A
licenseA
qualityB
maintenanceScan a deployed site for an exposed Supabase service_role key and audit Row Level Security from your AI coding agent.
2
26 npm
MIT
Tuvio
by dev.tuvio
Server Details
Security scans for AI-built apps: leaked keys, open Supabase RLS, vulnerable packages, live sites.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Related MCP Connectors
Free passive security scan for AI-built apps: leaked API keys, public .env files, security headers
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
Security checks for apps built with AI: leaked keys, open routes, database rules, each with a fix.
Free passive outside security scan of a live web app: leaked keys, exposed files, open Supabase
Related MCP Servers
- AlicenseNot gradedqualityFmaintenancePredeploy security scanner for AI-generated code. 80+ vulnerability patterns across secrets, auth, injection, config, Supabase, and logging. Runs locally, code never leaves your machine. Optional x402 witnessed attestation.45 npmApache 2.0
shipsafe-mcpofficial
AlicenseAqualityCmaintenanceEnables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.81MIT- AlicenseNot gradedqualityCmaintenanceEnables AI editors such as Cursor, Claude Code, Windsurf and VS Code to scan a project for common AI-introduced security mistakes — leaked keys, open Supabase/Firebase data, missing auth, unverified Stripe webhooks, SQL injection and more — and return findings with exact fix instructions. It also provides a guided prompt that walks an agent through fixing critical issues one by one and verifying each fix by re-scanning, without ever editing files or rotating keys itself.2MIT
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd
Glama MCP Gateway
Add one secure layer between your agents and this server.