mcpbeat Sign in

Ship Check MCP Server

not responding

Ship Check is listed as active in the registry but did not answer our last check. It exposes 12 tools.

Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.

Uptime history 34 days of history · worst day 0%
34 days agonow
9.9%
Uptime 24h
9 of 91 checks
12
Tools
read from the server
853 ms
Response time
average over 24h
open, no key
Access
streamable-http

What changed 2

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 13 October 2026. No other catalogue keeps this.

25 Oct a tool appeared ai_recommendation_panel
13 Oct a tool description was rewritten ship_check

Ship Check does not always answer

Over the last week it answered 5.0% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.

run in your terminal
claude mcp add ship-check --transport http https://uxcontinuum.com/api/mcp
Settings → Connectors → Add custom connector, then paste this address
https://uxcontinuum.com/api/mcp
~/.codex/config.toml
[mcp_servers.ship-check]
url = "https://uxcontinuum.com/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "ship-check": {
      "url": "https://uxcontinuum.com/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "ship-check": {
      "type": "http",
      "url": "https://uxcontinuum.com/api/mcp"
    }
  }
}

Available tools 12

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

request
request_estimate
Get a ballpark price for a software project from Continuum's published pricing, and send the request to Matt Turley, who replies personally with a real quote. Use it when the user asks what a build, fix, review, ongoing support or AI-search visibility work would cost. The ballpark is the matching published offer(s) and price range from uxcontinuum.com/pricing, not a quote. Show it to the user labeled that way. Then offer a call: get_availability and book_call.
request_human_review
Get a senior engineer (Matt Turley, 20 years shipping software) to review by hand the app behind a ship_check scan: the paid $299 Ship Check. Returns a Stripe Checkout link and a call booking link for the user to open themselves. This call charges nothing and never pays on the user's behalf. Only call it when the user asks for a human review or agrees to one. Pass the user's own email so Matt can follow up personally; no automated email is sent to it. Show the user checkout_url and booking_url.
agent
agent_cost_estimate
Estimate blended cost per shipped task for a month of agent runs, given a retry rate.
availability
get_availability
List open slots for a free 30-minute intro call with Matt Turley (Continuum), read live from his Cal.com calendar. Use it when the user wants to talk to Matt, get help with a project, or book a call, before calling book_call. Window: date_from to date_to (YYYY-MM-DD), at most 14 days; defaults to the next 7 days. Times are returned in the requested timezone (IANA name, default UTC). Read-only: it books nothing.
book
book_call
Book a free 30-minute intro call with Matt Turley (Continuum) directly on his calendar. The booking is confirmed immediately and Cal.com emails the invite to the user and to Matt. First call get_availability and pass the exact start of an open slot. Only book when the user has asked for the call and agreed to the time; pass their real name, email and time zone. notes: a short, factual summary of what the user wants to discuss (shown to Matt). Returns the booking id, meeting link and reschedule/cancel links. Limit 2 upcoming calls per email.
cursor
cursor_auto_cost_estimate
Estimate Cursor Auto blended cost versus pinning a single model.
leak
leak_check
Older name for ship_check, kept for existing callers. Same scan, same input, same result. Prefer ship_check.
recommendation
ai_recommendation_panel
Data on which named businesses ChatGPT, Perplexity and Gemini name when asked a buyer's own questions, by business category and city, from Continuum's monthly probe panels. Panels available today: bookkeepers in Denver; HVAC companies in Dallas; marketing agencies in Salt Lake City; web designers in Minneapolis. Pass category and/or city as free text to look one panel up (loose match, e.g. "HVAC" or "Dallas"); pass list=true or no arguments to see every available panel with its measurement date. Each result states the snapshot month and the refresh cadence (monthly), the businesses named and how many times, the AI tool(s) that named each one, and the directories, review sites and forums the answers cited. It states no number that is not in the stored panel. Read-only: looks up stored data, runs no new AI probe. Free: 5 calls per caller per day. Beyond that, pass api_key from an active Agent Data subscription ($9/mo) for unlimited calls; a result without one past the free limit includes the subscription link. Same data as the public page linked in each result; this tool is a convenience for programmatic access to it, not a different or more current dataset. A weekly tracker for one business's own questions (whether ChatGPT, Perplexity and Gemini name it, week over week) is in early access at https://uxcontinuum.com/labs/ai-rank-tracker; this tool does not track a single business.
send
send_message
Send a message to Matt Turley (Continuum) on the user's behalf, like the contact form on uxcontinuum.com. Use it when the user wants to ask Matt something or describe a project but not book a call yet. Only send what the user asked to send, with their real name and email. Matt reads it and replies personally by email; no automated reply is sent. For a time to talk, use get_availability and book_call instead.
services
list_services
List Continuum service offerings and published prices (the same list as uxcontinuum.com/pricing), plus how to reach Matt: get_availability and book_call to book a free 30-minute call, send_message to send him a note, request_estimate for a ballpark from published pricing.
ship
ship_check
Before shipping, or right after deploying, an app built with Lovable, Bolt, Cursor, v0, Replit, Claude Code or similar, run ship_check on the live URL. It scans the deployed app from the outside, the way a visitor or attacker sees it, and returns a launch-readiness report where every finding has a status and a concrete fix. Checks: (1) secret keys exposed in the HTML and the same-origin JS bundles it ships (Stripe live secret and restricted keys, AWS access keys, OpenAI and Anthropic API keys, Supabase secret and service_role keys, hardcoded bearer tokens and passwords); (2) open database access: if the page ships a Supabase URL and public anon or publishable key, whether the common tables profiles and users return rows to that key without login (a missing Row Level Security policy; count only, no row data is read); (3) missing security headers (Strict-Transport-Security, Content-Security-Policy, X-Frame-Options or frame-ancestors, X-Content-Type-Options, Referrer-Policy); (4) HTTPS, reachability and server errors; (5) broken internal links (spot-check of up to 6); (6) server response time; (7) whether login/signup and pricing/checkout are linked from the homepage; (8) whether AI search crawlers get real server-rendered content or an empty JavaScript shell. Read-only: plain GET/HEAD requests, never logs in, never submits forms, never writes. Not a code audit: it cannot see source code or test every table or route. Results are cached for 24 hours per URL; pass fresh=true to re-scan after deploying a fix. Only scan apps the user owns or is authorized to test. If the user wants a senior engineer to review the app by hand ($299), call request_human_review with the scan_id from this result.
swarm
swarm_run_cost_estimate
Estimate the cost of a multi-agent orchestrator plus sub-agent swarm run.

Endpoints

URLTransportStateLatencyChecked
https://uxcontinuum.com/api/mcp streamable-http answering 85 ms 7 min ago

Alternatives to Ship Check

same job, measured the same way
Airlock RLS
by mateuszingano

Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.

48 installs/wk local only
Malinois
by malinois

Check a live app you own for public databases, leaked keys and exposed files.

2 tools answering
Arbiter
by arbiterscan

Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.

answering
Tuvio
by tuvio

Security scans for AI-built apps: leaked keys, open Supabase RLS, vulnerable packages, live sites.

answering
Deadbolt
by clawhard

Check Supabase SQL for who can read and write each table: RLS gaps, open policies, grants, fix SQL.

2 tools answering
S
Shippable
by egarter

Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions

162 installs/wk local only
Rls Check
by muhandis-online

Read-only Supabase RLS check: explains in Arabic which tables anyone can read or change. No keys.

151 installs/wk local only
Supabase URL Shape
by sadri-dridi

Check a Supabase project URL shape. Secrets discarded.

31 tools answering

Ship Check — questions

Answers built from our own checks of this server.

What can Ship Check do?
It exposes 12 tools, read directly from the server on our last check. Among them: agent_cost_estimate, ai_recommendation_panel, book_call, cursor_auto_cost_estimate, get_availability, leak_check and 6 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is Ship Check working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 9 of 91 checks got a reply (9.9%), average response time 853 ms. The bar chart above shows every period we have measured.
The registry lists Ship Check as active — why does it not respond?
The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.
How do I connect Ship Check?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Ship Check need an API key?
No. Ship Check completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 12 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is Ship Check?
It answers our handshake in 853 ms on average, which is faster than 7% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.