@TateLyman
基本情報
MCP server for read-only Shipcheck launch-risk scans on authorized JavaScript and TypeScript repos
以下の設定を使って、このサーバーを MCP 対応クライアントに追加してください。
{
"mcpServers": {
"shipcheck": {
"command": "npx",
"args": [
"--yes",
"--package",
"shipcheck-mcp",
"shipcheck-mcp"
]
}
}
}Run read-only Shipcheck static analysis on an authorized local JavaScript, TypeScript, or MCP repository. Use before launch, directory submission, or client handoff to find exposed environment values, unsigned webhook handlers, missing database-rule evidence, debug leftovers, dependency risk, weak CI/docs, and usage-cost guardrail gaps. The tool reads project files, does not modify the repository, does not execute project code, and does not require network access. It returns both a formatted report and structured findings with severity, file path, and remediation.
Shipcheck MCP is an MCP server that lets local MCP clients run Shipcheck on authorized JavaScript and TypeScript repositories. It performs defensive static analysis to detect launch risks such as exposed private-looking environment variables, unsigned Stripe webhooks, missing Supabase/Firebase rule evidence, debug routes, missing usage-cost guardrails, missing CI, loose dependencies, thin release docs, missing MCP smoke-test proof, undocumented STDIO execution boundaries, and undocumented remote MCP auth boundaries.
Run directly with npx --yes shipcheck-mcp. Add the server to an MCP client's stdio configuration using command: "npx" and args: ["--yes", "--package", "shipcheck-mcp", "shipcheck-mcp"]. Once configured, invoke the scan_repository tool with parameters such as root, format, failOn, and strict.
It scans for exposed private-looking env vars, unsigned Stripe webhooks, missing Supabase/Firebase rule evidence, debug routes, missing usage-cost guardrails, missing CI, loose dependencies, thin release docs, missing MCP smoke-test proof, undocumented STDIO execution boundaries, and undocumented remote MCP auth boundaries.
No. Shipcheck is defensive static analysis. It reads local project files, does not modify the repository, does not execute project code, and does not require network access.
Only on repos you own or are authorized to inspect. The tool is meant for authorized use only.
Formats: `text`, `markdown`, `json`, or `sarif`.
Severities: `info`, `low`, `medium`, or `high`. You can also set `failOn` to a specific severity to fail the scan when issues at that level or higher are found.
The article (der, die, das) of 90,000 German nouns, compounds included, plus a checker that finds wrong articles in German text (“mit der Zug” → dem). Uses dictionary data, not AI guessing. Free, no login.
LoadOptimizer plans truck, container and pallet loads with a real optimization engine, straight from your AI assistant. Describe the order in plain language, for example "plan 36 Euro pallets on a standard 13.6 m trailer
A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi
Open-source MCP to use Blender with any LLM
Free moving quotes for AI agents from Next Generation Movers, a licensed interstate mover (USDOT 3764697). US long-distance nationwide and local DC/MD/VA. Indicative ballpark price and booking options; optional $0.01 x40
コメント