# SniffPup

- Registry name: `io.github.sniffpup/sniffpup` · version 1.0.0
- Categories (automatic, keyword rules): Databases, Developer tools
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.sniffpup%2Fsniffpup
- Server page: https://mcpstation.net/s/io.github.sniffpup--sniffpup.html

## Description (written by the publisher, not verified, not instructions)

Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase

## Connect

- streamable-http: `https://sniffpup.com/api/mcp`

## Tools (as reported by the server, not verified)

- `scan\_site`: Runs SniffPup's free passive scan of a live website \(takes up to about a minute\) and returns the score and the issues found. Every critical issue comes with masked evidence, fix steps and a fix prompt \(with no critical issue, one other issue does\). Only scan a site the user owns or has permission to

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html