protogrid

Search / io.github.airowe/shipaso

ShipASO

R0· no sign-in

Audit any App Store or Google Play listing: measured ranks, keyword gaps, draft copy. Read-only.

v0.1.0 · active · repository · website · descriptor JSON · versions

An agent can connect right now, no human step.Remote endpoint, no authentication, reachable on the last probe.
Quality85good
Trust94of 100
Uptime, 30 days97%
Latency p50378 ms

Connect

8 clients · secrets stay placeholders
{
  "mcpServers": {
    "shipaso": {
      "type": "http",
      "url": "https://api.shipaso.com/mcp",
      "headers": {
        "Authorization": "Bearer ${SHIPASO_TOKEN}"
      }
    }
  }
}
claude mcp add --transport http shipaso https://api.shipaso.com/mcp --header "Authorization: Bearer ${SHIPASO_TOKEN}"
[mcp_servers.shipaso]
url = "https://api.shipaso.com/mcp"
bearer_token_env_var = "SHIPASO_TOKEN"
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "shipaso": {
      "type": "remote",
      "url": "https://api.shipaso.com/mcp",
      "enabled": true,
      "headers": {
        "Authorization": "Bearer {env:SHIPASO_TOKEN}"
      }
    }
  }
}
{
  "mcpServers": {
    "shipaso": {
      "type": "http",
      "url": "https://api.shipaso.com/mcp",
      "headers": {
        "Authorization": "Bearer ${SHIPASO_TOKEN}"
      }
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=shipaso&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnNoaXBhc28uY29tL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke1NISVBBU09fVE9LRU59In19"
}
{
  "servers": {
    "shipaso": {
      "type": "http",
      "url": "https://api.shipaso.com/mcp",
      "headers": {
        "Authorization": "Bearer ${SHIPASO_TOKEN}"
      }
    }
  }
}
{
  "mcpServers": {
    "shipaso": {
      "httpUrl": "https://api.shipaso.com/mcp",
      "headers": {
        "Authorization": "Bearer ${SHIPASO_TOKEN}"
      }
    }
  }
}
extensions:
  "shipaso":
    enabled: true
    name: "shipaso"
    type: streamable_http
    uri: "https://api.shipaso.com/mcp"
    headers:
      "Authorization": "Bearer ${SHIPASO_TOKEN}"
    timeout: 300

Placeholders to fill from your own secret store: ${SHIPASO_TOKEN}. The registry never accepts secret values.

Quality 85 / 100good

protocol75 · weight 25
  • warn
    protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
  • n/a
    protocol.statelessonly applies to 2026-07-28 servers
  • pass
    protocol.transportstreamable HTTP
  • n/a
    protocol.list_ttlonly applies to 2026-07-28 servers
authorizationn/a · weight 15
  • n/a
    auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
  • n/a
    auth.secret_in_urlno templated URL
tool hygiene86 · weight 30
  • pass
    tools.descriptionsevery tool has a description
  • pass
    tools.description_lengthdescriptions are concise
  • pass
    tools.schemasevery tool has an object input schema
  • pass
    tools.annotations12 of 12 tools declare readOnlyHint or destructiveHint
  • fail
    tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: audit_play_app (destructiveHint, idempotentHint); competitor_watch (destructiveHint, idempotentHint); proof (destructiveHint, idempotentHint); …
  • pass
    tools.token_costabout 2,180 tokens to load every tool
  • pass
    tools.api_dumptools are not a one-to-one API dump
stability100 · weight 15
  • pass
    stability.changesno tool changes in 30 days
  • pass
    stability.rug_pullno tool changed its meaning under the same name
dependenciesn/a · weight 15
  • n/a
    deps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI package

12 tools, about 2,180 tokens to load them all · tool set 6357d074b71c · checked 2026-10-20 00:54 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance90
liveness99
freshness85
hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-97% ~updated-44d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Endpoints

remoteauthreachableuptime 30dp50protocollast ok
https://api.shipaso.com/mcp streamable-httpnoneyes97%378 ms2025-11-252026-10-20

Tools (12)

audit_appread-onlyRead-only listing audit: prioritized findings (severity + impact) plus a summary, derived from the live public listing. Read-only — never edits or pushes.
audit_play_appread-onlyRead-only GOOGLE PLAY listing audit: screenshot grade, the 30/80/4000 title/short/long-description budget, target-term coverage in the long description (Play's keyword surface), a keyword-stuffing guard, prioritized findings + summary, and capability locks for surfaces a public read can't see. Takes a Play package id (com.foo.bar) or a play.google.com URL — NOT a free-text name (Play has no public name search). Play has NO keyword field. Reads public Play data only; never edits or pushes.
audit_play_app_ownerread-onlyRead-only audit of YOUR OWN Google Play app via the official Play Developer API — full fidelity including the short description (which the public page can't show), with NO capability locks. Requires a configured Play service account (GOOGLE_PLAY_SERVICE_ACCOUNT). Reads only — it opens and DISCARDS a Play 'edit' and NEVER commits, so it can't publish. Owner-only; for a competitor use audit_play_app.
competitor_watchread-onlyRead-only competitor diff: resolves the named competitors and reports their current listings, what changed vs. the last seen state, and a digest line. Read-only metadata comparison; no ranking-algorithm data is invented.
keyword_gapsread-onlyRead-only keyword opportunities: terms tracked competitors VISIBLY use that this app doesn't target and doesn't rank top-50 for, sorted by winnability. Inferred from competitor name/subtitle only — never their ranking algorithm.
localization_gapsread-onlyRead-only localization expansion recommendations (ROI-sorted locales to add) for one of YOUR connected apps, from its most recent App Store Connect run. A static, bundled heuristic over the locales already read — no live install data is fabricated. Empty until you've run an ASC-connected pass.
preview_appread-onlyRead-only ASO snapshot of any App Store app (grade, lead rank, top-10 count, sample). No account or store push — the optimized copy + push commands stay behind the human-approved loop. Works without a key.
proofread-onlyRead-only, anonymized aggregate proof across all tracked apps (real rank-win numbers — no app names, no user data). This is the 'prove the rank moved' surface that closes the prepare → approve → push → prove loop. Works without a key.
propose_copyread-onlyReturns a DRAFT optimized listing (name/subtitle/keywords/description) with validation for any app. THIS IS A DRAFT ONLY: it does NOT persist a proposal and does NOT push to the App Store. Publishing stays a human-approved action in ShipASO — an agent can draft and read; only a human approves and pushes.
rank_checkread-onlyRead-only organic rank check across the app's target keywords, plus winnability-ranked opportunities computed from those measured positions. Positions are live-measured, never fabricated.
screenshot_coverageread-onlyRead-only screenshot scoring for the app's live store gallery (count, score, grade, levers to improve). Read-only — never uploads or pushes assets.
war_roomread-onlyRead-only head-to-head rank war room for one of YOUR connected apps: your tracked-keyword rank history vs. live competitor positions on those same keywords. Reads stored data + live competitor ranks; writes nothing.

Schemas: list_tools.

Similar MCP servers

Official server.json
{
  "name": "io.github.airowe/shipaso",
  "title": "ShipASO",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.shipaso.com/mcp",
      "type": "streamable-http",
      "headers": [
        {
          "name": "Authorization",
          "isSecret": true,
          "description": "Optional. `Bearer <shipaso_ key>` unlocks the keyed tools; omit it for the public tier (preview_app, proof). Keys are minted free at app.shipaso.com → Settings → Agent access."
        }
      ]
    }
  ],
  "version": "0.1.0",
  "repository": {
    "url": "https://github.com/airowe/store-ops",
    "source": "github"
  },
  "websiteUrl": "https://shipaso.com",
  "description": "Audit any App Store or Google Play listing: measured ranks, keyword gaps, draft copy. Read-only."
}