ShipLatch
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Sollte ich dies verwenden
Qualität und Sicherheit
Basierend auf einer automatisierten Analyse der Tool-Definitionen und der Einhaltung des Protokolls.
Kontextkosten
Dies ist die ungefähre Anzahl der Tokens, die jedes Mal verbraucht werden, wenn die Tools des Servers in den Kontext eines Modells geladen werden. Höhere Werte verringern die Aufmerksamkeit, die für andere Aufgaben verfügbar ist.
Installieren
Installation mit einem Klick
Fügen Sie dies Ihrer Datei `claude_desktop_config.json` hinzu:
{
"mcpServers": {
"scanner": {
"url": "https://shiplatch.com/mcp"
}
}
}Remote-Endpunkte
https://shiplatch.com/mcpstreamable-httpWas es kann
Tool-Inventar
Tools (3)
🟢scan_url(url, focus)
Run ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits. Returns the grade, issue counts and the type of each issue; exact locations and fix prompts stay in the full report for the verified owner. Only scan sites you own or are authorized to test. Results for the same site are cached for 24 hours. If the scan takes longer than about 25 seconds it returns status "running" and a scan_ref: call get_scan with it.
Eingabe-Schema
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "The app's public URL, e.g. https://myapp.lovable.app"
},
"focus": {
"type": "string",
"enum": [
"env",
"vite",
"gemini",
"rls"
],
"description": "Optional: also answer one question yes/no. env = is a .env file public; vite = is a dev server exposed; rls = Supabase key exposure; gemini = Gemini/Google AI key exposure."
}
},
"required": [
"url"
],
"additionalProperties": false
}🟢get_scan(scan_ref)
Get the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.
Eingabe-Schema
{
"type": "object",
"properties": {
"scan_ref": {
"type": "string",
"description": "The scan_ref returned by scan_url"
}
},
"required": [
"scan_ref"
],
"additionalProperties": false
}🟢list_checks
List the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.
Eingabe-Schema
{
"type": "object",
"properties": {},
"additionalProperties": false
}Community
Nachweis