ShipSafe — Independent security verification MCP Server

Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

Local + remotestreamable-httpstdio

What is the ShipSafe — Independent security verification MCP Server?

ShipSafe — Independent security verification is an MCP integration. Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

Hosted connection

The registry lists a streamable-http connection at https://ship-safe.co/api/mcp. The endpoint declares these request headers: Authorization.

Packages and local setup

The published npm package is @ship-safe/mcp, version 0.6.4. Its declared MCP transport is stdio.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project website. This profile uses version 0.6.4 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.