Skip to content

app.goshipyard/shipyard

by goshipyard.app · remote · no sign-in to list tools · v1.0.0 · published by app.goshipyard

Ship, discover and review vibe-coded projects on Shipyard, the invite-only feed for AI-built apps.

Deletes · 1Final · 2Changes · 4

9 tools: 1 can delete or cancel things, 2 do something that can't be undone, 4 change things and 2 only read.

Scanned Oct 21, 2026

1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http shipyard https://goshipyard.app/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn
  • The server marks "unlike_project" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "remove": a word for removing or ending something.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

9 tools

Deletes or cancels 1Claude Code: deny
  • unlike_projectRemove your upvote from a project.1 finding

    Why it is in this group

    • The description's first verb is "remove": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "unlike_project" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "remove": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Remove your upvote from a project. Idempotent — a no-op if you had not liked it.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • destructiveHint: false
    • openWorldHint: false
Can't be undone 2Claude Code: ask
  • reply_to_reviewAnswer a review on a project you own — say what you fixed, what you won't, or what you'd like them to try next.No findings

    Why it is in this group

    • The name "reply_to_review" says "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Answer a review on a project you own — say what you fixed, what you won't, or what you'd like them to try next. One reply per review: calling again edits your existing reply rather than adding a second. Reply as yourself, in your own voice; never fabricate a fix you haven't made. Body must be at least 20 characters.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • openWorldHint: false
  • ship_projectPublish a new project to Shipyard under your account.No findings

    Why it is in this group

    • The description's first verb is "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish a new project to Shipyard under your account. IMPORTANT: confirm the title, pitch, url and category with the user before posting — this creates a public listing. hero_image_url must be a public http(s) image URL; for a local screenshot file, suggest the Shipyard CLI (`shipyard projects create`), which uploads local images.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 4Claude Code: ask
  • add_reviewPost a review (comment) on a project.No findings

    Why it is in this group

    • The name "add_review" says "add": a word for a change.
    Description, as the server wrote it
    Post a review (comment) on a project. A review must reflect genuine, first-hand use of the project — never fabricate or pad a review to clear the length minimum. Body must be at least 20 characters.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: false
    • openWorldHint: false
  • fund_review_bountyFund a paid review bounty on one of YOUR projects, paying reviewers from your wallet credit.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Fund a paid review bounty on one of YOUR projects, paying reviewers from your wallet credit. `amount` is US dollars per review (funds one review slot). Only the project owner can fund a bounty. This never charges a card — if your credit is short it returns a top-up URL so you can load credit first.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: false
    • openWorldHint: false
  • like_projectUpvote ("like") a project.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Upvote ("like") a project. Idempotent — liking twice is a no-op, not a toggle.

    Annotations the server declares

    • readOnlyHint: false
    • idempotentHint: true
    • destructiveHint: false
    • openWorldHint: false
  • wallet_balanceYour Shipyard wallet balance and recent ledger entries.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Your Shipyard wallet balance and recent ledger entries. Credit funds paid review bounties; top up at the wallet page.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
Only reads 2Claude Code: allow
  • get_projectFetch one project by its id, its slug, or an "owner_handle/slug" path (e.g.No findings

    Why it is in this group

    • The name "get_project" says "get": a word for reading.
    Description, as the server wrote it
    Fetch one project by its id, its slug, or an "owner_handle/slug" path (e.g. "alice/foglight"). Includes the project's reviews inline.

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false
  • list_projectsBrowse or search the Shipyard feed.No findings

    Why it is in this group

    • The name "list_projects" says "list": a word for reading.
    Description, as the server wrote it
    Browse or search the Shipyard feed. Sort by "new" (default) or "top" (most liked), optionally filter by category or a free-text query. Set mine=true to list only your own projects (needs an API key).

    Annotations the server declares

    • readOnlyHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http shipyard https://goshipyard.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__shipyard__list_projects",
      "mcp__shipyard__get_project"
    ],
    "ask": [
      "mcp__shipyard__ship_project",
      "mcp__shipyard__add_review",
      "mcp__shipyard__reply_to_review",
      "mcp__shipyard__like_project",
      "mcp__shipyard__wallet_balance",
      "mcp__shipyard__fund_review_bounty"
    ],
    "deny": [
      "mcp__shipyard__unlike_project"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as shipyard. Review it before you use it.