83trust / 100

ShipLatch

by shiplatch.com in Security & trust

MCP serverPassing, checked 4 h ago

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

https://shiplatch.com/mcp
Tools
3
open to any client
Uptime
100%
last 30 days
Response time
208 ms
737 ms slowest 5%
Last check
Passed
4 h ago, next in 2 h

Scan it nowHow to connect

Reliability

All checks passedSome failedAll failedNot checked

Status and outage history · Atom feed · Watch with other listings

How to connect

Add it to any MCP client that supports remote servers.

{
  "mcpServers": {
    "shiplatch": {
      "type": "http",
      "url": "https://shiplatch.com/mcp"
    }
  }
}

3 tools

  • scan_url

    Run ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits. Returns the grade, issue counts and…

  • get_scan

    Get the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.

  • list_checks

    List the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.

Security scan

No findings

We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.

Recent checks

WhenResultHTTPTime
4 h agoPassed200737 ms
17 h agoPassed200124 ms
30 h agoPassed200256 ms
44 h agoPassed200315 ms
2 days agoPassed200210 ms
Show 9 older checks
3 days agoPassed200196 ms
3 days agoPassed200179 ms
4 days agoPassed200194 ms
4 days agoPassed200234 ms
5 days agoPassed200197 ms
5 days agoPassed200222 ms
6 days agoPassed200189 ms
6 days agoPassed200208 ms
6 days agoPassed200426 ms