ShipStatic
by shipstatic.com · remote · no sign-in to list tools · v2.7.4 · published by com.shipstatic
Deploy static websites, landing pages, and prototypes instantly. Free, no account needed.
15 tools: 4 can delete or cancel things, 2 change things and 9 only read.
Scanned Oct 21, 2026
- Deletes or cancels4Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things2Claude Code: ask: see these tools
- Only reads9Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http shipstatic https://mcp.shipstatic.comTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
15 tools
Deletes or cancels 4Claude Code: deny
deployments_deletePermanently deletes a deployment and its files.No findings
Why it is in this group
- The name "deployments_delete" says "delete": a word for removing or ending something.
- The description says "Permanently deletes".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Permanently deletes a deployment and its files.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- title: Delete Deployment
deployments_setUpdate deployment labels.No findings
Why it is in this group
- The name "deployments_set" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Update deployment labels. Replaces all existing labels.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: false
- title: Update Deployment Labels
domains_deletePermanently deletes a domain.No findings
Why it is in this group
- The name "domains_delete" says "delete": a word for removing or ending something.
- The description says "Permanently deletes".
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Permanently deletes a domain.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
- openWorldHint: true
- title: Delete Domain
domains_setCreate or update a domain: a ShipStatic domain (e.g.No findings
Why it is in this group
- The name "domains_set" says "set": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it Create or update a domain: a ShipStatic domain (e.g. "yourname.shipstatic.com"), live as soon as a deployment is linked, or a custom domain (e.g. "www.example.com"), which needs DNS records first. Can reserve a name (omit deployment), link it to a deployment, switch deployments, or update labels. For a custom domain, domains_records then returns the DNS records to configure.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: true
- openWorldHint: true
- title: Set Domain
Changes things 2Claude Code: ask
deployments_uploadDeploy a static site to a live URL: free, no account or API key required.No findings
Why it is in this group
- The name "deployments_upload" says "upload": a word for a change.
Description, as the server wrote it Deploy a static site to a live URL: free, no account or API key required. **File content is plain text by default.** Pass HTML/CSS/JS/JSON/SVG/etc. directly in each file's `content` as a regular string. Only set `encoding: "base64"` per-file for binary content (images, fonts) — do not base64-encode text. Returns the live URL. Without a connected account, the response also includes a one-time claim URL, and the site expires in 3 days unless claimed. Pass `password` to make the site private.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
- title: Deploy Static Site
domains_verifyTrigger DNS verification for a custom domain.No findings
Why it is in this group
- The description's first verb is "trigger": a word for a change.
Description, as the server wrote it Trigger DNS verification for a custom domain. Call after the user has configured DNS records from domains_records. Custom domains only, and refused once the domain is verified: read domains_get instead. Verification is asynchronous: read the domain again with domains_get to learn the verdict, since its `status` has not moved yet when this returns. A verified domain serves nothing until a deployment is linked with domains_set.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
- title: Verify Domain DNS
Only reads 9Claude Code: allow
deployments_getGet deployment details including URL, status, file count, size, labels, and password protection state.No findings
Why it is in this group
- The name "deployments_get" says "get": a word for reading.
Description, as the server wrote it Get deployment details including URL, status, file count, size, labels, and password protection state.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Get Deployment
deployments_listList all deployments with their URLs, status, labels, and password protection state.No findings
Why it is in this group
- The name "deployments_list" says "list": a word for reading.
Description, as the server wrote it List all deployments with their URLs, status, labels, and password protection state. The response's `cursor` is null on the last page; pass it back as `cursor` to fetch the next.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: List Deployments
domains_dnsReturns the DNS provider recorded for the domain, if known (e.g.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Returns the DNS provider recorded for the domain, if known (e.g. Cloudflare, Namecheap): where its DNS records are configured. Custom domains only, and only while the domain is unverified; once its DNS is right there is nothing left to locate.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Get DNS Provider
domains_getGet domain details including URL, linked deployment, labels, and `status`: the one word saying what the domain needs from its owner (`unverified`, `unlinked`, `live`, `paused`).No findings
Why it is in this group
- The name "domains_get" says "get": a word for reading.
Description, as the server wrote it Get domain details including URL, linked deployment, labels, and `status`: the one word saying what the domain needs from its owner (`unverified`, `unlinked`, `live`, `paused`).
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Get Domain
domains_listList all domains with their URLs, linked deployment, and `status`.No findings
Why it is in this group
- The name "domains_list" says "list": a word for reading.
Description, as the server wrote it List all domains with their URLs, linked deployment, and `status`. The response's `cursor` is null on the last page; pass it back as `cursor` to fetch the next.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: List Domains
domains_recordsReturns the DNS records to configure at the domain's DNS provider.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Returns the DNS records to configure at the domain's DNS provider. Call after domains_set. Custom domains only: a ShipStatic domain has no records to configure.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Get DNS Records
domains_validateCheck if a domain name is valid and available before creating it.No findings
Why it is in this group
- The name "domains_validate" says "validate": a word for reading.
Description, as the server wrote it Check if a domain name is valid and available before creating it. Returns the normalized form and availability.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Check Domain Availability
whoamiReturns your email and name, and the account's plan, usage and caps.No findings
Why it is in this group
- The name "whoami" says "whoami": a word for reading.
Description, as the server wrote it Returns your email and name, and the account's plan, usage and caps.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- title: Show Account
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 2.7.4. Values in angle brackets are yours to fill in.
claude mcp add --transport http shipstatic https://mcp.shipstatic.comRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__shipstatic__deployments_list",
"mcp__shipstatic__deployments_get",
"mcp__shipstatic__domains_list",
"mcp__shipstatic__domains_get",
"mcp__shipstatic__domains_records",
"mcp__shipstatic__domains_dns",
"mcp__shipstatic__domains_share",
"mcp__shipstatic__domains_validate",
"mcp__shipstatic__whoami"
],
"ask": [
"mcp__shipstatic__deployments_upload",
"mcp__shipstatic__domains_verify"
],
"deny": [
"mcp__shipstatic__deployments_set",
"mcp__shipstatic__deployments_delete",
"mcp__shipstatic__domains_set",
"mcp__shipstatic__domains_delete"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as shipstatic. Review it before you use it.