English Français العربية

ShipSafe — Independent security verification

Official registry Security

Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

Website

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http shipsafe-independent-security-verificati 'https://ship-safe.co/api/mcp' --header 'Authorization: <Bearer token from https://ship-safe.co/settings — the same token the ShipSafe CLI uses.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "shipsafe-independent-security-verificati": {
            "type": "http",
            "url": "https://ship-safe.co/api/mcp",
            "headers": {
                "Authorization": "<Bearer token from https://ship-safe.co/settings — the same token the ShipSafe CLI uses.>"
            }
        }
    }
}
NPM package @ship-safe/mcp
Claude Code 
claude mcp add shipsafe-independent-security-verificati -- npx -y @ship-safe/mcp@0.6.4
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "shipsafe-independent-security-verificati": {
            "command": "npx",
            "args": [
                "-y",
                "@ship-safe/mcp@0.6.4"
            ]
        }
    }
}

Frequently asked questions

What is ShipSafe — Independent security verification?

Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.

How do I install ShipSafe — Independent security verification?

It runs as a remote server. In Claude Code: claude mcp add --transport http shipsafe-independent-security-verificati 'https://ship-safe.co/api/mcp' --header 'Authorization: <Bearer token from https://ship-safe.co/settings — the same token the ShipSafe CLI uses.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does ShipSafe — Independent security verification need an API key?

Yes. It expects Authorization, which you set in its configuration.

Who maintains ShipSafe — Independent security verification?

It is published by co.ship-safe. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.