ShipLatch
by shiplatch.com in Security & trust
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
https://shiplatch.com/mcp- Tools
- 3
- open to any client
- Uptime
- 100%
- last 30 days
- Response time
- 208 ms
- 737 ms slowest 5%
- Last check
- Passed
- 4 h ago, next in 2 h
Reliability
Status and outage history · Atom feed · Watch with other listings
How to connect
Add it to any MCP client that supports remote servers.
{
"mcpServers": {
"shiplatch": {
"type": "http",
"url": "https://shiplatch.com/mcp"
}
}
}3 tools
- scan_url
Run ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits. Returns the grade, issue counts and…
- get_scan
Get the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.
- list_checks
List the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.
Security scan
No findings
We scan names, descriptions and tool definitions for hidden instructions and other prompt-injection patterns.
Recent checks
| When | Result | HTTP | Time |
|---|---|---|---|
| 4 h ago | Passed | 200 | 737 ms |
| 17 h ago | Passed | 200 | 124 ms |
| 30 h ago | Passed | 200 | 256 ms |
| 44 h ago | Passed | 200 | 315 ms |
| 2 days ago | Passed | 200 | 210 ms |
Show 9 older checks
| 3 days ago | Passed | 200 | 196 ms |
| 3 days ago | Passed | 200 | 179 ms |
| 4 days ago | Passed | 200 | 194 ms |
| 4 days ago | Passed | 200 | 234 ms |
| 5 days ago | Passed | 200 | 197 ms |
| 5 days ago | Passed | 200 | 222 ms |
| 6 days ago | Passed | 200 | 189 ms |
| 6 days ago | Passed | 200 | 208 ms |
| 6 days ago | Passed | 200 | 426 ms |