Sniff runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 6 Sep 2026.
QA + a11y scanner: walks your running app's real user flows and reports what's broken.
What the code does
We read the source, 21 h ago · rules 3dff92dd89df
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const { stdout } = await execFile(this.command, [
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Alternatives to Sniff
same job, measured the same wayEvery-click AI QA: walks your whole app from a preview URL and reports broken clicks and errors.
Browser-backed QA with evidence and fix-ready reports for coding agents.
Reports real token usage and cost from Claude Code and OpenCode data. Nothing leaves your machine.
Self-reported attribution: which channel and which creator your users first heard you from.
Real product evidence: 281k+ real app screens and flows, 20k+ mobile A/B tests, growth reports.
MCP server for Pentest-Tools.com: run scans, manage findings and reports via your preffered LLM.
Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys
Your coding agent asks Tada to work through a feature in a real browser and gets back a verdict.
Sniff — questions
Answers built from our own checks of this server.