Ship Safe MCP Server

by asamassekou10• 870•• Scanned•Claim this listing•Request removal
Security & Testingagent securityagentic aiai securityclidevsecops

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

Ship Safe is an open-source mcp server by asamassekou10, written mainly in JavaScript, with 870 GitHub stars and the MIT license. Its code was last updated Oct 17, 2026. The latest npm release is ship-safe 11.0.0, published Oct 8, 2026, with 650 downloads last week.

Scan summary: scanned Nov 5, 2026 at commit 51ab049. Seen able to run shell commands, run dynamic code, read environment and secrets, connect to the internet. Scan policy

How to install Ship Safe

Built from the start command in the project's README: npx ship-safe. Check the README for required keys or settings.

Claude Code · Terminal
claude mcp add ship-safe -- npx ship-safe
Claude Desktop · claude_desktop_config.json
{
  "mcpServers": {
    "ship-safe": {
      "command": "npx",
      "args": [
        "ship-safe"
      ]
    }
  }
}
Cursor · .cursor/mcp.json
{
  "mcpServers": {
    "ship-safe": {
      "command": "npx",
      "args": [
        "ship-safe"
      ]
    }
  }
}
VS Code · Terminal
code --add-mcp '{"name":"ship-safe","command":"npx","args":["ship-safe"]}'

What Ship Safe can touch

  • Run shell commandsFound in the code by our scan
  • Run dynamic codeFound in the code by our scan
  • Read or write filesNot seen in this scan
  • Read environment and secretsFound in the code by our scan
  • Control a web browserNot seen in this scan
  • Connect to databasesNot seen in this scan
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetFound in the code by our scan

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 51ab049, Nov 5, 2026. See the scan policy.

Before you install Ship Safe

AgenticMart scanned Ship Safe on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.

Before you install

  1. Pin the version you reviewed instead of always installing the latest release.
  2. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by asamassekou10 on GitHub, 870 stars and 114 forks. Popularity is not proof of safety.
  • Last code change: Oct 17, 2026.
  • Open-source license: MIT.

Ship Safe is an open-source mcp server by asamassekou10, written mainly in JavaScript. The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

At a glance

Stars
870
Forks
114
Language
JavaScript
License
MIT
Created
Feb 2026
Last update
Oct 17, 2026
Type
MCP Server
Price
Free

Topics

agent-securityagentic-aiai-securityclidevsecopshermesllm-securitymcpnpmowaspprompt-injectionsarifsecretssecuritysecurity-toolsstatic-analysissupply-chain-security

Questions about Ship Safe

What is Ship Safe?

The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output.

Who maintains Ship Safe?

Ship Safe is maintained by asamassekou10 on GitHub (asamassekou10/ship-safe). AgenticMart lists it from public repository data.

Is Ship Safe safe to use?

AgenticMart scanned Ship Safe on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does Ship Safe use?

It is published under the MIT license.

Ship Safe alternatives

View more →

Similar mcp servers in Security & Testing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Ship Safe (this page)
asamassekou10
870MITOct 17, 2026Scanned, no flagged issues
Hexstrike AI
0x4m4
13kMITAug 3, 2026Scanned, no flagged issues
Viper
FunnyWolf
5.3kNone foundMay 31, 2026Not scanned yet
Open Ontologies
fabio-rovai
2.7kMITOct 30, 2026Scanned, no flagged issues
Qu1cksc0pe
CYB3RMX
2.1kGPL-3.0Sep 18, 2026Scanned, no flagged issues
Cve MCP Server
mukul975
1.7kApache-2.0Oct 1, 2026Scanned, no flagged issues