Jsmon is answering right now. Last checked 9 min ago.
Discover exposed assets, leaked secrets, APIs & client-side vulns across your attack surface
Today is the operative word: we check Jsmon every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 9 min ago.
claude mcp add mcp --transport http https://mcp.jsmon.sh/mcp
https://mcp.jsmon.sh/mcp
[mcp_servers.mcp]
url = "https://mcp.jsmon.sh/mcp"
{
"mcpServers": {
"mcp": {
"url": "https://mcp.jsmon.sh/mcp"
}
}
}
{
"servers": {
"mcp": {
"type": "http",
"url": "https://mcp.jsmon.sh/mcp"
}
}
}
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://mcp.jsmon.sh/mcp | streamable-http | sign-in | 598 ms | 9 min ago |
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Installed software, vulnerabilities and end-of-life components across your servers, apps and repos
Detects leaked secrets (API keys, tokens, private keys) in source code.
Scans projects for secret exposure: leaked API keys, unprotected .env files, and secrets in logs.
Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys
Vulnerability management across all ConnectSecure clients: exposure ranking, CVE impact, blind spots
Scans files for leaked secrets and API keys
Scans files for leaked secrets and API keys
Answers built from our own checks of this server.