ShipSafe — Independent security verification
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
likely compatible
Declares API key header (Authorization); use Copilot Studio 'API key' → Header.
Rule R2b · what this means · Not tested in Copilot Studio.
| Registry name | co.ship-safe/scanner |
| Endpoint used for verdict | https://ship-safe.co/api/mcp |
| Transports | streamable-http |
| Auth (Copilot Studio setting) | API key (header) |
| Last endpoint check | 2026-10-20T18:10:29Z · HTTP 401 |
| Website | https://ship-safe.co |
| Version | 0.6.4 |
| Registry updated | 2026-09-28 |
Track changes like this weekly. New Copilot-ready MCP servers, breakages and auth changes, in one short email.
Is this wrong or out of date? Email us. Data built 2026-10-20.