ship.page MCP server

• append_filesFree

  Add files to a drop owned by the authenticated account (requires an sp_ API key and an active subscription): up to 900 files per call, 10,000 per drop total, and existing paths are overwritten. The drop keeps its current expiry and password protection.

• claim_dropwrite actionFree

  Attach an anonymously deployed drop to the authenticated account using its one-time claim token (spc_..., returned once by deploy_html/deploy_files). Claiming extends the drop to the free-account lifetime (90 days) and can revive an offline drop during its 30-day private recovery window. Claimed drops become listable, deletable, and — on paid plans — redeployable via named drops. Requires an sp_ API key.

• delete_dropwrite actionFree

  Permanently delete a drop owned by the authenticated account (requires an sp_ API key). The URL stops serving immediately and cannot be recovered.

• deploy_fileswrite actionFree

  Deploy a map of path -> content as a multi-file site (must include index.html to serve at the root). Anonymous: up to 100 files per request, 30-day expiry (90 days once signed in). Pro ($4/mo): up to 900 files, custom or no TTL, named drops.

• deploy_htmlwrite actionFree

  Deploy one HTML document and get back a live, unguessable https://<slug>.shipped.run/ URL. Anonymous: 10 deploys/min per IP, 10MB body cap, 30-day expiry. Pro ($4/mo): custom or no TTL, named drops.

• get_accountFree

  Show the authenticated account's plan, subscription status and usage (requires an sp_ API key). Anonymous callers should use get_limits for the static free-tier limits.

• get_limitsFree

  Show the ship.page plan matrix (anonymous free tier vs Pro $4/mo vs Team $19/mo) and, when an sp_ API key is present, the caller's current account/plan status.

• list_dropsFree

  List drops owned by the authenticated account (requires an sp_ API key; anonymous drops are not listable). Returns slug, url, name, file counts, expiry and password_protected, newest first.

• remove_drop_passwordwrite actionFree

  Remove password protection from a drop you own, making it readable by anyone with its URL. Requires an sp_ API key; works even after your paid subscription lapses.

• restore_dropwrite actionFree

  Bring back an expired drop owned by the authenticated account while its files are still retained (requires an sp_ API key). Free accounts restore up to 30 days past expiry and the drop comes back at the 90-day lifetime; paid plans restore up to 90 days past expiry and the drop never expires again.

• set_drop_passwordwrite actionFree

  Set or rotate the shared password on a drop you own. Requires an sp_ API key and active paid Pro/Team; unavailable billing returns an error, not a public drop. Visitors unlock in their browser. Never put the password in a URL.

• –Code scanremote-only server, no package to scann/a
• Live reliabilityremote reachable in 693ms20/20
• Tool poisoning11 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 7 write-action tools with no auth3/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityverified namespace with website, no repo4/10

ship.page: common questions

Is ship.page MCP server safe?

With care: it is graded C, so read the findings first (60/100). Read the ship.page safety report

How do I install ship.page?

It runs remotely at ship.page. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.

Does ship.page need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is ship.page maintained?

The latest release is v1.0.0.

Is ship.page up?

100% of our last 19 checks got an answer. We check remote servers about four times a day.

What can I use instead of ship.page?

Servers from other publishers that do the same job: ShipStatic MCP server, BorealHost MCP server and MCP Server. Compare all ship.page alternatives.