List your agent

ShipLatch

MCP server · hosted · v1.0.0 · com.shiplatch/scanner
Online · tested 1h agoNEW · 2h agoSeen in the registry 1h ago

Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers

Website ↗How to connect ↓

What it does

ShipLatch is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.

From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence) and are not a test of the tool.

At a glance

Hosted (remote)YES
Local installNO
Version1.0.0
PriceNot in the registry
First seen22 Oct 2026
Last checked1h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 1h ago (live check)

Hosted endpoint

  • https://shiplatch.com/mcp streamable-http

In Claude Code: claude mcp add --transport http shiplatch https://shiplatch.com/mcp

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "shiplatch": {
      "url": "https://shiplatch.com/mcp"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 1h ago

ONLINE ShipLatch answered an MCP connection on 22 Oct 2026 and introduced itself as ShipLatch 1.0.0 (MCP protocol 2025-06-18).

3 tools offered to AI assistants

  • scan_url · Run ShipLatch's free passive security scan on a public web app URL (for example a Lovable, Bolt, Replit or Cursor app). Read-only: it fetches the page and its public JS like a browser would and never logs in, submits forms or tests exploits
  • get_scan · Get the free summary of a ShipLatch scan by its scan_ref (from scan_url). Use it when scan_url returned status "running". Results are kept for 7 days.
  • list_checks · List the categories of security checks ShipLatch runs, which are in the free passive scan and which need ownership verification. No network access.

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. $9.99/month.

Tasks it helps with

Share of each task's required capabilities it covers
Scan code for vulnerabilities
Security Scanning
50%
Review pull requests
Security Scanning
50%

Similar tools

Listed for the same task: scan code for vulnerabilities
  • diffpilotREMOTELOCAL
    MCP server for PR code review, commit messages, changelogs, and secret detection
  • MCP Code Review ServerREMOTELOCAL
    Code review as an MCP server — structured reviews with OWASP security scanning
  • StrixREMOTELOCAL
    AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
  • APSA mobile app security auditREMOTELOCAL
    Local, evidence-graded Android/iOS security audits of source, APK, AAB and IPA for AI agents
  • phpgraphREMOTELOCAL
    Knowledge graph of a PHP codebase by static analysis: calls, routes, buses, layers, impact
  • context-oversharing-auditorREMOTELOCAL
    OWASP MCP10 context oversharing: session dumps, unscoped memory, shared context, prompt leaks

Ready-made AI agents

An MCP server is a connector you add to your own assistant. These are finished products that do the same job for you:

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Hosted endpointhttps://shiplatch.com/mcpDECLAREDSRC-001 Official MCP Registry1h ago
Local install (package)noDECLAREDSRC-001 Official MCP Registry1h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry1h ago
Websitehttps://shiplatch.com/mcpDECLAREDSRC-001 Official MCP Registry1h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry1h ago
Version1.0.0DECLAREDSRC-001 Official MCP Registry1h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry1h ago

Change history

  • NEW22 Oct 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Questions about ShipLatch

How do I connect ShipLatch?

Use the hosted endpoint https://shiplatch.com/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does ShipLatch offer?

When Electra Index connected on 22 Oct 2026, it listed 3 tools: scan_url, get_scan, list_checks. The full list is in "Live check" above.

Is ShipLatch online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 1h ago.

What can I use ShipLatch for?

Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.