Full Codebase Autopilot
Shipwell is designed for desktop.
Please open on a larger screen for the full experience.
Shipwell is a full-codebase analysis engine powered by Claude Opus 4.6 with up to 1 million tokens of context. It ingests your entire repository — every file, every dependency — and performs deep cross-file analysis.
Available as both a CLI tool and a web application, Shipwell supports five core operations:
Install the Shipwell CLI globally via npm:
npm install -g @shipwellapp/cliRequires Node.js 18 or later. After installation, run shipwell to verify.
Get started in four steps:
npm install -g @shipwellapp/clishipwell loginshipwell config set api-key sk-ant-api03-...shipwell audit https://github.com/your/repoThe CLI will display a live-streaming analysis with findings, severity ratings, and suggested fixes.
Deep cross-file codebase analysis from your terminal. Powered by Claude with up to 1M token context.
Each operation ingests your entire codebase and performs deep cross-file analysis.
shipwell audit <path>Run a comprehensive security audit across your entire codebase. Detects vulnerabilities, injection risks, auth flaws, and cross-file security issues.
shipwell migrate <path>Plan framework and library migrations with complete file diffs, dependency chain analysis, and step-by-step migration guides.
shipwell refactor <path>Detect code smells, duplication, circular dependencies, dead code, and architecture issues with concrete fix suggestions.
shipwell docs <path>Generate comprehensive documentation including architecture overviews, data flow diagrams, API references, and module guides.
shipwell upgrade <path>Analyze all dependencies, find known vulnerabilities, check for breaking changes, and plan safe version upgrades.
After analysis, if fixable findings are detected, the CLI can create a GitHub PR with suggested fixes — authored by the ShipwellHQ GitHub App.
Append --create-pr to any analysis command. The CLI will prompt to create a PR when fixable issues are found.
shipwell audit https://github.com/acme/api --create-prshipwell audit ./my-project --create-pr --yesPrerequisite: The ShipwellHQ GitHub App must be installed on the target repository.
Manage authentication, API keys, and model preferences.
shipwell loginSign in with Google via browsershipwell logoutSign out and clear credentialsshipwell whoamiShow current user, API key status, and modelshipwell config set api-key <key>Set your Anthropic API keyshipwell config set model <model>Set the Claude model to useshipwell delete-keyRemove stored Anthropic API keyshipwell interactiveLaunch interactive guided modeshipwell modelsList all available Claude modelsshipwell updateUpdate CLI to the latest versionshipwell helpList all available commands and flagsPass flags to any analysis command to customize behavior.
-k, --api-key <key>Override the stored API key for this run-m, --model <model>Override the model (e.g. claude-sonnet-4-5-20250929)-t, --target <target>Migration target framework/library-c, --context <ctx>Additional context for the analysis-r, --rawPrint raw streaming output alongside formatted results-y, --yesSkip cost confirmation prompt-o, --output <path>Export report to file (.md or .json)--create-prCreate a GitHub PR with auto-fixes after analysisExamples with flags:
shipwell migrate ./my-app --target "Next.js 15" --model claude-opus-4-6shipwell audit ./my-app -y -o report.mdANTHROPIC_API_KEYYour Anthropic API key (overrides stored config)SHIPWELL_MODELDefault model ID (overrides stored config)SHIPWELL_API_URLAPI base URL for PR creation (default: https://shipwell.app)The ShipwellHQ GitHub App automatically creates pull requests with suggested fixes from your Shipwell analysis. PRs are authored by ShipwellHQ[bot] and ready for review.
Three steps from analysis to pull request.
Click the button below to install the ShipwellHQ GitHub App on your repositories. You can grant access to all repos or select specific ones.
Use the Shipwell web app or CLI to analyze a repository where the app is installed. Findings with auto-fix diffs will be detected.
Click "Create Fix PR" on the web or pass --create-pr in the CLI. Shipwell creates a branch, applies diffs, and opens a PR authored by ShipwellHQ[bot].
A clean pull request with all applicable fixes, ready for review.
shipwellhq[bot] wants to merge 1 commit into main from shipwell/fix-audit-1739234582
This PR applies auto-fixes for findings detected by Shipwell's cross-file analysis.
Create fix PRs from the web app or the CLI.
shipwell.app
@shipwellapp/cli
shipwell audit <repo> --create-prshipwell audit ./local --create-pr --yesWorks with all operations: audit, migrate, refactor, docs, upgrade
The app requests only the minimum permissions needed to create fix PRs.
Read files to generate diffs, write fixes to new branches
Create PRs with analysis results and suggested fixes
Privacy & Security
The app never stores your code. File contents are read only at PR creation time to apply diffs, then discarded. All analysis is performed using your own Anthropic API key — your code goes directly to Anthropic, not through our servers. GitHub App credentials are stored securely server-side and never exposed to the browser.
Common questions about the GitHub App.
Only the repositories you explicitly grant access to during installation. You can change this anytime in your GitHub settings.
The app only accesses file contents when creating a fix PR — it reads the targeted files to apply diffs. Your code is never stored on our servers. The analysis itself uses your own Anthropic API key, not the GitHub App.
Absolutely. The app creates a standard pull request, not a direct commit. You review the diff, request changes, or merge — just like any other PR.
If a file has changed since the analysis, that particular fix is skipped. The PR summary shows applied, skipped, and failed counts so you know exactly what happened.
Go to github.com/settings/installations, find ShipwellHQ, and click Configure > Uninstall. All access is revoked immediately.
Yes. The GitHub App authenticates server-side with its own credentials, so it can access any repo you've granted it permission to — public or private.
Shipwell uses your own Anthropic API key. Configure it via the CLI or the web settings page.
shipwell config set api-key sk-ant-api03-...shipwell config set model claude-opus-4-6You can also override per-run with flags:
shipwell audit ./app -k sk-ant-... -m claude-opus-4-6API keys are stored locally and never sent to Shipwell servers. Use shipwell whoami to check your current configuration.
Shipwell can analyze codebases in any language that Claude understands. These are the most commonly used:
Additional languages and frameworks are supported — Claude's training data covers most programming languages in use today.