Malinois
Check a live app you own for public databases, leaked keys and exposed files.
Connect it
Settings → Connectors → Add custom connector
URL: https://malinois.app/mcpSettings → Apps & Connectors → Advanced → Developer mode
Create connector with URL: https://malinois.app/mcp{
"mcpServers": {
"scan": {
"url": "https://malinois.app/mcp"
}
}
}claude mcp add --transport http scan https://malinois.app/mcp{
"servers": {
"scan": {
"type": "http",
"url": "https://malinois.app/mcp"
}
}
}2 tools, verified live
scan_appRuns a passive, outside-in security check of a live web app and returns a letter grade (A–F), each issue in plain language with fix steps, and a report link. Use when the user asks whether their deployed app is safe, before launch, or after a redeploy to confirm a fix. It checks for publicly readable Supabase/Firebase data, secret keys (Stripe, OpenAI, Supabase service_role…) in client JavaScript,
explain_findingread-onlyReturns the plain-language meaning and step-by-step fix for one Malinois finding. Use it while helping the user fix an issue reported by scan_app, or when they ask what a finding means. Pass the rule_id exactly as scan_app returned it. Read-only, no network, instant.
Alternatives in Databases & Data
Compare →
Buttondown MCP by usefulapiB
Read Buttondown subscribers, emails, analytics and automations; add subscribers; write email drafts.
Pirsch Analytics MCP by usefulapiB
Read Pirsch web analytics: visitors, pages, referrers, UTM, events, funnels and sessions.
Simple Analytics MCP by usefulapiB
Read Simple Analytics stats: pageviews, visitors, pages, referrers, events and data exports.
UpCloud MCP by usefulapiB
Inspect servers, storage, networks, databases and billing, and start, stop or back up servers.
SlickText MCP by usefulapiB
Read SlickText contacts, lists, campaigns, analytics and inbox; create and update contacts.
Portkey MCP by usefulapiB
Read AI-gateway analytics, configs, virtual keys, workspaces and users; log request feedback.