us.secscan/secscan

up checked 2026-11-11T13:38:33.216Z

Unclaimed · Unverified

Agent searches it appeared in, last 30 days: 0. Run this server? Claim the listing: verified label, uptime alerts and analytics.

Publisher-provided title

SecScan

Publisher-provided description

Scan, monitor and fix a live web app from your editor: graded security reports with fix prompts.

Summary by lookupd

Scans, monitors and grades web apps for security issues, with uptime and certificate checks and fix guidance.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http secscan https://secscan.us/api/mcp

Codex, remote (streamable-http)

codex mcp add secscan --url https://secscan.us/api/mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "secscan": {
      "url": "https://secscan.us/api/mcp"
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Tools (12 tools)

Publisher-provided text

• scan_url Start a SecScan security scan of a web application the user owns or is authorised to test. Returns a scan_id; most scans finish in under a minute — then call ge
• get_scan_status Status of a scan (queued, scanning, analyzing, complete, failed). With wait_seconds (max 60) it waits for the scan to finish and returns the full report as soon
• get_report The finished report for a scan: grade, what the scan tested and what it skipped (a clean grade says nothing about skipped areas, so say so), prioritised finding
• list_recent_scans The user's most recent scans with their status, newest first.
• list_verified_domains Domains the user has proved they own. Only these receive active testing (injection, XSS, SSRF, access control); others get passive checks. Verify more at https:
• get_account How many scans the user can still run — free scans, plan scans and credits — and their plan. Check this before starting several scans.
• start_domain_verification Begin proving the user owns a domain, which unlocks active tests (injection, XSS, SSRF, access control) on its scans. Returns a file to publish on the site, or
• check_domain_verification Check whether the file or DNS record from start_domain_verification is live. On success the domain is verified and its next scan includes active tests. DNS chan
• list_monitors Sites under continuous monitoring: latest grade, last and next scan, uptime check, CVE alerts, new problems in the last scan and certificate expiry. Use the mon
• add_monitor Put a site the user owns under continuous monitoring: hourly uptime checks, CVE matching, certificate alerts and regular rescans. Runs a full baseline scan stra
• monitor_scan_now Run a full scan of a monitored site now instead of waiting for its schedule — e.g. to confirm a fix. Free for plan holders; otherwise uses one of the user's sca
• dismiss_finding Mark a finding as a false positive for this site, so future scans of it stop reporting it — the same as Dismiss in the app, and undoable there. ONLY use this af

Details

• Version: 1.1.0
• Transports: streamable-http
• Uptime (7 days): 100%
• Median latency: 596 ms
• First indexed: 2026-11-01T10:09:35.453Z
• Last seen in registry: 2026-11-01T10:09:35.453Z
• Website: https://secscan.info/ai-editors

Badge for your README

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/us.secscan/secscan.svg)](https://lookupd.com/servers/us.secscan/secscan)

• 62071 servers
• Last crawl: 2026-11-11T16:39:06.253Z
• API base: https://api.lookupd.com
• MCP URL: https://api.lookupd.com/mcp