Security audit of Model Context Protocol (MCP) servers — tool poisoning, prompt injection via tool descriptions and results, unscoped/over-privileged tools, path traversal in file tools, command injection in shell/exec tools, SSRF in fetch tools, secret leakage through tool output, missing approval gates on state-changing actions, confused-deputy and rug-pull tool redefinition, token passthrough, and unsafe stdio/HTTP transport config. Covers auditing both first-party and third-party MCP servers (Python FastMCP, Node MCP SDK) and their client configs (Claude Desktop, Cursor, Cline, Windsurf, Zed). Use when reviewing, hardening, or hunting bugs in an MCP server, an agent's tool integrations, or a mcpServers config block. 中文触发词:MCP审计、工具投毒、提示注入、智能体安全、MCP服务器漏洞
5.5k5mo agoReviewMountCreate a free account to mount
Adding, removing or changing a tool on RedAmon's INBOUND MCP server, where external agents connect in with a personal access token. The wiki API reference is generated from the server's live tools/list and goes stale silently, and each tool's annotations and declared scopes are published to connected clients. Trigger: editing a registerTool call in webapp/src/lib/mcp/server.ts; editing tools.ts, writeTools.ts, scopeCopy.ts or apiReference.ts in webapp/src/lib/mcp/; changing the scope list, default scopes, expiry presets or token prefix in webapp/src/lib/mcpAuth.ts.
3.3k8mo agoReviewMountCreate a free account to mount
Use when finding, comparing, reading, or monitoring arXiv papers, including requests for abstracts, citation graphs, original LaTeX, section-level technical details, or literature reviews.
No other project uses it yet
3.2k4mo agoReviewMountCreate a free account to mount
Install, configure, and troubleshoot the EKS MCP Server connection in your AI assistant (Claude Code, Cursor, Kiro). Use ONLY for MCP server setup problems — config file location (.mcp.json), IAM permissions for eks-mcp actions, uvx installation, choosing AWS-hosted vs self-hosted mode, or debugging why MCP tools fail to appear after config. Also activate if user mentions "eks mcp", "mcp server", "mcp.json", or "mcp tools not showing". Do NOT use for actual cluster operations once MCP is working — those go to eks-recon (discovery), eks-operation-review (audits), or eks-upgrade-check (upgrades). For setting up the Arm migration MCP server used for arm64 readiness scanning, use graviton-migration, not this skill.
9320d agoReviewMountCreate a free account to mount
skill
---
name: add-mcp-server
description: Add or integrate an MCP (Model Context Protocol) server for agent tools
---
# MCPServer Integration Skill
Integrate external tool servers via MCP protocol into
7410mo agoReviewMountCreate a free account to mount
Build MCP servers with Node/TypeScript SDK — tools, resources, prompts, Zod validation, stdio vs Streamable HTTP. Use Context7 or official MCP docs for latest API. Use when building or debugging an MCP server — tools, resources, prompts, validation, or transport choice.
Build MCP servers with Node/TypeScript SDK — tools, resources, prompts, Zod validation, stdio vs Streamable HTTP. Use Context7 or official MCP docs for latest API.
Use when testing MCP servers -- e2e tests with the sunpeak inspector, visual regression testing, live testing against real ChatGPT, multi-model evals, Playwright configuration, or scaffolding test infrastructure with "sunpeak test init". Works with any MCP server (Python, Go, TypeScript, etc.), not just sunpeak projects.
2196mo agoReviewMountCreate a free account to mount
MCP (Model Context Protocol) sunucusu yazma: kavramlar (tools, resources, prompts), TypeScript SDK ile sunucu (Zod girdi şemaları, yapılandırılmış çıktı), stdio ve Streamable HTTP taşıma, uzak sunucuda OAuth ile kimlik doğrulama, araç tasarımı (az ve net araç, iyi açıklama, düzeltici hata mesajları), sayfalama ve büyük çıktılar, güvenlik (en az yetki, onay gerektiren işlemler, prompt injection), MCP Inspector ile test ve Claude Code / Claude Desktop'a ekleme. "MCP sunucusu yaz", "uygulamamı Claude'a bağla" dendiğinde kullan.
Guide for using Apollo MCP Server to connect AI agents with GraphQL APIs. Use this skill when: (1) setting up or configuring Apollo MCP Server, (2) defining MCP tools from GraphQL operations, (3) using introspection tools (introspect, search, validate, execute, explorer), (4) configuring authentication, CORS, health checks, or telemetry, (5) writing Rhai scripts for request lifecycle hooks, (6) defining MCP prompts, (7) troubleshooting MCP server connectivity or tool execution issues.
1 project uses a version of this
5.1k5d agoReviewMountCreate a free account to mount
Model Context Protocol server exposing 53 tools, 3 resource types, and 3 prompts for AI agent consumption — quoting, building transactions, fee management, analytics, AMM operations, social fees, wallet operations over stdio transport.
1468mo agoReviewMountCreate a free account to mount
Builds, secures and tests Model Context Protocol (MCP) servers - choosing MCP vs a CLI or API, tools, resources and prompts, stdio vs Streamable HTTP transport, task-shaped tool design, logging rules, OAuth for remote servers, input validation, testing with the MCP Inspector, and versioning. Use when creating or reviewing an MCP server, exposing an API or database to AI agents through MCP, or debugging an MCP server that fails to connect, hangs or confuses the model. Not for designing the agent loop itself (use building-agents).
Use with Codex, Claude Code, or another MCP client when lsp-mcp-server is connected and semantic code navigation, analysis, refactoring, or diagnostics are needed. Covers all 29 lsp_* tools for TypeScript, Python, Rust, Go, C/C++, Ruby, PHP, Elixir, Kotlin, Java, and user-configured languages. Prefer these tools to text search for definitions, references, types, diagnostics, rename, code actions, hierarchy, symbols, ranges, and indexing.
2436d agoReviewMountCreate a free account to mount
Expert guide for DOKU Model Context Protocol (MCP) Server integration. Enables AI Agentic Commerce with tools for DOKU Checkout, payment links, Virtual Accounts, QRIS, and order status checks / Panduan ahli DOKU MCP Server untuk AI Agentic Commerce.
7538d agoReviewMountCreate a free account to mount
Proactive skill for setting up and configuring the dbt MCP server for use with Claude Code and Claude Desktop. Auto-activates when a user asks about connecting Claude to dbt, setting up dbt MCP, or accessing dbt Semantic Layer or Discovery API from Claude. Covers local vs remote server modes, credential handling, and Wire project setup.
1438d agoReviewMountCreate a free account to mount
Read-only inspection of a third-party MCP server BEFORE it is added or trusted: scans tool descriptions and scopes for poisoning, returns an add, decline or sandbox verdict for a human. Never installs. Do not use to vet a skill or plugin (use skill-vet), to review first-party code (use review-hard or security-review), or to fetch a remote server definition (record its origin via capture-references, then get a local copy out of band).
1034d agoReviewMountCreate a free account to mount
Use this when: build an MCP server, expose my API as a Claude tool, connect a service to Claude, my MCP tool is not showing up, write a custom Claude tool, MCP server not connecting, debug MCP connection, set up FastMCP, add auth to an MCP tool, my tool returns wrong format, register in Claude Desktop, tool is not being called, stdio vs SSE transport, wrap a REST API for Claude, configure .mcp.json, MCP resource vs tool, MCP prompt vs tool, Docker MCP container, multi-server setup, path traversal in file tool
Plain text files in a repository that tell a coding agent how the project works: commands to run, conventions to follow and things to avoid. CLAUDE.md, AGENTS.md, cursor rules and skills are the common kinds.
CLAUDE.md or AGENTS.md?
CLAUDE.md is read by Claude Code. AGENTS.md is an open format that Codex, Cursor and other agents read. Many projects keep one and point the other at it.
What is a skill?
A folder with a SKILL.md that describes one capability, such as filling PDFs or reviewing code. The agent loads it only when the task calls for it.
Can I search my own team's files too?
Your agents already can, over MCP, limited to the files you're allowed to read. Searching them from this page is coming.