A
licenseC
qualityC
maintenanceMonitors and analyzes GitHub repository health by detecting stale branches, old pull requests, unresponsive issues, and security alerts. Integrates with MCP-compatible AI assistants and automation tools.
1
MIT
Shipshape MCP
by aranlucas
Evaluates Dependabot signals as part of repository security posture and dependency-related maintenance recommendations.
Provides read-only analysis of public GitHub repositories, including portfolio snapshots, repo readiness, branch risk, delivery hygiene, security posture, and prioritized action plans.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Shipshape MCPWhat should I fix first across my repositories?"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Shipshape MCP
Shipshape is a read-only MCP server that turns public GitHub repository, branch, delivery, security, and release signals into a ranked maintenance plan.
Production endpoint: https://shipshape-mcp.aranlucas.workers.dev/mcp
Connect
codex mcp add shipshape \
--url https://shipshape-mcp.aranlucas.workers.dev/mcp \
--oauth-client-registration autoAvailable tools include portfolio_snapshot, repo_readiness, branch_risk, delivery_hygiene, security_posture, standards_audit, and action_plan. Shipshape accepts public repositories only and has no mutation or code-execution capability.
Related MCP server: Quorum Git Agent
Develop
pnpm install --frozen-lockfile
cp .dev.vars.example .dev.vars
pnpm types
pnpm check
pnpm devSee SECURITY.md for the security boundary and report vulnerabilities privately.
Shared standards
Use standards_audit to check Node, Go, and Python packages against a pinned
engineering baseline. Commit .shipshape.yml with
baseline: shipshape/recommended@1 to adopt it. Shared policies, dated
exceptions, and evidence semantics are documented in Shared standards.
This server cannot be deployed
Maintenance
ActivityMaintained
ResponsivenessNo issues
Related MCP Connectors
Screens public GitHub repos and PRs to generate risk maps, findings, and merge-readiness signals.
GitHub repo maintainability verdicts—maintained, slowing, at-risk, abandoned—via MCP.
Supply chain risk scoring for npm, PyPI, Cargo, and Go. 9 tools. Behavioral signals.
Audit GitHub repos for malicious and supply-chain code before you depend on them.
Related MCP Servers
- AlicenseBqualityCmaintenanceAnalyze GitHub repositories with health scores, issue triage, and action items through MCP tools.4MIT
- AlicenseNot gradedqualityAmaintenanceAn evidence-first integration decision service that assesses GitHub repositories and returns transparent scores, adoption recommendations, and verification gates.MIT
gitlumen-mcpofficial
FlicenseAqualityDmaintenanceEnables AI agents to screen GitHub repositories and pull requests for risk analysis, generating risk scores, findings, and merge-readiness signals.5-