Arbiter is answering right now. Last checked 14 min ago.
Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.
Today is the operative word: we check Arbiter every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.
claude mcp add arbiter --transport http https://api.arbiterscan.com/mcp
https://api.arbiterscan.com/mcp
[mcp_servers.arbiter]
url = "https://api.arbiterscan.com/mcp"
{
"mcpServers": {
"arbiter": {
"url": "https://api.arbiterscan.com/mcp"
}
}
}
{
"servers": {
"arbiter": {
"type": "http",
"url": "https://api.arbiterscan.com/mcp"
}
}
}
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://api.arbiterscan.com/mcp | streamable-http | sign-in | 461 ms | 14 min ago |
Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions
Check a live app you own for public databases, leaked keys and exposed files.
Checks whether a name appears in the ICIJ Offshore Leaks database (offshore structures), for complia
Backend for AI-built apps: database, auth, files, email, AI, payments, deploy, realtime. 170+ tools.
Deploy the apps you build with AI, with databases and domains, and call 200+ AI models on one key.
EU web hosting for sites built in chat: publish, own domains, mail, a Postgres database, Node apps.
Free backend for apps built with Claude Code and Codex: hosting, database, storage, sign-in, AI.
Read-only MCP server for exposing database schema metadata without row data.
Answers built from our own checks of this server.