Verified

AI MCP Server

Shippo shipping workflow skills for AI assistants including rate shopping and labeling.

Data last scanned today · Reviewed today

20 1 dangerous tool4 tools★ 2JavaScriptMIT

Overview

This repository provides a collection of agent skills designed to integrate Shippo's shipping capabilities directly into AI assistants. It includes nine distinct skills that guide agents through tasks such as address validation, package tracking, shipping cost analysis, and label generation, ensuring AI can handle complex logistics operations. The project uses an open standard for agent skills, utilizing SKILL.md files to enable progressive discovery, activation, and execution. These skills can be deployed across various AI surfaces, including plugins for Claude Code and OpenAI Codex, or by incorporating the consolidated markdown knowledge pack into custom AI project contexts.

Our verdict

This server carries a high risk level with a security score of 35/100, largely because it lacks editorial review and remains community-maintained rather than being supported by the official Shippo vendor. Given that critical authentication methods and read-only mode support have not been externally reviewed, developers should exercise extreme caution before deploying this in environments handling sensitive shipping or financial data.

Consolidated logistics logic for nine specific shipping agent skills.
Zero direct dependencies reduces potential supply-chain vulnerability surface.
Provides a human-readable knowledge pack for assistant context injection.
Distributes standardized skills for consistent behavior across AI platforms.

Security score is low at 35/100, indicating significant unreviewed risk.
Authentication mechanisms remain unverified for secure production use.
Community-maintained status lacks the stability of official vendor support.
Read-only operational safety has not undergone formal security assessment.

Setup

Claude Desktop

{
  "mcpServers": {
    "ai": {
      "args": [
        "-y",
        "@goshippo/ai"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

No read-only mode — running this grants full read/write access.
No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

Tool	Description	Risk
shippo_list_tools	Lists the available tools provided by the Shippo MCP server.	low
shippo_describe_tool	Describes a specific tool available in the Shippo MCP server.	low
shippo_read_execute_tool	Executes a read-only operation via the Shippo MCP server.	low
shippo_write_execute_tool	Executes a state-mutating operation, such as creating or purchasing a label.	high

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›How do I authenticate with the Shippo MCP server?

Authentication is handled via per-user Shippo OAuth. You authorize once through Shippo, and there are no API keys required to be copied manually.

›How do I install the Shippo plugin for Claude Code?

You can install the plugin either by using the --plugin-dir flag or by adding it via the plugin marketplace using the command 'plugin marketplace add goshippo/ai'.

›What is the recommended approach for non-skill-loading assistants like ChatGPT?

You can use the 'shippo-knowledge-pack.md' file, which is a single, consolidated markdown file. Simply drop it into a chat, a Custom GPT's knowledge base, or a project as context.

›Where can I find the official documentation for the Shippo MCP server's tools?

Per-tool semantics, usage instructions, and implementation details can be found in the official Shippo MCP server documentation at docs.goshippo.com.