ShipLatch

Name: ShipLatch
Author: com.shiplatch

MCP serverMCP

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

by com.shiplatchhomepage ↗v1.0.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"shiplatch","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability16/16 checks ok

when	check	result	http	latency	detail
5 h ago	mcp initialize	ok	200	33 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
12 h ago	mcp initialize	ok	200	93 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
21 h ago	mcp initialize	ok	200	88 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
29 h ago	mcp initialize	ok	200	13 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
2 d ago	mcp initialize	ok	200	115 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
2 d ago	mcp initialize	ok	200	112 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
2 d ago	mcp initialize	ok	200	52 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
2 d ago	mcp initialize	ok	200	75 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
3 d ago	mcp initialize	ok	200	81 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools
3 d ago	mcp initialize	ok	200	61 ms	server ShipLatch 1.0.0 · protocol 2025-06-18 · 3 tools

Tools observed via MCP handshake

scan_url — Run ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its p
get_scan — Get the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.
list_checks — List the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.

Declared by sources

What the publisher says

Attributed to the source that supplied each field. Treated as claims, not facts.

No long description beyond the summary.

kind Official MCP Registry

name Official MCP Registry

summary Official MCP Registry

version Official MCP Registry

description Official MCP Registry

homepageUrl Official MCP Registry

publisherName Official MCP Registry

Provenance

Where this record came from

Every source is kept verbatim. Field changes are logged as events.

Official MCP Registrycom.shiplatch/scanner

first seen 5 d ago · fetched 35 h agoopen ↗

Field history (6 recent events)

5 d ago · declared · summary → "Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers"
5 d ago · declared · description → "Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers"
5 d ago · declared · publisherName → "com.shiplatch"
5 d ago · declared · homepageUrl → "https://shiplatch.com/mcp"
5 d ago · declared · version → "1.0.0"
5 d ago · declared · protocols → ["mcp"]

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from