ShipLatch

Overview

ShipLatch is a Model Context Protocol server that performs free passive security scans on AI-built applications. It detects leaked API keys, public .env files, and checks security headers to help identify common vulnerabilities before they become problems.

The server runs as a remote endpoint at https://shiplatch.com/mcp with no authentication required and nothing to install locally. Version v1.0.0 is the current release. Simply point your MCP client to the endpoint and you're ready to scan.

ShipLatch is listed in the Security category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, Zed, and others. If you maintain ShipLatch, you can claim this listing to verify ownership, earn the Verified badge, and keep information up to date.

Installation

Settings → Connectors → Add custom connector
Name: ShipLatch
URL:  https://shiplatch.com/mcp