Ship Check is listed as active in the registry but did not answer our last check. It exposes 12 tools.
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 13 October 2026. No other catalogue keeps this.
Over the last week it answered 5.0% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.
claude mcp add ship-check --transport http https://uxcontinuum.com/api/mcp
https://uxcontinuum.com/api/mcp
[mcp_servers.ship-check]
url = "https://uxcontinuum.com/api/mcp"
{
"mcpServers": {
"ship-check": {
"url": "https://uxcontinuum.com/api/mcp"
}
}
}
{
"servers": {
"ship-check": {
"type": "http",
"url": "https://uxcontinuum.com/api/mcp"
}
}
}
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
request_estimate
request_human_review
agent_cost_estimate
get_availability
book_call
cursor_auto_cost_estimate
leak_check
ai_recommendation_panel
send_message
list_services
ship_check
swarm_run_cost_estimate
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://uxcontinuum.com/api/mcp | streamable-http | answering | 85 ms | 7 min ago |
Scan a deployed site for an exposed Supabase service_role key and audit Row Level Security.
Check a live app you own for public databases, leaked keys and exposed files.
Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.
Security scans for AI-built apps: leaked keys, open Supabase RLS, vulnerable packages, live sites.
Check Supabase SQL for who can read and write each table: RLS gaps, open policies, grants, fix SQL.
Find leaks in AI-built apps: open Supabase/Firebase data, exposed keys, unsafe edge functions
Read-only Supabase RLS check: explains in Arabic which tables anyone can read or change. No keys.
Check a Supabase project URL shape. Secrets discarded.
Answers built from our own checks of this server.