Search / io.github.airowe/shipaso
ShipASO
R0· no sign-inAudit any App Store or Google Play listing: measured ranks, keyword gaps, draft copy. Read-only.
v0.1.0 · active · repository · website · descriptor JSON · versions
Search / io.github.airowe/shipaso
R0· no sign-inAudit any App Store or Google Play listing: measured ranks, keyword gaps, draft copy. Read-only.
v0.1.0 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"shipaso": {
"type": "http",
"url": "https://api.shipaso.com/mcp",
"headers": {
"Authorization": "Bearer ${SHIPASO_TOKEN}"
}
}
}
}claude mcp add --transport http shipaso https://api.shipaso.com/mcp --header "Authorization: Bearer ${SHIPASO_TOKEN}"[mcp_servers.shipaso]
url = "https://api.shipaso.com/mcp"
bearer_token_env_var = "SHIPASO_TOKEN"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"shipaso": {
"type": "remote",
"url": "https://api.shipaso.com/mcp",
"enabled": true,
"headers": {
"Authorization": "Bearer {env:SHIPASO_TOKEN}"
}
}
}
}{
"mcpServers": {
"shipaso": {
"type": "http",
"url": "https://api.shipaso.com/mcp",
"headers": {
"Authorization": "Bearer ${SHIPASO_TOKEN}"
}
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=shipaso&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLnNoaXBhc28uY29tL21jcCIsImhlYWRlcnMiOnsiQXV0aG9yaXphdGlvbiI6IkJlYXJlciAke1NISVBBU09fVE9LRU59In19"
}{
"servers": {
"shipaso": {
"type": "http",
"url": "https://api.shipaso.com/mcp",
"headers": {
"Authorization": "Bearer ${SHIPASO_TOKEN}"
}
}
}
}{
"mcpServers": {
"shipaso": {
"httpUrl": "https://api.shipaso.com/mcp",
"headers": {
"Authorization": "Bearer ${SHIPASO_TOKEN}"
}
}
}
}extensions:
"shipaso":
enabled: true
name: "shipaso"
type: streamable_http
uri: "https://api.shipaso.com/mcp"
headers:
"Authorization": "Bearer ${SHIPASO_TOKEN}"
timeout: 300
Placeholders to fill from your own secret store: ${SHIPASO_TOKEN}. The registry never accepts secret values.
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations12 of 12 tools declare readOnlyHint or destructiveHinttools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: audit_play_app (destructiveHint, idempotentHint); competitor_watch (destructiveHint, idempotentHint); proof (destructiveHint, idempotentHint); …tools.token_costabout 2,180 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website +reachable +uptime-97% ~updated-44d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://api.shipaso.com/mcp streamable-http | none | yes | 97% | 378 ms | 2025-11-25 | 2026-10-20 |
audit_appread-only | Read-only listing audit: prioritized findings (severity + impact) plus a summary, derived from the live public listing. Read-only — never edits or pushes. |
audit_play_appread-only | Read-only GOOGLE PLAY listing audit: screenshot grade, the 30/80/4000 title/short/long-description budget, target-term coverage in the long description (Play's keyword surface), a keyword-stuffing guard, prioritized findings + summary, and capability locks for surfaces a public read can't see. Takes a Play package id (com.foo.bar) or a play.google.com URL — NOT a free-text name (Play has no public name search). Play has NO keyword field. Reads public Play data only; never edits or pushes. |
audit_play_app_ownerread-only | Read-only audit of YOUR OWN Google Play app via the official Play Developer API — full fidelity including the short description (which the public page can't show), with NO capability locks. Requires a configured Play service account (GOOGLE_PLAY_SERVICE_ACCOUNT). Reads only — it opens and DISCARDS a Play 'edit' and NEVER commits, so it can't publish. Owner-only; for a competitor use audit_play_app. |
competitor_watchread-only | Read-only competitor diff: resolves the named competitors and reports their current listings, what changed vs. the last seen state, and a digest line. Read-only metadata comparison; no ranking-algorithm data is invented. |
keyword_gapsread-only | Read-only keyword opportunities: terms tracked competitors VISIBLY use that this app doesn't target and doesn't rank top-50 for, sorted by winnability. Inferred from competitor name/subtitle only — never their ranking algorithm. |
localization_gapsread-only | Read-only localization expansion recommendations (ROI-sorted locales to add) for one of YOUR connected apps, from its most recent App Store Connect run. A static, bundled heuristic over the locales already read — no live install data is fabricated. Empty until you've run an ASC-connected pass. |
preview_appread-only | Read-only ASO snapshot of any App Store app (grade, lead rank, top-10 count, sample). No account or store push — the optimized copy + push commands stay behind the human-approved loop. Works without a key. |
proofread-only | Read-only, anonymized aggregate proof across all tracked apps (real rank-win numbers — no app names, no user data). This is the 'prove the rank moved' surface that closes the prepare → approve → push → prove loop. Works without a key. |
propose_copyread-only | Returns a DRAFT optimized listing (name/subtitle/keywords/description) with validation for any app. THIS IS A DRAFT ONLY: it does NOT persist a proposal and does NOT push to the App Store. Publishing stays a human-approved action in ShipASO — an agent can draft and read; only a human approves and pushes. |
rank_checkread-only | Read-only organic rank check across the app's target keywords, plus winnability-ranked opportunities computed from those measured positions. Positions are live-measured, never fabricated. |
screenshot_coverageread-only | Read-only screenshot scoring for the app's live store gallery (count, score, grade, levers to improve). Read-only — never uploads or pushes assets. |
war_roomread-only | Read-only head-to-head rank war room for one of YOUR connected apps: your tracked-keyword rank history vs. live competitor positions on those same keywords. Reads stored data + live competitor ranks; writes nothing. |
Schemas: list_tools.
{
"name": "io.github.airowe/shipaso",
"title": "ShipASO",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://api.shipaso.com/mcp",
"type": "streamable-http",
"headers": [
{
"name": "Authorization",
"isSecret": true,
"description": "Optional. `Bearer <shipaso_ key>` unlocks the keyed tools; omit it for the public tier (preview_app, proof). Keys are minted free at app.shipaso.com → Settings → Agent access."
}
]
}
],
"version": "0.1.0",
"repository": {
"url": "https://github.com/airowe/store-ops",
"source": "github"
},
"websiteUrl": "https://shipaso.com",
"description": "Audit any App Store or Google Play listing: measured ranks, keyword gaps, draft copy. Read-only."
}