01 · Scan locally
Your code stays on your machine.
Run the bounded static scanner. Review its file evidence, errors and coverage before proceeding.
prodcheck . --format json > report.json
For Python builders and agent-driven teams
Leave evidence with your next release.
Scan FastAPI, Docker and GitHub Actions locally. Keep a private report history, see what changed, and download a clear handoff.
No application-source upload. No subscription. Local scanning stays free under Apache-2.0.
02 · Preview metadata
Send a report, not a repository.
Preview relative paths, line numbers, rule IDs, coverage and opaque fingerprints. Raw source, excerpts and arbitrary facts are excluded.
03 · Keep the handoff
Track fixes across releases.
Each hosted report compares against the previous complete report for that project. Download HTML/JSON and keep a 30-day private history.
Know the scope before trusting the verdict.
Inspector checks literal FastAPI/Uvicorn settings, directly declared conventional GET health routes, final Docker startup configuration and supported Actions declarations. It reports syntax and bounded inference.
A health route declaration does not prove runtime readiness. Dynamic configuration and unsupported syntax may return incomplete analysis. This is not a vulnerability scanner or production certification. Hosted reports preserve caller-submitted evidence; they do not independently rescan or verify your source.
Supported stack and coverage
Qualified on Python 3.12/Linux and Ubuntu WSL2. Docker ordinary syntax and a documented YAML subset are supported. Cross-file router resolution, Compose/Kubernetes, general secret detection, CVEs and runtime tests are outside this beta. See the source archive for the full rule contract and limits.
A simple pack for release history.
Local CLI
Free
Offline static checks, file evidence, JSON/text/SARIF, local baselines and stdio MCP. No account or hosted payment required.
Source, tests and integration examplesHosted reports
$19 USD / 100 reports
Private projects, complete report history for 30 days, instance-level change comparisons and downloadable HTML/JSON handoffs.
One new complete hosted report uses one credit. Exact retries are free. Invalid/incomplete summaries and service failures do not consume credits. Credits do not expire; no automatic top-up.
Live checkout
Start with 3 free reportsYour private workspace
Create a workspace for three free reports. Save the API key: it is the only way to access this workspace, including purchases. We do not collect a sign-in email or provide password recovery.
This browser stores the key only after you connect. Avoid a shared browser. Keep a private copy before purchasing.
Connect a workspace to see your balance.
Stripe-hosted checkout. A completed payment grants 100 credits after verified fulfillment. The return page never grants credits.
The file is parsed in your browser. Only the previewed structured summary is sent. Relative paths can contain sensitive names; review them first.
Select a complete local Inspector JSON report to preview the outgoing summary.
Saved reports
Use it in CI or a coding-agent handoff.
export INSPECTOR_API_KEY=your_private_workspace_key python -m mcp_products.inspector.cloud preview report.json python -m mcp_products.inspector.cloud submit report.json --project my-service
Inspect the preview before using the network command. Configure trusted artifacts and a reviewed local scan policy. Local-only use has no network dependency.
Beta terms, privacy and refunds
What is stored, and for how long?
Only the submitted structured summary, relative paths/lines, coverage, fingerprints, project names and comparisons are stored with your workspace. No source archives, raw code, arbitrary evidence text or model processing is accepted. Reports expire after 30 days and active-service maintenance removes expired payloads within an additional hour. Idempotency/payment receipts and credit accounting are retained. Operational backups may retain deleted report payloads for up to seven additional days. You can delete a report payload using the API.
Purchases, refunds and key safety
Content Sweep LLC sells prepaid hosted report credits at $19 USD for 100. There is no subscription or automatic charge. Request a refund of unused purchased credits within 14 days through founder@contentsweep.ai. Refunds revoke corresponding credits; consumed refunded credits can block future submissions without creating an automatic charge. Save your key before buying; a lost anonymous key cannot be recovered from a password or email account. This beta has no contractual uptime guarantee.
Free software, support and limits
The local scanner is Apache-2.0 software and stays usable without this service. Hosted history/comparisons are the paid convenience. A receipt or hosted report is not independent source verification, a security guarantee or certification. For billing/support contact founder@contentsweep.ai. Data exports and private API integration are included in the source release.