Ship Check

Name: Ship Check
Author: uxcontinuum

@uxcontinuumMCP server · External

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Penetration testingv0.2.0

Freeno charge per call

One address for any MCP client. No sign-in needed on this server.

Safety · AI10%Low risk
Does · AIHigh impact6 read · 3 act, by tool name
ConnectRemote · no sign-inStreamable HTTP
PopularityNo stars yetUpdated 5 Oct 2026
StatusAll clearAnswered Odel on 6 Oct

What it does

6 read3 act2 other

Grouped by tool name. At most: moves money, runs code or commands, deletes data, or sends messages for you.

What it costs

Free

Odel charges nothing per call. The publisher may charge for its own service.

Tools

11 · grouped by tool name · checked 6 Oct 2026

Read · 6Look things up

ship_check
leak_check
agent_cost_estimate
list_services
get_availability
request_estimate

Act · 3Change something

swarm_run_cost_estimate
book_call
send_message

Other · 2Neither hinted nor named

request_human_review
cursor_auto_cost_estimate

Try it in the Inspector

No README yet. What Odel knows about this module is on the right.

Similar modules

Browse Penetration testing

MCP server: One MCP server.
Jshookmcp
@vmoranv · External2,035 GitHub stars.
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
9% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
OpenOSINTRun by its publisher: served from their own domain, namespace checked by the registry.
@openosint · External1,744 GitHub stars.
AI-powered OSINT agent & MCP server. 21 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
11% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Wireshark
@bx33661 · External288 GitHub stars.
Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
5% chance this is malicious. Assessed by AI, which can make mistakes.Creates or changes data. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.2 known advisories (OSV) in its package.Free to use.
MCP server: One MCP server.
Crowdsentinel
@thomasxm · External209 GitHub stars.
AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Reversecore MCP
@sjkim1127 · External208 GitHub stars.
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
Shodan
@w0h1v · External174 GitHub stars.
MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
7% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
MCP server: One MCP server.
Code PathfinderRun by its publisher: served from their own domain, namespace checked by the registry.
@codepathfinder · External142 GitHub stars.
Code intelligence MCP server: call graphs, type inference, and symbol search for Python/Go.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
3% chance this is malicious. Assessed by AI, which can make mistakes.Only reads or looks up information. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.Free to use.
MCP server: One MCP server.
ObservatoryRun by its publisher: served from their own domain, namespace checked by the registry.
@kryptosai · External141 GitHub stars.
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.
6% chance this is malicious. Assessed by AI, which can make mistakes.Can move money, run code, delete data or send messages for you. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.Free to use.