Is Chitchats Mcp safe to install?

SaferSkills independently audited Chitchats Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md5.7 KB · Markdown

Chit Chats MCP Server

A Model Context Protocol (MCP) server for the Chit Chats shipping API. Query shipments, track packages, manage batches, and access shipping rates programmatically.

Features

Shipment Management - List, search, create, and manage shipments
Cost Analysis - Get detailed cost breakdowns including postage, tariffs, broker fees
HS Tariff Codes - Access line item details with HS codes, SKUs, manufacturer info
Shipping Rates - Compare all available carrier options with delivery times
Label Downloads - Get PNG, PDF, and ZPL label URLs
Batch Operations - Organize shipments into batches for drop-off
Order Tracking - Track shipments by order ID (Shopify, Etsy, etc.)

Installation

git clone https://github.com/yourusername/chitchats-mcp.git
cd chitchats-mcp
npm install
npm run build

Configuration

Get your API credentials from Chit Chats Settings > Developer > API Access Tokens

Set your credentials using one of these methods:

Option A: Environment variables in MCP config (recommended)

Pass credentials via -e flags (CLI) or env block (JSON) - see Usage section below.

Option B: `.env` file

   cp .env.example .env

Add your credentials to .env:

   CHITCHATS_CLIENT_ID=your_client_id
   CHITCHATS_ACCESS_TOKEN=your_access_token

Usage

Claude Code (CLI)

Add the MCP server using the Claude Code CLI (replace the path and credentials):

claude mcp add chitchats -s user \
  -e CHITCHATS_CLIENT_ID=your_client_id \
  -e CHITCHATS_ACCESS_TOKEN=your_access_token \
  -- node <ABSOLUTE_PATH_TO>/chitchats-mcp/dist/index.js

Example with real path:

claude mcp add chitchats -s user \
  -e CHITCHATS_CLIENT_ID=abc123 \
  -e CHITCHATS_ACCESS_TOKEN=sk_live_xxx \
  -- node /Users/jane/projects/chitchats-mcp/dist/index.js

Or manually add to your settings file (~/.claude/settings.json):

{
  "mcpServers": {
    "chitchats": {
      "command": "node",
      "args": ["<ABSOLUTE_PATH_TO>/chitchats-mcp/dist/index.js"],
      "env": {
        "CHITCHATS_CLIENT_ID": "your_client_id",
        "CHITCHATS_ACCESS_TOKEN": "your_access_token"
      }
    }
  }
}

Scopes:

-s user - Available in all projects (recommended)
-s project - Only in current project (adds to .claude/settings.json)

Verify the server is connected:

claude mcp list

Claude Desktop

Add to your Claude Desktop config file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "chitchats": {
      "command": "node",
      "args": ["<ABSOLUTE_PATH_TO>/chitchats-mcp/dist/index.js"],
      "env": {
        "CHITCHATS_CLIENT_ID": "your_client_id",
        "CHITCHATS_ACCESS_TOKEN": "your_access_token"
      }
    }
  }
}

Note: Replace <ABSOLUTE_PATH_TO> with the actual path where you cloned the repo (e.g., /Users/jane/projects or C:\Users\Jane\projects).

Restart Claude Desktop after adding the configuration.

Available Tools

Tool	Description
`chitchats_list_shipments`	List/search shipments with filters
`chitchats_get_shipment`	Get full shipment details
`chitchats_get_rates`	Get available shipping rates
`chitchats_get_labels`	Get label download URLs
`chitchats_get_line_items`	Get HS codes, SKUs, manufacturer info
`chitchats_create_shipment`	Create a new shipment
`chitchats_delete_shipment`	Delete an unpaid shipment
`chitchats_buy_postage`	Purchase postage
`chitchats_refund_shipment`	Request a refund
`chitchats_refresh_rates`	Refresh rate quotes
`chitchats_count_shipments`	Count shipments by status
`chitchats_list_batches`	List batches
`chitchats_create_batch`	Create a batch
`chitchats_get_batch`	Get batch details
`chitchats_delete_batch`	Delete an empty batch
`chitchats_add_to_batch`	Add shipments to a batch
`chitchats_remove_from_batch`	Remove shipments from batches
`chitchats_count_batches`	Count batches
`chitchats_list_returns`	List return shipments
`chitchats_track_shipment`	Get tracking information

Example Queries

"What did I pay for shipping on order #1234?"
"Show me the HS codes for my recent shipments"
"What shipping options are available to California?"
"Get the label for shipment ABC123"
"List all delivered shipments from last month"

Data Available

Shipment Details

Order info (order_id, store platform)
Recipient (name, address, phone, email)
Package (dimensions, weight, declared value)
Costs (postage, tariff, broker fee, taxes)
Labels (PNG, PDF, ZPL URLs)
Tracking (carrier, tracking number, status)

Line Items

HS tariff codes
SKU codes
Country of origin
Manufacturer details

Rates

All carrier options
Cost breakdowns
Delivery time estimates

API Reference

This MCP server wraps the Chit Chats API v1.

Rate Limits: 2,000 requests per 5-minute window

Sandbox: Use https://staging.chitchats.com for testing (test card: 4242 4242 4242 4242)

Development

npm install          # Install dependencies
npm run build        # Compile TypeScript
npm run dev          # Build and run

See CONTRIBUTING.md for development guidelines.

License

MIT License - see LICENSE for details.

Chitchats Mcp— agent skill

Is Chitchats Mcp safe to install?

Chit Chats MCP Server

Features

Installation

Configuration

Usage

Claude Code (CLI)

Claude Desktop

Available Tools

Example Queries

Data Available

Shipment Details

Line Items

Rates

API Reference

Development

License

Links

Audit the pieces. Scan the whole. Decide.