SniffPup
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
我該用這個嗎
品質與安全性
根據工具定義與協定合規性的自動化分析。
上下文成本
這是每次將伺服器的工具載入模型上下文時所消耗的約略 token 數量。數量越高，可用於其他工作的注意力就越少。
安裝
一鍵安裝
將以下內容加入你的 `claude_desktop_config.json` 檔案：
{
"mcpServers": {
"sniffpup": {
"url": "https://sniffpup.com/api/mcp"
}
}
}遠端端點
https://sniffpup.com/api/mcpstreamable-http它能做什麼
工具清單
工具（1）
🟡scan_site(url, consent)
Runs SniffPup's free passive scan of a live website (takes up to about a minute) and returns the score and the issues found. Every critical issue comes with masked evidence, fix steps and a fix prompt (with no critical issue, one other issue does). Only scan a site the user owns or has permission to test, and set consent to true only after the user confirms: I own this site or have permission to test it, and I agree to the Terms (including individual arbitration), Acceptable Use Policy and Privacy Policy. Free scans are passive: we only look at what any visitor's browser can see.
輸入結構描述
{
"type": "object",
"properties": {
"url": {
"type": "string",
"description": "The live site to scan, like https://your-app.com or your-app.com."
},
"consent": {
"type": "boolean",
"const": true,
"description": "true only if the user confirmed: I own this site or have permission to test it, and I agree to the Terms (including individual arbitration), Acceptable Use Policy and Privacy Policy. Free scans are passive: we only look at what any visitor's browser can see."
}
},
"required": [
"url",
"consent"
],
"additionalProperties": false
}社群
證據