# Skillsmith [Health: Active]

**Category:** 🤖 Coding Agents  
**Repository:** https://github.com/smith-horn/skillsmith  
**GitHub Stars:** 78  
**npm Downloads (last month):** 1667  
**Views:** 1  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/skillsmith

## Description
MCP server for Claude Code skill discovery, installation, and management.

## Tools
Capabilities this server exposes over MCP:

- **search** — Search skills with filters (query, category, trust tier, min score)
- **get_skill** — Get detailed skill information including install command
- **install_skill** — Install a skill to your local environment
- **uninstall_skill** — Remove an installed skill
- **skill_recommend** — Get contextual skill recommendations
- **skill_suggest** — Suggest skills from your current project context (counts against your monthly quota)
- **skill_validate** — Validate a skill's structure and quality
- **skill_compare** — Compare two skills side-by-side
- **skill_outdated** — Check installed skills for staleness and dependency status
- **skill_rescan** — Re-scan an installed skill with the latest security patterns
- **skill_publish** — Validate a skill and prepare it for publishing
- **skill_recover_source** — Recover the GitHub source of locally installed skills (read-only)
- **index_local** — Index skills from a local directory
- **inventory_push** — Push this machine's installed-skill inventory to your dashboard (read-only; needs `skillsmith login`)
- **skill_inventory_audit** — Check every installed client's skills for name collisions and get rename suggestions
- **apply_namespace_rename** — Apply or revert a rename suggestion (previews first, changes files only when confirmed)
- **apply_recommended_edit** — Apply a suggested prose edit from an audit (previews first, changes files only when confirmed)
- **undo_apply** — Undo the most recent rename or edit from this session
- **apply_manifest_reconcile** — Repair a corrupted or ambiguous manifest entry
- **skill_updates** — Check the registry for newer versions of installed skills
- **skill_diff** — Section-level diff between two versions of a skill
- **skill_pack_audit** — Audit a directory of skills for version drift and weak triggers
- **skill_audit** — Check installed skills for known security advisories
- **team_workspace** — Create, list, get and delete team workspaces
- **share_skill** — Add, remove or list skills in a team workspace
- **publish_private** — Hide a skill from your own search results on this machine (local only)
- **team_analytics_dashboard** — Per-user tool usage, top tools and daily trend
- **team_usage_report** — Weekly or monthly usage summary with period comparison
- **compliance_report** — Generate SOC2, CycloneDX SBOM or JSON reports for your local skill inventory
- **private_registry_publish** — Publish a skill version to your private registry for approval
- **private_registry_manage** — List, get, install, deprecate, approve or reject private registry skills
- **configure_sso** — Set up SSO/SAML, including DNS domain verification
- **sso_settings** — View the current SSO/SAML configuration
- **rbac_manage** — Inspect and adjust what each team role can do
- **rbac_assign_role** — Assign or revoke member roles, or list members
- **rbac_create_policy** — Bulk-set or clear permission overrides for a role
- **audit_export** — Export audit log events for a time range
- **audit_query** — Query audit logs with filters
- **siem_export** — Export audit events to your SIEM
- **analytics_dashboard** — Recommendation accuracy, usage trends and team-wide aggregation
- **usage_report** — Full usage report across all metrics
- **webhook_configure** — Signed webhooks for skill lifecycle events (preview)
- **api_key_manage** — Create, list and revoke API keys (preview)

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "skillsmith": {
    "command": "npx",
    "args": ["-y","@skillsmith/mcp-server"]
  }
}
```

## Documentation

## What Skillsmith MCP server does

Skillsmith MCP server exposes the Skillsmith registry through the Model Context Protocol. It helps an agent find skills, inspect their metadata and installation instructions, install or remove them locally, and assess alternatives before use.

The registry is organized around team-scoped skills. Each publication creates an immutable version, so updates do not silently replace an installed version. Skills can also carry trust information, be flagged or quarantined pending security review, and be deprecated when they are no longer maintained.

This is suited to teams that publish or reuse agent skills and need visibility into which skills are available, which versions are installed, and whether a skill has been flagged. It also supports individual local use without requiring a team workflow.

## How it works

The MCP server runs as a local process configured in an MCP client. After the client starts it, the agent can call Skillsmith MCP server tools to query the registry and manage skills on the machine where the server is running.

Registry data is cached in a local SQLite database at `~/.skillsmith/skills.db`. The MCP server, CLI, and VS Code extension share this database. Standard search uses SQLite FTS5 keyword search. Semantic search can be enabled with `SKILLSMITH_USE_HNSW=true`; it uses local ONNX embeddings and does not make an API call for those embeddings.

Team permissions determine who can publish and manage skills. Team owners and administrators control those actions, while members can search and install. Immutable versions make local drift visible; the README identifies `skill_diff` and `skill_outdated` as the mechanisms for checking installed versions and outdated copies, although they are not listed among the MCP tools provided here.

## Setup and configuration

Install the MCP package with `npx -y @skillsmith/mcp-server`, or install it globally with `npm install -g @skillsmith/mcp-server` and configure the resulting executable directly. Add the command to the MCP client configuration, then restart or reload the client as required.

An API key is optional. Supplying `SKILLSMITH_API_KEY` provides higher rate limits and usage tracking. The documented login flow installs `@skillsmith/cli`, runs `skillsmith login`, and stores the key in the operating system keyring before it is added to the MCP client configuration.

Cursor requires version 2.4 or later and Node 22.22 or later. Its documented setup uses the globally installed executable because Cursor's bundled Node may not resolve the package through `npx`. Set `SKILLSMITH_CLIENT=cursor` to route installations to `~/.cursor/skills` rather than the default `~/.claude/skills`.

## Tools and capabilities

- `search` filters skills by query, category, trust tier, and minimum score.
- `get_skill` returns detailed skill information, including an install command.
- `install_skill` installs a selected skill in the local environment.
- `uninstall_skill` removes an installed skill.
- `recommend` returns contextual skill recommendations.
- `validate` checks a skill's structure and quality.
- `compare` presents multiple skills for side-by-side comparison.

Together, these operations cover discovery, selection, local installation, cleanup, and basic quality checks. The local cache supports repeated searches without requiring every lookup to fetch the complete registry remotely.

## Limitations and notes

An unflagged skill is not necessarily formally approved; it means the skill has not been flagged. Suspicious or flagged skills may be quarantined pending review. Registry access and rate limits vary by account tier, from a free trial and community tier through paid individual, team, and enterprise plans.

The provided MCP tool list does not include publishing, deprecation, drift, or synchronization operations. Keep API keys in client settings or environment configuration rather than sending them in chat.

_Full upstream README: https://allmcps.com/mcp/skillsmith/readme_