Shippable

Overview

Shippable is a Model Context Protocol server that helps identify security vulnerabilities in AI-built applications. It scans for exposed Supabase and Firebase data, detects leaked API keys, and flags unsafe edge functions. By integrating with your MCP client, Shippable gives AI assistants direct access to security scanning tools without manual context switching.

The server runs locally on your machine via the npm package shippable-dev, which communicates with your MCP client over stdio. No authentication or credentials are needed—it works immediately after installation. The latest release is v0.11.10, available at https://shippable.dev.

Shippable is listed in the Database category on mcp.site and works with all major MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this project, claim this listing to verify ownership and keep information current.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "shippable": {
      "command": "npx",
      "args": [
        "-y",
        "shippable-dev"
      ]
    }
  }
}