MCP server

ShipLatch Official

com.shiplatch/scanner

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

Working at last checkVerified publisher: shiplatch.comAbout 490 tokens per request once connected3 tools

https://shiplatch.com/mcp

At a glance

Type: MCP server
Publisher: shiplatch.com (verified by the MCP Registry)
Status: Working at last check
Tools: 3
Token cost: About 490 tokens per request
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok
Last checked: 26 Oct 2026, 08:29 UTC

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http scanner https://shiplatch.com/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.scanner]
url = "https://shiplatch.com/mcp"

Gemini CLI

{"mcpServers":{"scanner":{"httpUrl":"https://shiplatch.com/mcp"}}}

Cursor

{"mcpServers":{"scanner":{"url":"https://shiplatch.com/mcp"}}}

VS Code

{"servers":{"scanner":{"type":"http","url":"https://shiplatch.com/mcp"}}}

Antigravity

agy mcp add scanner https://shiplatch.com/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"scanner","server_url":"https://shiplatch.com/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"scanner","server_url":"https://shiplatch.com/mcp"}

get_scan ~106 tokens
Get the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.
list_checks ~76 tokens
List the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.
scan_url ~308 tokens
Run ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits. Returns the grade, issue counts and the type of each issue

SimplyScan
Security, SEO and AI-visibility scanner for web apps · free scans and focused checks via MCP.
SiteCheck Web Intel
129 pay-per-call agent tools: security, threat intelligence, web search and SEO data tools. x402
ScanLabsAI Security Scanner
Scan a website for vulnerabilities: OWASP Top 10, CVEs, SSL, headers - with plain-English fixes
Security Tools
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Cognita
Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
LaunchTrust
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
LLM Red-Team Scanner
LLM agent security review: live injection/jailbreak probes plus a static audit of missing guardrails
Moltline Code Review
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.

[![AptLynx](https://aptlynx.net/badge/com.shiplatch/scanner.svg)](https://aptlynx.net/servers/com.shiplatch/scanner)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents