Developers

Build on Squatch MCP

Check MCP servers from CI, your internal tooling or your AI assistant itself. Two interfaces, the same evidence.

REST API

JSON endpoints for servers, tools, changes, findings, MC-BOMs, scans and watchlists. Authenticate with a scoped API key.

Connect Claude, Cursor or any MCP client and ask "what can this server do?" before you install it.

Responses carry the same source labels as the website: official registry, publisher declared, Squatch observed, Squatch verified.
Text that came from third-party servers is returned inside fields marked untrusted. Do not feed it to a model as instructions.
Rate limits and quotas depend on your plan. Paid plans never change the data itself.
The REST API is versioned under /api/v1; breaking changes ship as a new version.