ship-safe

by asamassekou10 · Developer Tools · ★ 862

ship-safe is a project with MCP support by asamassekou10. The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output. It has 862 GitHub stars and ranks #156 of 2217 in Developer Tools by stars.

Category: Developer Tools
Author: asamassekou10
GitHub stars: 862
This week: Tracking since 18 Oct 2026
Weekly downloads: 399
Language: JavaScript
License: MIT (open source)
Last update: 2026-10-17 (7 days ago)
Links: Source Website npm

agent-security
agentic-ai
ai-security
cli
devsecops
hermes
llm-security
mcp
npm
owasp
prompt-injection
sarif
+5 more

How to install ship-safe

ship-safe is published on npm as ship-safe. These steps assume it runs as a local stdio server, which is the usual setup.

Check the README. Confirm the start command and note any API keys or environment variables it needs (pass them with -e KEY=value or an env block). You need Node.js for npx.

Add it to Claude Code from a terminal:

claude mcp add ship-safe -- npx -y ship-safe

Or add it to Cursor or Claude Desktop in .cursor/mcp.json or claude_desktop_config.json:

{
  "mcpServers": {
    "ship-safe": {
      "command": "npx",
      "args": [
        "-y",
        "ship-safe"
      ]
    }
  }
}

Restart the client and check it. Run claude mcp list, or open the client's MCP settings, and confirm ship-safe and its tools are listed. The install guide covers VS Code and Codex.

Also listed in

MCP servers for security testing750

Maintain this project? Get it featured ($99/mo, pinned at the top of Developer Tools) or see what featuring includes.

Report a problem with this listing

Frequently asked questions

What is ship-safe?

ship-safe is a project with MCP support by asamassekou10 in the Developer Tools category. The independent security agent for AI-written software. Finds issues, investigates whether they are real, and shows you the evidence. Deterministic core, no API key needed, JSON and SARIF output. It has 862 GitHub stars and ranks #156 of 2217 in Developer Tools by stars.

Is ship-safe free and open source?

Yes. ship-safe is published under the MIT license, so you can run, modify and self-host it at no cost. If it connects to a paid service, that service's own pricing and API terms still apply. Check the repository for the exact license text before using it commercially.

What are the alternatives to ship-safe?

Other Developer Tools projects on MCP Harbor include rea, storybook, context7. Each alternative links to its own page with stars, license and recent activity. The Developer Tools category ranks all 2217 by stars, and you can re-sort it by growth this week.

Alternatives to ship-safe

reaTrending★ 374,738

morluto · TypeScript+72,150 stars this week (+23.8%)

Reverse engineer anything with agents, from app behavior down to native binaries.

storybook★ 91,361

storybookjs · TypeScript

Storybook is the industry standard workshop for building, documenting, and testing UI components in isolation

context7Trending★ 63,566

upstash · TypeScript+372 stars this week (+0.6%)

Context7 Platform -- Up-to-date docs for AI agents

GitNexus★ 48,013

abhigyanpatwari · TypeScript

GitNexus: The Zero-Server Code Intelligence Engine

codebase-memory-mcpTrending★ 47,372

DeusData · C+622 stars this week (+1.3%)

Local code intelligence for developers and AI agents. Connect code, docs and infrastructure in a persistent graph, with CBM Lens, MCP tools, agent integrations and change-aware test selection.

github-mcp-server★ 33,909

github · Go+219 stars this week (+0.7%)

GitHub's official MCP Server

All 2217 Developer Tools MCP servers →

Data last updated 25 October 2026. Stars and downloads are refreshed every day from GitHub and npm.