All servers · Monitoring & logs
ShipLatch
com.shiplatch/scanner · v1.0.0
New (7 days)
Measured by MCP Station
| Last check | Reachable |
|---|---|
| Checked at | — |
| Check success 7 / 30 days | — |
| First-try success 30 days | — |
| Median response | — |
| Lookups 30 days | — |
| Authentication | No auth |
| MCP version | 2025-06-18 |
| Rank score | — |
| Declared risk | Read-only (all tools declare readOnlyHint) |
| Capabilities declared | tools |
| Tool definitions | 3 tools · with description 100% · input schema is an object 100% · read/destructive hints 100% |
Description written by the publisher, not verified
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Connect
streamable-http · https://shiplatch.com/mcp
claude mcp add --transport http scanner https://shiplatch.com/mcp{
"mcpServers": {
"scanner": {
"url": "https://shiplatch.com/mcp"
}
}
}Tools as reported by the server
scan_urlRun ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits. Returns the grade, issue counts and the type of each issueget_scanGet the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.list_checksList the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.
Website · JSON · Text for agents · Registry updated 2026-10-22