KitScout

Categories › Security › Code & dependency scanning

PatchLabs

MCP serverVerified domain · patchlabs.devRemote● LiveAPI key needed

Security checks for AI-built apps (Lovable, Supabase, Bolt): RLS, headers, monitoring, fixes.

Install

Remote server: your requests and data go to api.patchlabs.dev. Claude Code: claude mcp add --transport http patchlabs https://api.patchlabs.dev/mcp · Claude app: Settings → Connectors → Add custom connector.

What it can do

The tools this server listed when we connected to it, in its own words.

  • rls_check — Scan a public repo's supabase/migrations for row-level-security mistakes (static analysis, no sign-up).
  • headers_check — Grade a public site's HTTPS, TLS certificate, security headers and cookie flags from one load of its home page (no sign-up). Returns finding
  • start_check — Request the full lab check. Returns a check id and a link; the repo owner proves ownership with a one-line file.
  • get_check — Status, summary, report and fix for a check id.
  • list_apps — Apps monitored in the API key's workspace, with their last check. Needs X-API-Key.
  • run_check — Queue a check for a monitored app now. Needs X-API-Key.

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools