MCP Tools
We've converted the most popular open source DevOps tools into MCPs for you to use in Station or anywhere you want.
All MCPs under 1 binary
# Install Ship CLI with one commandcurl -fsSL https://raw.githubusercontent.com/Elvanto/ship/main/install.sh | bash
GitHub Actions workflow linter
actionlint
Static checker for GitHub Actions workflow files
Configuration
{
"mcpServers": {
"ship-actionlint": {
"command": "ship",
"args": [
"mcp",
"--tools",
"actionlint"
]
}
}
}SSL certificate validation
check-ssl-cert
A shell script to check SSL certificate expiration
Configuration
{
"mcpServers": {
"ship-check-ssl-cert": {
"command": "ship",
"args": [
"mcp",
"--tools",
"check-ssl-cert"
]
}
}
}Container registry operations
container-registry
The toolkit to pack, ship, store, and deliver container content
Configuration
{
"mcpServers": {
"ship-container-registry": {
"command": "ship",
"args": [
"mcp",
"--tools",
"container-registry"
]
}
}
}Git repository secret scanner
git-secrets
Prevents you from committing secrets and credentials into git repositories
Configuration
{
"mcpServers": {
"ship-git-secrets": {
"command": "ship",
"args": [
"mcp",
"--tools",
"git-secrets"
]
}
}
}GitHub administration tools
github-admin
GitHub administration and management tools
Configuration
{
"mcpServers": {
"ship-github-admin": {
"command": "ship",
"args": [
"mcp",
"--tools",
"github-admin"
]
}
}
}GitHub Packages security
github-packages
GitHub Packages management
Configuration
{
"mcpServers": {
"ship-github-packages": {
"command": "ship",
"args": [
"mcp",
"--tools",
"github-packages"
]
}
}
}Git history cleaning and secret removal
history-scrub
Removes large or troublesome blobs from Git repo history
Configuration
{
"mcpServers": {
"ship-history-scrub": {
"command": "ship",
"args": [
"mcp",
"--tools",
"history-scrub"
]
}
}
}Software license detection
license-detector
Detects licenses in source code
Configuration
{
"mcpServers": {
"ship-license-detector": {
"command": "ship",
"args": [
"mcp",
"--tools",
"license-detector"
]
}
}
}Fast vulnerability scanner with community templates
nuclei
Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL
Configuration
{
"mcpServers": {
"ship-nuclei": {
"command": "ship",
"args": [
"mcp",
"--tools",
"nuclei"
]
}
}
}OSSF security scorecard
ossf-scorecard
OpenSSF Scorecard - Security health metrics for Open Source
Configuration
{
"mcpServers": {
"ship-ossf-scorecard": {
"command": "ship",
"args": [
"mcp",
"--tools",
"ossf-scorecard"
]
}
}
}Open Source Vulnerability scanning
osv-scanner
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
Configuration
{
"mcpServers": {
"ship-osv-scanner": {
"command": "ship",
"args": [
"mcp",
"--tools",
"osv-scanner"
]
}
}
}Multi-cloud security assessment
prowler
Prowler is the Open Cloud Security platform for AWS, Azure, GCP, Kubernetes, M365 and more
Configuration
{
"mcpServers": {
"ship-prowler": {
"command": "ship",
"args": [
"mcp",
"--tools",
"prowler"
],
"env": {
"AWS_ACCESS_KEY_ID": "your-key",
"AWS_SECRET_ACCESS_KEY": "your-secret"
}
}
}
}Multi-cloud security auditing
scout-suite
Scout Suite is an open source multi-cloud security-auditing tool
Configuration
{
"mcpServers": {
"ship-scout-suite": {
"command": "ship",
"args": [
"mcp",
"--tools",
"scout-suite"
],
"env": {
"AWS_ACCESS_KEY_ID": "your-key",
"AWS_SECRET_ACCESS_KEY": "your-secret"
}
}
}
}Enhanced Trivy for golden images
trivy-golden
Enhanced Trivy for golden images
Configuration
{
"mcpServers": {
"ship-trivy-golden": {
"command": "ship",
"args": [
"mcp",
"--tools",
"trivy-golden"
]
}
}
}Advanced secret scanning with verification
trufflehog
Find, verify, and analyze leaked credentials
Configuration
{
"mcpServers": {
"ship-trufflehog": {
"command": "ship",
"args": [
"mcp",
"--tools",
"trufflehog"
]
}
}
}Infrastructure cost estimation
infracost
Infracost shows cloud cost estimates and FinOps best practices for Terraform
Configuration
{
"mcpServers": {
"ship-infracost": {
"command": "ship",
"args": [
"mcp",
"--tools",
"infracost"
],
"env": {
"INFRACOST_API_KEY": "your-api-key"
}
}
}
}Infrastructure cost estimation
openinfraquote
Fast, open-source tool for estimating infrastructure costs from Terraform plans and state files
Configuration
{
"mcpServers": {
"ship-openinfraquote": {
"command": "ship",
"args": [
"mcp",
"--tools",
"openinfraquote"
]
}
}
}Terraform documentation generator
terraform-docs
A utility to generate documentation from Terraform modules in various output formats
Configuration
{
"mcpServers": {
"ship-terraform-docs": {
"command": "ship",
"args": [
"mcp",
"--tools",
"terraform-docs"
]
}
}
}Infrastructure import and management
terraformer
CLI tool to generate terraform files from existing infrastructure
Configuration
{
"mcpServers": {
"ship-terraformer": {
"command": "ship",
"args": [
"mcp",
"--tools",
"terraformer"
]
}
}
}Terraform state analysis
tfstate-reader
Lookup resource attributes in tfstate
Configuration
{
"mcpServers": {
"ship-tfstate-reader": {
"command": "ship",
"args": [
"mcp",
"--tools",
"tfstate-reader"
]
}
}
}Certificate management
cert-manager
Automatically provision and manage TLS certificates in Kubernetes
Configuration
{
"mcpServers": {
"ship-cert-manager": {
"command": "ship",
"args": [
"mcp",
"--tools",
"cert-manager"
]
}
}
}OPA Gatekeeper policy validation
gatekeeper
Policy Controller for Kubernetes
Configuration
{
"mcpServers": {
"ship-gatekeeper": {
"command": "ship",
"args": [
"mcp",
"--tools",
"gatekeeper"
]
}
}
}Kubernetes resource recommendations
goldilocks
Get your resource requests 'Just Right'
Configuration
{
"mcpServers": {
"ship-goldilocks": {
"command": "ship",
"args": [
"mcp",
"--tools",
"goldilocks"
]
}
}
}Kubernetes network policy management
k8s-network-policy
Kubernetes Network Policy Recipes
Configuration
{
"mcpServers": {
"ship-k8s-network-policy": {
"command": "ship",
"args": [
"mcp",
"--tools",
"k8s-network-policy"
]
}
}
}Kubernetes CIS benchmark
kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
Configuration
{
"mcpServers": {
"ship-kube-bench": {
"command": "ship",
"args": [
"mcp",
"--tools",
"kube-bench"
]
}
}
}Kubernetes penetration testing
kube-hunter
Hunt for security weaknesses in Kubernetes clusters
Configuration
{
"mcpServers": {
"ship-kube-hunter": {
"command": "ship",
"args": [
"mcp",
"--tools",
"kube-hunter"
]
}
}
}Multi-tenant Kyverno policies
kyverno-multitenant
Kyverno policies for multi-tenant clusters
Configuration
{
"mcpServers": {
"ship-kyverno-multitenant": {
"command": "ship",
"args": [
"mcp",
"--tools",
"kyverno-multitenant"
]
}
}
}Cloud asset inventory
cloudquery
The open source ELT framework powered by Apache Arrow
Configuration
{
"mcpServers": {
"ship-cloudquery": {
"command": "ship",
"args": [
"mcp",
"--tools",
"cloudquery"
]
}
}
}Advanced cosign workflows with real CLI features
cosign-advanced
Advanced cosign workflows with real CLI features
Configuration
{
"mcpServers": {
"ship-cosign-advanced": {
"command": "ship",
"args": [
"mcp",
"--tools",
"cosign-advanced"
],
"env": {
"COSIGN_PRIVATE_KEY": "path/to/private.key"
}
}
}
}OWASP Dependency-Track SBOM analysis
dependency-track
Dependency-Track is an intelligent Component Analysis platform
Configuration
{
"mcpServers": {
"ship-dependency-track": {
"command": "ship",
"args": [
"mcp",
"--tools",
"dependency-track"
],
"env": {
"DEPENDENCY_TRACK_URL": "https://your-dt-instance.com",
"DEPENDENCY_TRACK_API_KEY": "your-api-key"
}
}
}
}Sigstore policy enforcement
sigstore-policy-controller
Sigstore Policy Controller for Kubernetes
Configuration
{
"mcpServers": {
"ship-sigstore-policy-controller": {
"command": "ship",
"args": [
"mcp",
"--tools",
"sigstore-policy-controller"
]
}
}
}SLSA provenance verification
slsa-verifier
Verify provenance from SLSA compliant builders
Configuration
{
"mcpServers": {
"ship-slsa-verifier": {
"command": "ship",
"args": [
"mcp",
"--tools",
"slsa-verifier"
]
}
}
}AWS IAM credential rotation
aws-iam-rotation
AWS IAM credential rotation management
Configuration
{
"mcpServers": {
"ship-aws-iam-rotation": {
"command": "ship",
"args": [
"mcp",
"--tools",
"aws-iam-rotation"
],
"env": {
"AWS_ACCESS_KEY_ID": "your-key",
"AWS_SECRET_ACCESS_KEY": "your-secret"
}
}
}
}AWS pricing and cost calculator
aws-pricing
AWS SDK for the Go programming language
Configuration
{
"mcpServers": {
"ship-aws-pricing": {
"command": "ship",
"args": [
"mcp",
"--tools",
"aws-pricing"
],
"env": {
"AWS_ACCESS_KEY_ID": "your-key",
"AWS_SECRET_ACCESS_KEY": "your-secret"
}
}
}
}AWS IAM policy scanner
cloudsplaining
AWS IAM Security Assessment tool that identifies violations of least privilege
Configuration
{
"mcpServers": {
"ship-cloudsplaining": {
"command": "ship",
"args": [
"mcp",
"--tools",
"cloudsplaining"
]
}
}
}AWS IAM policy linter
parliament
AWS IAM linting library. It reviews policies looking for problems
Configuration
{
"mcpServers": {
"ship-parliament": {
"command": "ship",
"args": [
"mcp",
"--tools",
"parliament"
]
}
}
}AWS IAM policy generator
policy-sentry
IAM Least Privilege Policy Generator
Configuration
{
"mcpServers": {
"ship-policy-sentry": {
"command": "ship",
"args": [
"mcp",
"--tools",
"policy-sentry"
]
}
}
}