Loading…
Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access.
ShipSafe — Independent security verification is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 100/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding ShipSafe — Independent security verification to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.
mcp add co.ship-safe/scanner https://ship-safe.co/api/mcpReview the upstream source before running this command.
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-09-28T20:49:06.262088Z",
"publishedAt": "2026-09-28T20:49:06.262088Z",
"statusChangedAt": "2026-09-28T20:49:06.262088Z"
}
},
"server": {
"name": "co.ship-safe/scanner",
"title": "ShipSafe — Independent security verification",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://ship-safe.co/api/mcp",
"type": "streamable-http",
"headers": [
{
"name": "Authorization",
"isSecret": true,
"isRequired": true,
"description": "Bearer token from https://ship-safe.co/settings — the same token the ShipSafe CLI uses."
}
]
}
],
"version": "0.6.4",
"packages": [
{
"version": "0.6.4",
"transport": {
"type": "stdio"
},
"identifier": "@ship-safe/mcp",
"runtimeHint": "npx",
"registryType": "npm"
}
],
"websiteUrl": "https://ship-safe.co",
"description": "Independent security review for AI-built apps: exposed secrets, broken auth, unsafe data access."
}
}