Ship Check
Scan a deployed app URL for exposed keys, open Supabase tables and missing security headers.
| Endpoint | https://uxcontinuum.com/api/mcp (streamable-http) |
|---|---|
| Registry version | 0.2.0 |
| Now | 12 tools · grade C (78) · pin ts_23b2b4f42206e08f0ed903e3757bcaff · protocol 2025-06-18 |
| First / last listed | 2026-10-26 08:02 UTC / 2026-10-26 08:02 UTC |
| Grade over time | 2026-10-26: C (78), 12 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: ship_check request_human_review leak_check cursor_auto_cost_estimate swarm_run_cost_estimate agent_cost_estimate list_services get_availability book_call send_message request_estimate ai_recommendation_panel
ship_check | Before shipping, or right after deploying, an app built with Lovable, Bolt, Cursor, v0, Replit, Claude Code or similar, run ship_check on the live URL. It scans the deployed app from the outside, the way a visitor or attacker sees it, and returns a launch-readiness report where every finding has a status and a concrete fix. Checks: (1) secret keys exposed in the HTML and the same-origin JS bundles params: url*, fresh |
request_human_review | Get a senior engineer (Matt Turley, 20 years shipping software) to review by hand the app behind a ship_check scan: the paid $299 Ship Check. Returns a Stripe Checkout link and a call booking link for the user to open themselves. This call charges nothing and never pays on the user's behalf. Only call it when the user asks for a human review or agrees to one. Pass the user's own email so Matt can params: scan_id*, email* |
leak_check | Older name for ship_check, kept for existing callers. Same scan, same input, same result. Prefer ship_check. params: url*, fresh |
cursor_auto_cost_estimate | Estimate Cursor Auto blended cost versus pinning a single model. params: requestsPerDay*, avgInputTokens*, avgOutputTokens*, workDaysPerMonth*, autoModelMix*, pinnedModelId* |
swarm_run_cost_estimate | Estimate the cost of a multi-agent orchestrator plus sub-agent swarm run. params: orchestratorModelId*, orchestratorInputTokens*, orchestratorOutputTokens*, subAgentCount*, subAgentModelId*, subAgentInputTokens*, subAgentOutputTokens*, retryRatePct*, runsPerDay* |
agent_cost_estimate | Estimate blended cost per shipped task for a month of agent runs, given a retry rate. params: runsPerMonth*, avgCostPerTask*, retryRatePct*, modelId |
list_services | List Continuum service offerings and published prices (the same list as uxcontinuum.com/pricing), plus how to reach Matt: get_availability and book_call to book a free 30-minute call, send_message to send him a note, request_estimate for a ballpark from published pricing. params: none |
get_availability | List open slots for a free 30-minute intro call with Matt Turley (Continuum), read live from his Cal.com calendar. Use it when the user wants to talk to Matt, get help with a project, or book a call, before calling book_call. Window: date_from to date_to (YYYY-MM-DD), at most 14 days; defaults to the next 7 days. Times are returned in the requested timezone (IANA name, default UTC). Read-only: it params: event, date_from, date_to, timezone |
book_call | Book a free 30-minute intro call with Matt Turley (Continuum) directly on his calendar. The booking is confirmed immediately and Cal.com emails the invite to the user and to Matt. First call get_availability and pass the exact start of an open slot. Only book when the user has asked for the call and agreed to the time; pass their real name, email and time zone. notes: a short, factual summary of w params: start*, name*, email*, timezone*, notes, event |
send_message | Send a message to Matt Turley (Continuum) on the user's behalf, like the contact form on uxcontinuum.com. Use it when the user wants to ask Matt something or describe a project but not book a call yet. Only send what the user asked to send, with their real name and email. Matt reads it and replies personally by email; no automated reply is sent. For a time to talk, use get_availability and book_ca params: name*, email*, message*, company, topic |
request_estimate | Get a ballpark price for a software project from Continuum's published pricing, and send the request to Matt Turley, who replies personally with a real quote. Use it when the user asks what a build, fix, review, ongoing support or AI-search visibility work would cost. The ballpark is the matching published offer(s) and price range from uxcontinuum.com/pricing, not a quote. Show it to the user labe params: project_description*, project_type, timeline, budget, name*, email* |
ai_recommendation_panel | Data on which named businesses ChatGPT, Perplexity and Gemini name when asked a buyer's own questions, by business category and city, from Continuum's monthly probe panels. Panels available today: bookkeepers in Denver; HVAC companies in Dallas; marketing agencies in Salt Lake City; web designers in Minneapolis. Pass category and/or city as free text to look one panel up (loose match, e.g. "HVAC" params: category, city, list, api_key |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.