ShipReady Metrics

com.shipreadymetricsPublished by shipreadymetrics.comOfficial publisherv1.0.0Updated Oct 24, 2026

Read-only scan of a public GitHub repo for leaked secrets, with a 0-100 grade.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server that scans a public GitHub repository for leaked secrets and returns a 0-100 grade, plus pointers to public compliance guides.

What you can do
Scan a public GitHub repository through ShipReady's live scan pipeline and get a point-in-time score, counts and up to three findings, focused on leaked secrets and a 0-100 grade. Look up relevant public ShipReady compliance guides and get sourced excerpts. Results are read-only and limited to public repositories, with no private repos or tenant data.
When to use it
Useful when you want a quick, read-only check of a public repository's secret-leak posture or a pointer to public compliance guidance, without setting up local tooling.
Requirements
A remote streamable HTTP endpoint at shipreadymetrics.com; no authentication, environment variables or headers are declared. Network access is needed.
Before you install
Scores are point-in-time and are not a certification or release approval, and guide excerpts are not legal advice. Only public repositories are scanned; do not expect private or tenant data to be covered.

Installation

In SourceWeft

  1. Open ShipReady Metrics in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/com.shipreadymetrics%2Fpublic-scan/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "shipready-metrics": {
      "type": "http",
      "url": "https://shipreadymetrics.com/mcp"
    }
  }
}

Tools

2

scan_public_repo

Scan a public GitHub repo

Scan a public GitHub repository using ShipReady's live /scan pipeline. Returns a point-in-time score, counts and up to three findings; no private repos or tenant data. A score is not a certification or release approval.

Parametersurlrequired

ask_compliance

Find ShipReady compliance guides

Find relevant public ShipReady compliance guides. Returns sourced excerpts, not legal advice or an assertion that ShipReady supports a framework.

Parametersquestionrequired

Version history

1
  1. v1.0.0LatestOct 12, 2026

Score

83% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • LicenseNot applicable

    A hosted service is used under its provider's terms, so no license is expected here. This check is left out of the percentage.