
Product
PHP and Composer Support Is Now in Beta
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.
@shippp/mcp
Advanced tools
Shippp MCP server — pull deterministic, production-perfect Chakra UI code from your Shippp design files, straight into your IDE agent.
Pull production-perfect Chakra UI code from your Shippp design files straight into your IDE agent (Claude Code, Cursor, …).
{
"mcpServers": {
"shippp": {
"command": "npx",
"args": ["-y", "@shippp/mcp"],
"env": {
"SHIPPP_API_KEY": "sk_...",
"SHIPPP_API_URL": "https://app.shippp.ai"
}
}
}
}
SHIPPP_API_URL is optional (defaults to the Shippp production URL).
| Tool | Returns |
|---|---|
shippp_list_units | The file's screens + components (id + name). Call first to discover ids. |
shippp_get_component | One component's Chakra .tsx. |
shippp_get_tokens | The design tokens as a Chakra theme. |
shippp_get_design_system | The whole design system as a package. |
shippp_get_project | The whole file as a runnable Next.js project. |
shippp_diff | Your current code vs a fresh generation. |
Read-only. The server never modifies your design.
FAQs
Shippp MCP server — pull deterministic, production-perfect Chakra UI code from your Shippp design files, straight into your IDE agent.
We found that @shippp/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.

Research
/Security News
Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.