Is com.shippo/shippo-mcp safe to use?

com.shippo/shippo-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install com.shippo/shippo-mcp?

com.shippo/shippo-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with com.shippo/shippo-mcp?

com.shippo/shippo-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is com.shippo/shippo-mcp actively maintained?

com.shippo/shippo-mcp is actively maintained — last commit was 1 day ago. It has 1 GitHub stars.

com.shippo/shippo-mcp

Multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses

1 GitHub

No known CVEs

No license

Actively maintained

Last commit 1d ago

Works with most clients

Transport:

0 tools

Grade F

MCPpedia last refreshed this data 1m ago

Edit this pageView history

AI / ML E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "com-shippo-shippo-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/com-shippo-shippo-mcp)](https://mcppedia.org/s/com-shippo-shippo-mcp)

Read me

What com.shippo/shippo-mcp does

Multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

18/100across 5 weighted dimensions

How we score →

0255075100

−82

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is com.shippo/shippo-mcp safe to use?: com.shippo/shippo-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install com.shippo/shippo-mcp?: com.shippo/shippo-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with com.shippo/shippo-mcp?: com.shippo/shippo-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is com.shippo/shippo-mcp actively maintained?: com.shippo/shippo-mcp is actively maintained — last commit was 1 day ago. It has 1 GitHub stars.

Similar servers

Others in ai-ml / ecommerce

View all →

Sequential Thinking MCP Server96

Dynamic problem-solving through sequential thought chains

88.6k 1

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

106.1k 8

Antigravity Workspace Template94

Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.

1.3k 2

Deep Research94

Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.

4.6k 5

MCP Security Weekly

Get CVE alerts and security updates for com.shippo/shippo-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML E-Commerce

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "com-shippo-shippo-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/com-shippo-shippo-mcp)](https://mcppedia.org/s/com-shippo-shippo-mcp)

Read me

What com.shippo/shippo-mcp does

Multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

Shippo AI

This repo is the one-stop shop for building AI-powered shipping integrations with Shippo.

It contains:

9 Agent Skills: Workflow knowledge for AI assistants covering rate shopping, address validation, label purchase (with customs), package tracking, batch shipping, shipping cost analysis, support-ticket drafting, integration best practices, and SDK/API upgrades. Authored once and distributed across multiple AI surfaces.
Claude Code Plugin (providers/claude/plugin/): Install via --plugin-dir or the plugin marketplace (/plugin marketplace add goshippo/ai).
OpenAI Codex Plugin (providers/codex/plugin/): Install via the Codex plugin marketplace; bundles the skills plus the OAuth MCP server.
ClawHub Skill (providers/clawhub/skills/shippo/): Install via openclaw skills install @shippo/shippo.
Claude apps (claude.ai / Desktop / Cowork): The whole plugin is packaged as a single upload-ready ZIP (shippo-plugin.zip), attached to every GitHub Release. One upload provisions all the skills.
Knowledge Pack (ChatGPT and other chat assistants) (providers/knowledge-pack/shippo-knowledge-pack.md): A single consolidated markdown for assistants that do not load SKILL.md folders. A user drops it into a chat, a Custom GPT's Knowledge, or a Project as context. It provides the shipping knowledge; live actions still use the hosted MCP connector.

What is a skill?

A skill is a folder containing a SKILL.md file, YAML frontmatter (at minimum: name and description) plus markdown instructions that tell an AI assistant how to perform a specific task. Skills can also bundle reference docs, scripts, and templates.

rate-shopping/
├── SKILL.md           # required: metadata + instructions
└── README.md          # optional: human-facing orientation

Agents load skills by progressive disclosure in three stages:

Discovery: at startup, the agent loads only each skill's name and description, just enough to know when it might be relevant.
Activation: when a user prompt matches a skill's description, the agent loads the full SKILL.md body into context.
Execution: the agent follows the instructions, optionally loading referenced files (shippo/references/*.md) as it works.

Agent Skills is an open standard originally developed by Anthropic. The same SKILL.md works in Claude Code, Cursor, OpenAI Codex, GitHub Copilot, VS Code, and 30+ other agents.

In this repo, the 9 skills under skills/ are the canonical source. They're propagated into providers/claude/plugin/skills/ and providers/codex/plugin/skills/ (1:1 mirrors), providers/clawhub/skills/shippo/ (consolidated digest), and providers/knowledge-pack/shippo-knowledge-pack.md (a single upload-ready knowledge pack for ChatGPT and other non-skill-loading assistants) automatically by the sync scripts.

Model Context Protocol (MCP)

Shippo hosts a remote MCP server with per-user OAuth. Each user authorizes once through Shippo, there is no API key to copy. The Claude Code and OpenAI Codex plugins point at this endpoint and trigger the sign-in on first use.

URL	Transport	Auth
`https://mcp.shippo.com`	Streamable HTTP	Per-user Shippo OAuth

For per-tool semantics and usage, see the Shippo MCP server docs.

Building on OpenAI? See [Using the Shippo MCP f

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

18/100across 5 weighted dimensions

How we score →

0255075100

−82

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is com.shippo/shippo-mcp safe to use?: com.shippo/shippo-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install com.shippo/shippo-mcp?: com.shippo/shippo-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with com.shippo/shippo-mcp?: com.shippo/shippo-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is com.shippo/shippo-mcp actively maintained?: com.shippo/shippo-mcp is actively maintained — last commit was 1 day ago. It has 1 GitHub stars.

Similar servers

Others in ai-ml / ecommerce

View all →

Sequential Thinking MCP Server96

Dynamic problem-solving through sequential thought chains

88.6k 1

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

106.1k 8

Antigravity Workspace Template94

Workspace template + MCP server for Claude Code, Codex CLI, Cursor & Windsurf. Multi-agent knowledge engine (ag-refresh / ag-ask) that turns any codebase into a queryable AI assistant.

1.3k 2

Deep Research94

Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.

4.6k 5

MCP Security Weekly

Get CVE alerts and security updates for com.shippo/shippo-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?