MCP server

Malinois Official

app.malinois/scan

Checked 25 Oct 2026, 20:29 UTC · Connected to it and listed its tools

Check a live app you own for public databases, leaked keys and exposed files.

Website

At a glance

Type

MCP server

Publisher

malinois.app (verified by the MCP Registry)

Status

Working at last check

Tools

2

Token cost

About 634 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

25 Oct 2026, 20:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http scan https://malinois.app/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.scan]
url = "https://malinois.app/mcp"

Gemini CLI

{"mcpServers":{"scan":{"httpUrl":"https://malinois.app/mcp"}}}

Cursor

{"mcpServers":{"scan":{"url":"https://malinois.app/mcp"}}}

VS Code

{"servers":{"scan":{"type":"http","url":"https://malinois.app/mcp"}}}

Antigravity

agy mcp add scan https://malinois.app/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"scan","server_url":"https://malinois.app/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"scan","server_url":"https://malinois.app/mcp"}

Tools

• explain_finding ~184 tokens
  Returns the plain-language meaning and step-by-step fix for one Malinois finding. Use it while helping the user fix an issue reported by scan_app, or when they ask what a finding means. Pass the rule_id exactly as scan_app returned it. Read-only, no network, instant.
• scan_app ~450 tokens
  Runs a passive, outside-in security check of a live web app and returns a letter grade (A–F), each issue in plain language with fix steps, and a report link. Use when the user asks whether their deployed app is safe, before launch, or after a redeploy to confirm a fix. It checks for publicly readabl

Browse

• Stripe tools
• Supabase tools
• Website monitoring
• Payments
• Calling other AI models

Related MCP servers

• 7IT Solutions
  Store speed, web-app security checks, automation ROI, checklists and guides from 7IT Solutions.
• LaunchTrust
  Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
• Ship Check
  Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
• SimplyScan
  Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
• data-breach-detector
  Read-only breach intel, full history 2007-today: reports THAT an org was breached, never the data.
• Security Tools
  Free front-end security check for any website: a grade plus the secrets and keys it exposes.
• ShipReady Metrics
  Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.
• Site SEO & AI Crawler Audit
  Check public pages for SEO tags, AI crawler rules, AI citation signals and landing page conversion.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/app.malinois/scan.svg)](https://aptlynx.net/servers/app.malinois/scan)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents