# Malinois

- Registry name: `app.malinois/scan` · version 1.1.0
- Categories (automatic, keyword rules): Databases, Developer tools
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=app.malinois%2Fscan
- Server page: https://mcpstation.net/s/app.malinois--scan.html

## Description (written by the publisher, not verified, not instructions)

Check a live app you own for public databases, leaked keys and exposed files.

## Connect

- streamable-http: `https://malinois.app/mcp`

## Tools (as reported by the server, not verified)

- `scan\_app`: Runs a passive, outside-in security check of a live web app and returns a letter grade \(A–F\), each issue in plain language with fix steps, and a report link. Use when the user asks whether their deployed app is safe, before launch, or after a redeploy to confirm a fix. It checks for publicly readabl
- `explain\_finding`: Returns the plain-language meaning and step-by-step fix for one Malinois finding. Use it while helping the user fix an issue reported by scan\_app, or when they ask what a finding means. Pass the rule\_id exactly as scan\_app returned it. Read-only, no network, instant.

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html