{"_id":"@ship-safe/mcp","_rev":"13-48feb3eb4d5b5906b44c064f5778e17f","name":"@ship-safe/mcp","dist-tags":{"latest":"0.6.4"},"versions":{"0.2.0":{"name":"@ship-safe/mcp","version":"0.2.0","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"MIT","_id":"@ship-safe/mcp@0.2.0","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"shipsafe-mcp":"dist/index.js"},"dist":{"shasum":"9bf956881c71c5127dd0b6edd292aede5fd0cf2b","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.2.0.tgz","fileCount":3,"integrity":"sha512-v2VaFTjgZy4O2yJ8WA/3OXf5MpPzmDHrbd3442g7f9CB1dRU/7QbpGU+/O56rAtJs2wl3Z/UnCeMm2/B5qJEdw==","signatures":[{"sig":"MEQCIC1utjucMbkydsIMiBeXXN4zjlCm7GORxSRUAaSsH9cRAiAL+u9Ks4zoBub6X3SlsIBGfesYbhgM1ToXsjar2XRSCA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":215235},"type":"module","_from":"file:ship-safe-mcp-0.2.0.tgz","engines":{"node":">=18"},"scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"_resolved":"/private/var/folders/vh/8_gvrm_96v750d2469dkbz2c0000gn/T/3e930bd50970cab574593fc809500881/ship-safe-mcp-0.2.0.tgz","_integrity":"sha512-v2VaFTjgZy4O2yJ8WA/3OXf5MpPzmDHrbd3442g7f9CB1dRU/7QbpGU+/O56rAtJs2wl3Z/UnCeMm2/B5qJEdw==","deprecated":"Please upgrade to 0.5.1 or later.","repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"11.11.0","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"0.1.0","@shipsafe/scanner":"0.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.2.0_1781910810918_0.5921699149319843","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@ship-safe/mcp","version":"0.3.0","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"MIT","_id":"@ship-safe/mcp@0.3.0","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"shipsafe-mcp":"dist/index.js"},"dist":{"shasum":"39dc5218b442bde7829c45d20f166fc9376a8b1c","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.3.0.tgz","fileCount":3,"integrity":"sha512-MWHk43Q+27a78BDBDT6EQzqAHobz6MP7SqISzc5w1ybfc1MF4L2eyIujDI614U8Crti+AG5X/PAvbQ5bfhNKIA==","signatures":[{"sig":"MEUCIFcrnRbY6R4PeA4xarbEJgmfjjkG+1n2Wwe5D06hA/9+AiEApvHBPbaO7zEsvvOoxhItnaZUXYirrIuz7xiam7w9fh8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":224443},"type":"module","_from":"file:ship-safe-mcp-0.3.0.tgz","engines":{"node":">=18"},"scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"_resolved":"/private/var/folders/vh/8_gvrm_96v750d2469dkbz2c0000gn/T/c376ce7f6097ce423ba2bb477aff04cf/ship-safe-mcp-0.3.0.tgz","_integrity":"sha512-MWHk43Q+27a78BDBDT6EQzqAHobz6MP7SqISzc5w1ybfc1MF4L2eyIujDI614U8Crti+AG5X/PAvbQ5bfhNKIA==","deprecated":"Please upgrade to 0.5.1 or later.","repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"11.11.0","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"0.1.0","@shipsafe/scanner":"0.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.3.0_1781913072377_0.7871864061373433","host":"s3://npm-registry-packages-npm-production"}},"0.4.0":{"name":"@ship-safe/mcp","version":"0.4.0","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"MIT","_id":"@ship-safe/mcp@0.4.0","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"shipsafe-mcp":"dist/index.js"},"dist":{"shasum":"6b46ac9da480f69ba1dd7efde687761c64b6bd88","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.4.0.tgz","fileCount":3,"integrity":"sha512-sIZ2GRzqkBsk54eurG766iUTRa70YM3Rd8QTtm1+m97p7RZP2fpjKaMaEUg+AwRKnbOy/nLBZg6VrkcZvAAFCA==","signatures":[{"sig":"MEYCIQD6J5PTIxUSQUQ4qAvAWxCUUZetsgu0xGAxbe54nuu10QIhANgTPu66q5+bjb6fxSDqZcnwx1WxyVLJeoX39z5VFreb","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":289912},"type":"module","_from":"file:ship-safe-mcp-0.4.0.tgz","engines":{"node":">=18"},"scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"_resolved":"/private/var/folders/vh/8_gvrm_96v750d2469dkbz2c0000gn/T/13010b6a75153cc1f0bc61fafd6cb5ed/ship-safe-mcp-0.4.0.tgz","_integrity":"sha512-sIZ2GRzqkBsk54eurG766iUTRa70YM3Rd8QTtm1+m97p7RZP2fpjKaMaEUg+AwRKnbOy/nLBZg6VrkcZvAAFCA==","deprecated":"Please upgrade to 0.5.1 or later.","repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"11.11.0","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"0.1.0","@shipsafe/scanner":"0.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.4.0_1782062568835_0.4555791941922305","host":"s3://npm-registry-packages-npm-production"}},"0.5.0":{"name":"@ship-safe/mcp","version":"0.5.0","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"MIT","_id":"@ship-safe/mcp@0.5.0","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"shipsafe-mcp":"dist/index.js"},"dist":{"shasum":"eae3d79c3974988e1227f2e43d2664bc7a52ff1b","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.5.0.tgz","fileCount":3,"integrity":"sha512-AtKgOhN0c8OA7WiyCnuXTXkBHR9QwWjeGTZ9o2nsau0WTbJsAP1DsN5nvVKLkjvhnDATACytzclcU1ZyWiZf0g==","signatures":[{"sig":"MEUCIQDN168h5xtowdmMpUEJr5rd/ClbItpuMRFpzb500dz1FAIgPa7TPclNkroNXmzv2JiyEvYGj3ZqtQtR9+D9W6zcf7E=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":305709},"type":"module","_from":"file:ship-safe-mcp-0.5.0.tgz","engines":{"node":">=18"},"scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"_resolved":"/private/var/folders/vh/8_gvrm_96v750d2469dkbz2c0000gn/T/d2f296c4d7ee3ecc0a8abb5a82ccc39b/ship-safe-mcp-0.5.0.tgz","_integrity":"sha512-AtKgOhN0c8OA7WiyCnuXTXkBHR9QwWjeGTZ9o2nsau0WTbJsAP1DsN5nvVKLkjvhnDATACytzclcU1ZyWiZf0g==","deprecated":"Please upgrade to 0.5.1 or later.","repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"11.11.0","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"0.1.0","@shipsafe/scanner":"0.1.0"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.5.0_1782163760393_0.6128320739049193","host":"s3://npm-registry-packages-npm-production"}},"0.5.1":{"name":"@ship-safe/mcp","version":"0.5.1","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"UNLICENSED","_id":"@ship-safe/mcp@0.5.1","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"shipsafe-mcp":"dist/index.js"},"dist":{"shasum":"cf26cd1c843170ea24cf09b5ecad14524313f555","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.5.1.tgz","fileCount":4,"integrity":"sha512-YXnG1s0KlXi8komx2+AHbcFBlfIYA0sgSFWchj7VuGvPKZLxqKm9FSBCD7ALQqsF7bjE/M/hG2UXfBivCOMSbw==","signatures":[{"sig":"MEUCIQDuWWRuDJvif0NKyI9MIDz+KpOatQfbTxZp2MZUqetzwAIgOIMNqJ6BfgvoM5XsOw0Zvo/JxrUc3Vfk/qTpR4syFaQ=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":308349},"type":"module","engines":{"node":">=18"},"gitHead":"8ce09ad333325fbace58cda8bc472c0871abbbeb","scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"11.11.0","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.5.1_1782572222979_0.5924955463703487","host":"s3://npm-registry-packages-npm-production"}},"0.5.2":{"name":"@ship-safe/mcp","version":"0.5.2","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","_id":"@ship-safe/mcp@0.5.2","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"ship-safe-mcp":"dist/index.js"},"dist":{"shasum":"bebf512096afb3fca1c5758851d78ec68756822f","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.5.2.tgz","fileCount":4,"integrity":"sha512-DsM4a75YB5haAccHpFU9nxCRyZ81dbFuqSdDpoYABHi7+amsYOK03lAaJr2k6tmqaQ1pToXZj/HkL0iODxYycQ==","signatures":[{"sig":"MEUCIDrLbl4QsbgF3i/O67E4QQSomRrnawdoJnmi52XKYFhvAiEAiw8skxDA43E+Z1SQqDE8/e4ul7F4QMVqljblC35GVGc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQC1BgPXPzrEHW7WW43Jezeo/4CXNzs1NoyIOAc6blOX2QIhAJoe7GDeQjLC5KLBM6tguqKg7ZTDBBgg5jHKVcPDRZBJ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1652521},"type":"module","engines":{"node":">=18"},"gitHead":"8e796fea9019c0d566805af44e935682e042bb5a","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.5.2_1790081534167_0.012490707322601047","host":"s3://npm-registry-packages-npm-production"}},"0.5.3":{"name":"@ship-safe/mcp","version":"0.5.3","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","_id":"@ship-safe/mcp@0.5.3","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"ship-safe-mcp":"dist/index.js"},"dist":{"shasum":"c85ba4dfd1077f81c01aea26ff041c3f89813aa9","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.5.3.tgz","fileCount":4,"integrity":"sha512-Vj5UOAVTuaW1Y925FJG+pOqlhJK7NSzTJgt2aSB8k/Je6d1ke04qjORt9cjV5rSzkgvmF2muyGP0gLieqCR92w==","signatures":[{"sig":"MEQCIEDoOff+bmAtnRbWaI9LBbGp2cEf8MdA9j26UJsVpXFFAiBhLX7KMMdDx04LP31pn+vTGAIZQM9GRYoKDRZqoB1kew==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIQDfqnW2E41FUQzxr6VoQEmRoVFoaO3iAil/sqyt4kdQuAIgcYTGq+EDGqv8YXkgAAF3vsLTsYqJWnCYdk1b7q5pnJI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1652521},"type":"module","engines":{"node":">=18"},"gitHead":"8e796fea9019c0d566805af44e935682e042bb5a","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.5.3_1790081835534_0.8519998340435748","host":"s3://npm-registry-packages-npm-production"}},"0.6.0":{"name":"@ship-safe/mcp","version":"0.6.0","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","_id":"@ship-safe/mcp@0.6.0","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"ship-safe-mcp":"dist/index.js"},"dist":{"shasum":"026c15b01062b7a313ddbd8b41e47e29a5085ad5","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.6.0.tgz","fileCount":4,"integrity":"sha512-CNaFt++GJG1XOA9tK3t7TeolukEGS4DCaKBxZLeGm9Qq+eoNbwD2JjRdwkJClm6bPG+armIVxrxEgxc+U3xZ3w==","signatures":[{"sig":"MEUCIQCthpXWqgMO9wkbxDgNlQRa+9SG3QNCiTlcHdYdpVsb1wIgNFgWjJZIIeSzMBZ3Ylv+JBuetPhhp7i12HeP78FuvZY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIGFHJUsuL4FY7eJCvlstZxU/m5Jf1SKaGJ+sTbD/imfEAiEA8Hem6z28M4bRhOKhczkNmvUKtaQ5FhFg6GbSMD0Z9lM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1682115},"type":"module","engines":{"node":">=18"},"gitHead":"dc8e85a8c3f3d15332b6bdb524adc406bb2d4531","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.6.0_1790190958529_0.26199602408461864","host":"s3://npm-registry-packages-npm-production"}},"0.6.1":{"name":"@ship-safe/mcp","version":"0.6.1","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","_id":"@ship-safe/mcp@0.6.1","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"ship-safe-mcp":"dist/index.js"},"dist":{"shasum":"51be965cb32d0db972c03f1d3adc0f37777b975d","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.6.1.tgz","fileCount":4,"integrity":"sha512-Ki/ts95UG4RtehEpPq3eutZi1HmzPuAyD66b+s5bCtYYhQTWCPMUuYIiRrboJl3q+r4cGdSiXbBzeklum6AW/Q==","signatures":[{"sig":"MEQCIFNMlXkz1WZZqWicAnJm7dpG59KXAJCw98jE43lKVdSIAiBMXjpmlPkcZjDvqvCKFGpKuICCWhVFOMp3nK13yjxoeg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIQDYxiJxcnTHOL83tr8FOX+7WzXVVj5ntkmPEbxqyKkaWAIgTK6yaY5ebH2r/KLncwGp2G+JnwilpDESHFMHAaydoMo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1699557},"type":"module","engines":{"node":">=18"},"gitHead":"9c593f22c8e38a122c09f155cd6aa14e1d4d056f","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.6.1_1790257790258_0.5547303266145192","host":"s3://npm-registry-packages-npm-production"}},"0.6.2":{"name":"@ship-safe/mcp","version":"0.6.2","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","_id":"@ship-safe/mcp@0.6.2","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"ship-safe-mcp":"dist/index.js"},"dist":{"shasum":"247b2d62c4780b7a1dd4b3593af1d6db2de5ea15","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.6.2.tgz","fileCount":4,"integrity":"sha512-mKlx0MMqpOOgN+QBlYg9Zjtp+PDpHeqJ8h3oYZBq2zt8LdY4wAUxVaqYwzi0ZGf8s4x9NairkleBSuyq/6lLjQ==","signatures":[{"sig":"MEYCIQCXYn59uiC2sXUh5s5x5R4F4WtMbJol8me5yW9SlBSUogIhAL6FWg0GvESH+27Ya1elpuiv7vV7Cm0+uNi9BotaiXEn","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQCJj8xIMIpVyHbIBZ8jnJzKIaFt98Q9gNYW1H7ZNbAQzAIhAI5ioNqkkXRBYRg2FNmr2RIgIPNLDAd96fJthzUONOXt","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1702516},"type":"module","engines":{"node":">=18"},"gitHead":"a167eeafd134ea1b327a1b892abc272b089f5090","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","build":"tsup","type-check":"tsc --noEmit","bundle:mcpb":"node scripts/build-mcpb.mjs","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — let your AI coding agent scan the code it writes for security vulnerabilities, in-loop","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.6.2_1790276606482_0.8259589005299695","host":"s3://npm-registry-packages-npm-production"}},"0.6.3":{"name":"@ship-safe/mcp","version":"0.6.3","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","_id":"@ship-safe/mcp@0.6.3","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"homepage":"https://ship-safe.co","bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"bin":{"ship-safe-mcp":"dist/index.js"},"dist":{"shasum":"8a02e246185b0730b02171a83ff338bdbbe4deb8","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.6.3.tgz","fileCount":4,"integrity":"sha512-GysM1OHcnyBGpZJX4ZaEQEvScUuFcb3bJVcBGvOx+EzzotsoiWr/SzQsd9ezQmRrrOA3DCC9Y11mJoYwxm/xdA==","signatures":[{"sig":"MEQCIF7Rhs5cFDj3EzGp9HrUh95dFZhFsQ202FjXV0Hh6MiSAiAZzlB48JCwN8cFhVGmZsUg3BNgx6Frf7FfbJA+W+I7Qg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIGEQY4bREC8wRo28KhJfyxoshdehOinppLY0dsNJlGSzAiATu6zEIfUwLpES1M4DrEwyOfwLPSklMY4JeRaJOYxT2g==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1709924},"type":"module","engines":{"node":">=18"},"gitHead":"c57f0d89ef65d0f5ad6e4bcf0ec3e5b556763eb4","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","test":"vitest run","build":"tsup","type-check":"tsc --noEmit","bundle:mcpb":"node scripts/build-mcpb.mjs","prepublishOnly":"pnpm run build"},"_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — the independent verifier for AI-built apps: your AI coding agent checks the code it writes, in-loop","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","vitest":"^3","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"tmp":"tmp/mcp_0.6.3_1790353892394_0.9262147140017389","host":"s3://npm-registry-packages-npm-production"}},"0.6.4":{"_id":"@ship-safe/mcp@0.6.4","bin":{"ship-safe-mcp":"dist/index.js"},"bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"dist":{"shasum":"1aa663f05d8cfbef74c911d85f519de65ca43f39","tarball":"https://registry.npmjs.org/@ship-safe/mcp/-/mcp-0.6.4.tgz","fileCount":4,"integrity":"sha512-b14PsXa1q3OCKOPSIsZ8LdusWOdqyeAXFnIXKoQlgCTnBthpnhuuhXA5cC3BETZ8OunajM3HohEPdxINYUX6ag==","signatures":[{"sig":"MEUCIEgQ2jxd3G4IjFakQW+9igWrVw8oPCPcSkXQ68AQxSUOAiEAiPdUoobtXte+yIcEkts1U6LrOPjqfrdMALPjfwCG6r4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIQDptt8WRn/kbNp//t2qPSxW/uvoH8ooRG3sTW1XOCJk4AIgE9WcDEmTiM41pa03D/o6HuV6OnYodH1BMT7yTGyBguY="}],"unpackedSize":1764269},"name":"@ship-safe/mcp","type":"module","author":{"name":"ShipSafe","email":"support@ship-safe.co"},"engines":{"node":">=18"},"license":"SEE LICENSE IN LICENSE","mcpName":"co.ship-safe/scanner","scripts":{"dev":"tsup --watch","test":"vitest run","build":"tsup","type-check":"tsc --noEmit","bundle:mcpb":"node scripts/build-mcpb.mjs","prepublishOnly":"pnpm run build"},"version":"0.6.4","_npmUser":{"name":"tomerg1","email":"tomerg.work@gmail.com"},"homepage":"https://ship-safe.co","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"_npmVersion":"10.9.8","description":"ShipSafe MCP server — the independent verifier for AI-built apps: your AI coding agent checks the code it writes, in-loop","directories":{},"maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"_nodeVersion":"22.23.1","dependencies":{"zod":"^3.23","ignore":"^7","@anthropic-ai/sdk":"^0.39","@modelcontextprotocol/sdk":"^1.12.0"},"publishConfig":{"access":"public","registry":"https://registry.npmjs.org/"},"_hasShrinkwrap":false,"devDependencies":{"tsup":"^8","vitest":"^3","typescript":"^5.7","@types/node":"^22","@shipsafe/shared":"workspace:*","@shipsafe/scanner":"workspace:*"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/mcp_0.6.4_1790628263851_0.3386898739599573"}}},"time":{"created":"2026-06-19T23:13:30.677Z","modified":"2026-09-28T20:44:24.192Z","0.2.0":"2026-06-19T23:13:31.075Z","0.3.0":"2026-06-19T23:51:12.519Z","0.4.0":"2026-06-21T17:22:49.014Z","0.5.0":"2026-06-22T21:29:20.528Z","0.5.1":"2026-06-27T14:57:03.148Z","0.5.2":"2026-09-22T12:52:14.277Z","0.5.3":"2026-09-22T12:57:15.620Z","0.6.0":"2026-09-23T19:15:58.625Z","0.6.1":"2026-09-24T13:49:50.410Z","0.6.2":"2026-09-24T19:03:26.575Z","0.6.3":"2026-09-25T16:31:32.496Z","0.6.4":"2026-09-28T20:44:24.013Z"},"bugs":{"url":"https://github.com/Tgoldi/shipsafe/issues"},"author":{"name":"ShipSafe","email":"support@ship-safe.co"},"license":"SEE LICENSE IN LICENSE","homepage":"https://ship-safe.co","keywords":["mcp","model-context-protocol","security","scanner","vulnerability","ai","cursor","claude","vibe-coding"],"repository":{"url":"git+https://github.com/Tgoldi/shipsafe.git","type":"git","directory":"apps/mcp"},"description":"ShipSafe MCP server — the independent verifier for AI-built apps: your AI coding agent checks the code it writes, in-loop","maintainers":[{"name":"tomerg1","email":"tomerg.work@gmail.com"}],"readme":"# @ship-safe/mcp\n\nA [Model Context Protocol](https://modelcontextprotocol.io) server for ShipSafe, the independent verifier for AI-built apps: your AI coding agent (Cursor, Claude Code, Claude Desktop, Windsurf, …) scans the code it writes for security vulnerabilities — **in-loop, without leaving the editor**.\n\nIt runs ShipSafe's fast local pattern scan for free (secrets, injection, broken auth/IDOR, misconfig) plus a **dependency CVE scan** of your lockfiles (`package-lock.json`, `pnpm-lock.yaml`, `yarn.lock`, `requirements.txt`, `go.sum`, `Gemfile.lock`) via the OSV database. With a login it also runs **AI deep analysis** (a free account includes one AI scan), and on a monthly plan it can generate a one‑paste fix prompt. Your code is never stored.\n\n## Tools\n\n| Tool | What it does | Auth |\n|------|--------------|------|\n| `shipsafe_scan` | Scan a directory; returns plain‑English findings with the exact fix for each, plus structured output (see below). | Free (local). AI analysis needs Growth/Shield. |\n| `shipsafe_fix_prompt` | Scan, then return one paste‑ready prompt that fixes everything, tailored to the detected AI builder. | Growth / Shield |\n| `shipsafe_status` | Show login state, plan, and remaining AI scan quota. | — |\n| `shipsafe_login` | Log in from the editor: call once for a browser URL + code, then again with the returned `device_code` to finish. | — |\n\nSecrets that show up in findings are masked (`[REDACTED]`) before anything is echoed back to the agent, so a model can't quote a real credential into its transcript.\n\n### `shipsafe_scan` inputs\n\n| Input | Type | Purpose |\n|-------|------|---------|\n| `path` | string | Directory to scan (defaults to cwd). |\n| `severity` | `critical`\\|`high`\\|`medium`\\|`low` | Only return findings at or above this severity. |\n| `ai` | boolean | Run AI deep analysis (needs a login). On by default on paid plans; a free account includes one AI scan, so pass `true` to use it. |\n| `paths` | string[] | Scan only these files/dirs (inside the project) — e.g. the files you just edited. Fast inner loop. |\n| `changedOnly` | boolean | Scan only files changed vs git HEAD + new untracked files. Falls back to a full scan if not a git repo. |\n| `upload` | boolean | Save the scan to your ShipSafe dashboard (needs login) and return a shareable `dashboardUrl`. Off by default. |\n\n### Structured output\n\nAlongside the human‑readable report, `shipsafe_scan` returns machine‑readable `structuredContent` an agent can branch on:\n\n- `clean` (boolean) and `counts` (by severity) — a greppable pass/fail, so you never have to parse prose.\n- `findings[]` — each with `key`, `severity`, `file`, `line`, `cwe`, `plainEnglish`, `fixDescription`, `fixSuggestion`.\n- `scanned` — `{ mode: \"full\" | \"targeted\", sourceFiles, dependencyFiles }`.\n- `diff` (full‑project scans only) — `{ resolved, stillOpen, introduced }` vs your previous scan of the same directory, so a `scan → fix → re-scan` loop can confirm a fix actually worked. The diff state is kept locally under `~/.shipsafe/mcp-history` and never leaves your machine.\n\nFailures (no source files, generation errors, not logged in) are returned with `isError: true`, so \"couldn't run\" is never mistaken for \"ran clean\".\n\n## How accurate is it?\n\nPublished, including the misses — the numbers below come from a public benchmark\nof **1,147 labelled cases** (569 vulnerable, 578 clean twins), scored with a\nper-category confusion matrix. Source of truth: `apps/web/src/lib/benchmark-measured.json`\n(pattern-scan row) and `apps/web/src/lib/benchmark-figures.ts` (AI-pass row), regenerated\nby `packages/scanner/__tests__/eval-corpus.test.ts` — this table is a snapshot, not a\nsecond source; check those files before trusting an old copy of this README.\n\n| Layer | Precision | Recall |\n|-------|-----------|--------|\n| Pattern scan (free) | 92.5% | 47.8% |\n| With AI analysis | 72.7% | 84.5% |\n| With AI, held-out slice | — | 82.0% |\n\nThe free pattern layer is deliberately high-precision and low-recall: it is\ntuned to almost never cry wolf, which means it misses more than half of what a\ndeep scan finds. The AI pass roughly doubles recall and gives up some precision\nto do it. Neither layer certifies that an app is secure, and no scanner can.\n\nFull method, per-category breakdown and every miss: <https://ship-safe.co/benchmark>\n\n## Login (for AI analysis)\n\nThe free local + dependency scan works with no login and no limit. AI deep analysis needs a login: a free account includes one AI scan, and the monthly plans include more AI scans plus fix prompts ([pricing](https://ship-safe.co/pricing)). Log in either way:\n\n- **From the editor:** ask your agent to log in — it calls the `shipsafe_login` tool, which gives you a browser URL + code and finishes once you authorize.\n- **From a terminal:** `npx @ship-safe/cli login`.\n\nBoth write `~/.shipsafe/token.json`, which this MCP server reads, so a single login covers the CLI and the MCP.\n\n## Setup\n\n### Cursor — `.cursor/mcp.json` (project) or `~/.cursor/mcp.json` (global)\n\n```json\n{\n  \"mcpServers\": {\n    \"shipsafe\": { \"command\": \"npx\", \"args\": [\"-y\", \"@ship-safe/mcp\"] }\n  }\n}\n```\n\n### Claude Code\n\n```bash\nclaude mcp add shipsafe -- npx -y @ship-safe/mcp\n```\n\n### Claude Desktop — `claude_desktop_config.json`\n\n```json\n{\n  \"mcpServers\": {\n    \"shipsafe\": { \"command\": \"npx\", \"args\": [\"-y\", \"@ship-safe/mcp\"] }\n  }\n}\n```\n\nThen ask the agent: *\"scan this project with ShipSafe and fix what it finds.\"*\n\n## Configuration\n\n| Env var | Default | Purpose |\n|---------|---------|---------|\n| `SHIPSAFE_API_URL` | `https://ship-safe.co` | Point at a local/staging backend (e.g. `http://localhost:3000`). |\n\n## Local development\n\n```bash\npnpm install\npnpm --filter @shipsafe/shared --filter @shipsafe/scanner build\npnpm --filter @ship-safe/mcp build\n# run the built server directly (stdio):\nnode apps/mcp/dist/index.js\n```\n","readmeFilename":"README.md"}