ShipSafe — Independent security verification

Overview

ShipSafe is an MCP server that performs independent security verification for AI-built applications. It scans for exposed secrets, broken authentication, and unsafe data access patterns, making security review capabilities directly available to any MCP-compatible AI assistant. The model can call ShipSafe's tools whenever security assessment is needed during conversation or agent execution.

You can use ShipSafe in two ways: connect to the hosted endpoint at https://ship-safe.co/api/mcp without any local setup, or install it locally on your machine using npx -y @ship-safe/mcp. The service requires an API Key for authentication and is currently at version v0.6.3.

ShipSafe is categorized as a Security tool on mcp.site and integrates with all major MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you are the maintainer at ship-safe.co, claim this listing to verify ownership, earn the Verified badge, and ensure the information stays accurate.

Installation

Settings → Connectors → Add custom connector
Name: ShipSafe — Independent security verification
URL:  https://ship-safe.co/api/mcp