Is com.shippo/shippo-mcp safe to use?

com.shippo/shippo-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install com.shippo/shippo-mcp?

com.shippo/shippo-mcp is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.

What can com.shippo/shippo-mcp do?

com.shippo/shippo-mcp provides 9 tools: Discovery, Activation, Execution, semantics, Capabilities and 4 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with com.shippo/shippo-mcp?

com.shippo/shippo-mcp is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is com.shippo/shippo-mcp actively maintained?

com.shippo/shippo-mcp is recently maintained - last commit was 35 days ago. It has 3 GitHub stars.

com.shippo/shippo-mcp

Multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses

3 9 tools GitHub

No known CVEs

MIT license

Maintained

Last commit 35d ago

Works with most clients

Transport: http

9 tools · ~362 tok

Grade A · 0.2% of 200K ctx

MCPpedia last refreshed this data 21h ago

Edit this pageView history

com.shippo/shippo-mcp is an MCP server that multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses. Its tool list has not been published yet over http, requires no API key, and scores 71/100 on MCPpedia's security, maintenance and efficiency rubric.

AI / ML E-Commerce

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "com-shippo-shippo-mcp": {
      "url": "<see-readme-for-url>"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/com-shippo-shippo-mcp)](https://mcppedia.org/s/com-shippo-shippo-mcp)

Read me

What com.shippo/shippo-mcp does

Multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

71/100across 5 weighted dimensions

How we score →

0255075100

−29

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (9)

Click any tool to inspect its schema.

~362 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is com.shippo/shippo-mcp safe to use?: com.shippo/shippo-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install com.shippo/shippo-mcp?: com.shippo/shippo-mcp is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.
What can com.shippo/shippo-mcp do?: com.shippo/shippo-mcp provides 9 tools: Discovery, Activation, Execution, semantics, Capabilities and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with com.shippo/shippo-mcp?: com.shippo/shippo-mcp is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is com.shippo/shippo-mcp actively maintained?: com.shippo/shippo-mcp is recently maintained - last commit was 35 days ago. It has 3 GitHub stars.

Similar servers

Others in ai-ml / ecommerce

View all →

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

io.github.callstack/agent-device95

Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP

5.4k 5

MCP Security Weekly

Get CVE alerts and security updates for com.shippo/shippo-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

AI / ML E-Commerce

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "com-shippo-shippo-mcp": {
      "url": "<see-readme-for-url>"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/com-shippo-shippo-mcp)](https://mcppedia.org/s/com-shippo-shippo-mcp)

Read me

What com.shippo/shippo-mcp does

Multi-carrier shipping for AI agents: compare rates, buy labels, track packages, validate addresses

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Shippo AI

This repo is the one-stop shop for building AI-powered shipping integrations with Shippo.

It contains:

9 Agent Skills: Workflow knowledge for AI assistants covering rate shopping, address validation, label purchase (with customs), package tracking, batch shipping, shipping cost analysis, support-ticket drafting, integration best practices, and SDK/API upgrades. Authored once and distributed across multiple AI surfaces.
Claude Code Plugin (providers/claude/plugin/): Install via --plugin-dir or the plugin marketplace (/plugin marketplace add goshippo/ai).
OpenAI Codex Plugin (providers/codex/plugin/): Install via the Codex plugin marketplace; bundles the skills plus the OAuth MCP server.
ClawHub Skill (providers/clawhub/skills/shippo/): Install via openclaw skills install @shippo/shippo.
Claude apps (claude.ai / Desktop / Cowork): The whole plugin is packaged as a single upload-ready ZIP (shippo-plugin.zip), attached to every GitHub Release. One upload provisions all the skills.
Knowledge Pack (ChatGPT and other chat assistants) (providers/knowledge-pack/shippo-knowledge-pack.md): A single consolidated markdown for assistants that do not load SKILL.md folders. A user drops it into a chat, a Custom GPT's Knowledge, or a Project as context. It provides the shipping knowledge; live actions still use the hosted MCP connector.

What is a skill?

A skill is a folder containing a SKILL.md file, YAML frontmatter (at minimum: name and description) plus markdown instructions that tell an AI assistant how to perform a specific task. Skills can also bundle reference docs, scripts, and templates.

rate-shopping/
├── SKILL.md           # required: metadata + instructions
└── README.md          # optional: human-facing orientation

Agents load skills by progressive disclosure in three stages:

Discovery: at startup, the agent loads only each skill's name and description, just enough to know when it might be relevant.
Activation: when a user prompt matches a skill's description, the agent loads the full SKILL.md body into context.
Execution: the agent follows the instructions, optionally loading referenced files (shippo/references/*.md) as it works.

Agent Skills is an open standard originally developed by Anthropic. The same SKILL.md works in Claude Code, Cursor, OpenAI Codex, GitHub Copilot, VS Code, and 30+ other agents.

In this repo, the 9 skills under skills/ are the canonical source. They're propagated into providers/claude/plugin/skills/ and providers/codex/plugin/skills/ (1:1 mirrors), providers/clawhub/skills/shippo/ (consolidated digest), and providers/knowledge-pack/shippo-knowledge-pack.md (a single upload-ready knowledge pack for ChatGPT and other non-skill-loading assistants) automatically by the sync scripts.

Model Context Protocol (MCP)

Shippo hosts a remote MCP server with per-user OAuth. Each user authorizes once through Shippo, there is no API key to copy. The Claude Code and OpenAI Codex plugins point at this endpoint and trigger the sign-in on first use.

URL	Transport	Auth
`https://mcp.shippo.com`	Streamable HTTP	Per-user Shippo OAuth

For per-tool semantics and usage, see the Shippo MCP server docs.

Building on OpenAI? See [Using the Shippo MCP f

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

71/100across 5 weighted dimensions

How we score →

0255075100

−29

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Inventory

Tools (9)

Click any tool to inspect its schema.

~362 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is com.shippo/shippo-mcp safe to use?: com.shippo/shippo-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install com.shippo/shippo-mcp?: com.shippo/shippo-mcp is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint instead of running it locally.
What can com.shippo/shippo-mcp do?: com.shippo/shippo-mcp provides 9 tools: Discovery, Activation, Execution, semantics, Capabilities and 4 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with com.shippo/shippo-mcp?: com.shippo/shippo-mcp is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is com.shippo/shippo-mcp actively maintained?: com.shippo/shippo-mcp is recently maintained - last commit was 35 days ago. It has 3 GitHub stars.

Similar servers

Others in ai-ml / ecommerce

View all →

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Gemini Cli95

An open-source AI agent that brings the power of Gemini directly into your terminal.

108.8k 8

io.github.callstack/agent-device95

Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP

5.4k 5

MCP Security Weekly

Get CVE alerts and security updates for com.shippo/shippo-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?