ShipLatch

com.shiplatch/scanner · v1.0.0 · security

ShipLatch is healthy: it completed an MCP handshake in 1219 ms and exposes 3 tools.

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

Endpoint: https://shiplatch.com/mcp (streamable-http)

No repository listed · Website · JSON · Add to my inventory

Facts

Users (last 30 days)0
HandshakeHealthy
Auth neededNone
Tool count3
Latency1219 ms
Last checked (UTC)2026-10-22T16:50:18.517Z

Health history

Checked (UTC)StatusLatencyError
2026-10-22T16:50:18.517ZHealthy1219

Tools (3)

scan_urlRun ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits. Returns the grade, issue counts and the type of each issue
get_scanGet the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.
list_checksList the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.