Check a live app you own for public databases, leaked keys and exposed files.
Connect Remote server
claude mcp add --transport http scan https://malinois.app/mcp
{
"mcpServers": {
"scan": {
"url": "https://malinois.app/mcp"
}
}
}
{
"servers": {
"scan": {
"type": "http",
"url": "https://malinois.app/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://malinois.app/mcp
Tools 2 found in our last check
scan_appRuns a passive, outside-in security check of a live web app and returns a letter grade (A–F), each issue in plain language with fix steps, and a report link. Use when the user asks whether their deployed app is safe, before launch, or after a redeploy to confirm a fix. It checks…
explain_findingReturns the plain-language meaning and step-by-step fix for one Malinois finding. Use it while helping the user fix an issue reported by scan_app, or when they ask what a finding means. Pass the rule_id exactly as scan_app returned it. Read-only, no network, instant.
Details
| Endpoint | https://malinois.app/mcp (Streamable HTTP) |
| First published | 11 Sep 2026 |
| Last updated | 11 Sep 2026 |
| Registry name | app.malinois/scan |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
