mcp-builder
Guide for building high-quality MCP (Model Context Protocol) servers and tool suites.
Skill by Threat-Vector-Security
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/threat-vector-security-mcp-builder
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: design, backend, security, agent-building
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/mcp-builder
What's inside
- Skill name
mcp-builder- Description
- Guide for building high-quality MCP (Model Context Protocol) servers and tool suites. Use this whenever the user asks to build, design, refactor, review, or evaluate an MCP server, expose an API through MCP, or improve tool naming, schemas, pagination, auth, or error handling.
- License
- Apache-2.0
- Instructions
- 46 lines in SKILL.md · view on GitHub
Files (2)
- SKILL.md
- mcp-server-checklist.md · references/
SKILL.md (first lines)
# MCP Builder Build MCP servers so they are easy for agents to discover, reason about, and use safely. ## Workflow 1. Understand the target API or system first. 2. Choose the transport intentionally. 3. Design the tool surface for agent discoverability, not just endpoint parity. 4. Implement shared auth, error handling, formatting, and pagination helpers before adding many tools. 5. Test the server with realistic multi-step prompts, not only unit tests. ## Design Principles - Prefer clear verb-first or provider-prefixed tool names. - Make tool descriptions concrete and concise. - Use structured schemas with field constraints and examples. - Return structured data whenever the SDK supports it. - Keep read-only and mutating tools clearly separated. - Write actionable errors that tell the agent what to do next. ## Implementation Guidance - Prefer TypeScript unless the repo already has a strong Python MCP pattern. - Start with the most common read-only tools, then add mutating operations. - Add pagination, filtering, and scoping so tools do not dump oversized payloads. - Model auth once in a shared client layer. - Use annotations and metadata that help approval and policy systems classify risk. ## Review Checklist - Can an agent find the right tool from the name alone? - Are input and output schemas specific enough to prevent ambiguous calls? - Do error messages explain the likely fix? - Are mutating tools obviously distinct from inspection tools? - Can common user tasks be solved without custom scripting around the server? Read [references/mcp-server-checklist.md](./references/mcp-server-checklist.md) when you need a compact implementation checklist. ## Gotchas - Do not mirror raw endpoint naming when it makes tool discovery worse for agents. - Do not expose large unfiltered list endpoints without pagination, filters, or scoping. - Do not mix read-only and mutating behavior behind one ambiguous tool.
From Threat-Vector-Security/guardian-agent, Apache-2.0.
More from Threat-Vector-Security/guardian-agent
- 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.600score
systematic-debugging
Threat-Vector-Security
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
skill-creator
Threat-Vector-Security
Guide for creating new skills, improving existing skills, and evaluating skill quality.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
code-review
Threat-Vector-Security
Use when reviewing a diff, PR, or patch for bugs, regressions, missing tests, architecture risk, security risk, or reviewability concerns before merge.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
coding-workspace
Threat-Vector-Security
Use when the request is about a repo, codebase, implementation, bugfix, or backend-owned coding session that should stay anchored to the active workspace.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
receiving-code-review
Threat-Vector-Security
Use when addressing code review or QA feedback, especially when the feedback is unclear, broad, or technically questionable.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
deep-research
Threat-Vector-Security
Use when the task needs investigation first, especially to compare code paths, trace behavior, or synthesize findings before implementation.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
coding-backend-orchestration
Threat-Vector-Security
Use when the user explicitly asks Guardian to launch or check an external coding assistant such as Codex, Claude Code, Gemini CLI, or Aider.
SkillBFreshness: B★ 13Claude Code +9 - 0.571score
verification-before-completion
Threat-Vector-Security
Use when about to claim work is complete, fixed, or passing, or before committing or handing off results.
SkillBFreshness: B★ 13Claude Code +9 - 0.570score
test-driven-development
Threat-Vector-Security
Use when implementing or changing code behavior, before writing production code.
SkillBFreshness: B★ 13Claude Code +9
Signals
- Stars
- 13
- Forks
- 3
- Open issues
- 0
- Last commit (this folder)
- Mar 18, 2026 (7 months ago)
- Last release
- Sep 9, 2026 (1 month ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from Threat-Vector-Security
- 0.601score
source-driven-development
Threat-Vector-Security
Use when implementing or reviewing framework-specific code that should be verified against current official docs, versioned guidance, or source-cited examples…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
context-engineering
Threat-Vector-Security
Use when starting a repo-grounded task, switching subsystems, or when output quality drops and the agent needs tighter project context from rules, specs…
SkillBFreshness: B★ 13Claude Code +9 - 0.601score
security-triage
Threat-Vector-Security
Use when the user is reviewing a security alert, posture change, suspicious network behavior, firewall issue, or combined monitoring output.
SkillBFreshness: B★ 13Claude Code +9 - 0.600score
systematic-debugging
Threat-Vector-Security
Use when encountering a bug, failing test, broken integration, or unexpected behavior, before proposing fixes.
SkillBFreshness: B★ 13Claude Code +9 - 0.598score
skill-creator
Threat-Vector-Security
Guide for creating new skills, improving existing skills, and evaluating skill quality.
SkillBFreshness: B★ 13Claude Code +9 - 0.596score
code-review
Threat-Vector-Security
Use when reviewing a diff, PR, or patch for bugs, regressions, missing tests, architecture risk, security risk, or reviewability concerns before merge.
SkillBFreshness: B★ 13Claude Code +9
Cite this page
mcp-builder skill. Agent Mart. https://agentmart.dev/skills/threat-vector-security-mcp-builder (last updated 2026-10-24)