SniffPup

SniffPup is a passive security scanner for websites and web apps you own, especially ones built with AI tools like Lovable, Bolt, Cursor and Supabase.

Ask your AI to scan your site and SniffPup looks at it the way a stranger on the internet would: API keys or secrets showing up in your JavaScript, Supabase tables anyone can read, exposed files like .env or .git, missing security headers, and certificate and domain health. It's read-only.

MCP connector

Server URL: https://sniffpup.com/api/mcp
Login: None
Protocol: MCP 2026-07-28
Instructions: SniffPup runs a free, passive check of a live website's public surface, the same pages and files any visitor can load. Only scan sites the user owns or has permission to test, and ask the user to confirm that before calling .

Tools

Reads data1

Skills

None in the store listings or on the server