easyship-22d18f — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited easyship-22d18f (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<!-- mcp-name: com.easyship/mcp -->
Connect all your AI tools to Easyship’s global shipping platform and manage your entire shipping operation through natural language.
The plugin gives your agent access to shipping rates, shipment creation, label purchasing, package tracking, pickup scheduling, address validation, billing, and analytics. For more info, see the API docs.
Access 550+ courier services across 200+ countries — including UPS, FedEx, DHL Express, USPS, Canada Post, Australia Post, and Royal Mail — directly from Cursor, Claude, Gemini, Codex, and more.
/plugin marketplace add easyship/easyship-mcp-plugin
/plugin install easyship@easyship-mcp-plugin gemini extensions install https://github.com/easyship/easyship-mcp-pluginAdd to ~/.codex/config.toml:
[mcp_servers.easyship]
url = "https://mcp.easyship.com/mcp"
http_headers = { "Authorization" = "Bearer YOUR_TOKEN" }CMD+SHIFT+P) and run Chat: Install Plugin From Source.Then paste:
https://github.com/easyship/easyship-mcp-pluginIf your platform doesn't support plugins, you can install the MCP server directly.
Get your API token from Easyship Dashboard → Connect → API.
Tip: Copy.env.exampleto.envand add your API token. Some local setups will read from this file automatically.
⚠️ Security Note: Never share your API token in the chat window. If you accidentally paste it in a prompt, revoke and rotate your API key immediately in the Easyship Dashboard.
Note: There is no separate test environment for MCP actions. Any action that consumes credits (such as generating labels) will incur real charges. We recommend using a test API token with limited scopes for your first run.
Each client below offers two connection methods:
| Method | How it works | Requires Python? |
|---|---|---|
| Remote | Connects to mcp.easyship.com via Streamable HTTP | No |
| Local | Runs the easyship-mcp package on your machine via uvx | Yes |
Quit Claude Desktop before editing config, then restart after saving.
| OS | Config file |
|---|---|
| macOS | ~/Library/Application Support/Claude/claude_desktop_config.json |
| Windows | %APPDATA%\Claude\claude_desktop_config.json |
Merge into the top-level mcpServers object (create it if missing).
Remote:
{
"mcpServers": {
"easyship": {
"url": "https://mcp.easyship.com/mcp",
"headers": {
"Authorization": "Bearer YOUR_TOKEN"
}
}
}
}Local (uvx):
{
"mcpServers": {
"easyship": {
"command": "uvx",
"args": ["easyship-mcp"],
"env": {
"EASYSHIP_API_ACCESS_TOKEN": "YOUR_TOKEN"
}
}
}
}Requires uv installed on your machine.
Remote:
claude mcp add --transport http easyship \
https://mcp.easyship.com/mcp \
--header 'Authorization: Bearer YOUR_TOKEN'Local (uvx):
export EASYSHIP_API_ACCESS_TOKEN="YOUR_TOKEN"
claude mcp add easyship -- uvx easyship-mcpAdd to .cursor/mcp.json in your project (or ~/.cursor/mcp.json for global):
Remote:
{
"mcpServers": {
"easyship": {
"url": "https://mcp.easyship.com/mcp",
"headers": {
"Authorization": "Bearer YOUR_TOKEN"
}
}
}
}Local (uvx):
{
"mcpServers": {
"easyship": {
"command": "uvx",
"args": ["easyship-mcp"],
"env": {
"EASYSHIP_API_ACCESS_TOKEN": "YOUR_TOKEN"
}
}
}
}Add to .vscode/mcp.json in your project:
Remote:
{
"servers": {
"easyship": {
"type": "http",
"url": "https://mcp.easyship.com/mcp",
"headers": {
"Authorization": "Bearer YOUR_TOKEN"
}
}
}
}Local (uvx):
{
"servers": {
"easyship": {
"type": "stdio",
"command": "uvx",
"args": ["easyship-mcp"],
"env": {
"EASYSHIP_API_ACCESS_TOKEN": "YOUR_TOKEN"
}
}
}
}gemini mcp add --transport http easyship \
https://mcp.easyship.com/mcp \
--header 'Authorization: Bearer YOUR_TOKEN'Add to ~/.codex/config.toml:
[mcp_servers.easyship]
url = "https://mcp.easyship.com/mcp"
http_headers = { "Authorization" = "Bearer YOUR_TOKEN" }For any MCP client that supports Streamable HTTP, point it at:
URL: https://mcp.easyship.com/mcp
Header: Authorization: Bearer YOUR_TOKENFor stdio-based clients, run uvx easyship-mcp with EASYSHIP_API_ACCESS_TOKEN set in the environment.
Get shipping rates:
"What are the shipping options for a 1.5kg package (30×20×15 cm) from Hong Kong to New York?"
Track a shipment:
"Track shipment ESSG10006001"
Schedule a pickup:
"Schedule a pickup for shipment ESSG10006001 on the earliest available date"
Validate an address:
"Validate this address: 215 Clayton St, San Francisco, CA 94117"
Analyze shipping data:
"What are my top shipping destinations this quarter?"
"Which courier do I use the most?"
The Easyship MCP Connector acts as a stateless proxy — it stores no user data, credentials, or shipment information on its own servers. All data processed through this connector is subject to Easyship's data handling practices.
What this connector does with your data:
This server targets the Easyship API v2024-09.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.