THE RISK

What can go wrong

Even read-only tools carry cost. An agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up bills.

POLICY

How to control Shepherd MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Shepherd MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "aiobs_diff_sessions": {
    "limits": [
      {
        "counter": "aiobs_diff_sessions_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Shepherd MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SHEPHERD →

Instant setup, no code required.

FULL CATALOGUE

All 18 Shepherd MCP tools

READ 18 tools

Read aiobs_diff_sessions [AIOBS] Compare two AI agent sessions and show their differences including metadata, LLM calls, tokens, latenc Read aiobs_get_session [AIOBS] Get detailed information about a specific AI agent session including the full trace tree, LLM calls, f Read aiobs_list_sessions [AIOBS] List all AI agent sessions from Shepherd. Returns session metadata, labels, and event counts. Read aiobs_search_sessions [AIOBS] Search and filter AI agent sessions with multiple criteria including text search, labels, provider, mo Read diff_sessions [Deprecated: Use aiobs_diff_sessions] Compare two AI agent sessions. Read get_session [Deprecated: Use aiobs_get_session] Get detailed information about a specific AI agent session. Read langfuse_get_observation [Langfuse] Get a specific observation with full details including input, output, usage, and costs. Read langfuse_get_score [Langfuse] Get a specific score/evaluation with full details. Read langfuse_get_session [Langfuse] Get a specific session with its metrics and aggregated data. Read langfuse_get_trace [Langfuse] Get a specific trace with its observations. Returns full trace data including all observations (gen Read langfuse_list_observations [Langfuse] List observations (generations, spans, events) with filters. Observations are the building blocks o Read langfuse_list_scores [Langfuse] List scores/evaluations with filters. Scores are attached to traces or observations. Read langfuse_list_sessions [Langfuse] List sessions with pagination. Sessions group related traces together. Read langfuse_list_traces [Langfuse] List traces with pagination and filters. Traces represent complete workflows or conversations. Read langfuse_search_sessions [Langfuse] Search and filter sessions with extended criteria including text search, user ID, trace count range Read langfuse_search_traces [Langfuse] Search and filter traces with extended criteria including text search, release, cost range, and lat Read list_sessions [Deprecated: Use aiobs_list_sessions] List all AI agent sessions from Shepherd. Read search_sessions [Deprecated: Use aiobs_search_sessions] Search and filter AI agent sessions.

FAQ

Questions about Shepherd MCP

Is the Shepherd MCP server safe to use without restrictions? +

The Shepherd MCP server is primarily read-only with 18 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the Shepherd MCP server expose? +

18 tools across 1 categories: Read. 18 are read-only. 0 can modify, create, or delete data.

How do I enforce a policy on Shepherd MCP? +

Register the Shepherd MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Shepherd MCP tool call.

Deterministic rules across all 18 Shepherd MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SHEPHERD →

Instant setup, no code required.

18 Shepherd MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.