Log inSubmit server
Mcpskills Server logo

Mcpskills Server

by BeBraveBeKind

Scores MCP servers, AI skills, GitHub repositories, and npm packages for trust, safety risks, and installation readiness.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Mcpskills Server

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "bebravebekind-mcpskills-server": {
      "command": "npx",
      "args": [
        "-y",
        "@mcpskillsio/server"
      ],
      "env": {
        "MCPSKILLS_API_KEY": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

The install command started, but didn't respond the way we expected when we tried to talk to it.

npx -y @mcpskillsio/server

initialize succeeded but no response to tools/list.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 1mo ago.

Overview

BeBraveBeKind/mcpskills-server MCP server evaluates MCP servers, AI skills, GitHub repositories, and npm packages before installation. It calls the mcpskills.io trust-scoring API and exposes MCP tools for scores, safety scans, package discovery, monitoring, badges, batch checks, and install decisions. Use it when an agent needs evidence about repository health, vulnerabilities, prompt injection, credential theft, or supply-chain risk before recommending or installing software. Basic scans are available on the free tier, while full reports and some monitoring or batch features require an API key or paid plan.

Use cases

  • Evaluate an MCP server before installation
  • Scan an AI skill for prompt injection and credential theft
  • Check several repositories before selecting development tools
  • Monitor watched packages for trust-score changes
  • Build a vetted tool stack for a described application

Key features

  • Trust scores across four dimensions
  • Safety scanning for AI skills and MCP servers
  • Go/no-go installation decisions
  • Batch checks for up to five inputs
  • Repository monitoring and trust badges
  • Curated package and stack recommendations

Tools9

What Mcpskills Server lets your agent do. Expand a tool for its parameters.

Verified live~1.0k tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

21/21 checks healthy over the last 90d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 4d ago via OSV.dev · @mcpskillsio/server (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars1Stargazers on the source repository.
npm downloads634Package downloads in the last 30 days.
Last commit5mo agoMost recent push to the default branch.
Install checkInconclusiveStarted but did not complete the MCP handshake in our test.
Tools exposed9Callable tools this server registers over MCP.
Directory activity5 viewsConfig copies, upvotes, and views on AllMCPs.

How Mcpskills Server works

What BeBraveBeKind/mcpskills-server MCP server does

BeBraveBeKind/mcpskills-server MCP server adds pre-install checks for MCP servers, AI skills, GitHub repositories, npm packages, and supported registry URLs. It returns a trust assessment built around four dimensions: Alive, Legit, Solid, and Usable. The service assigns tiers including Verified, Established, New, and Blocked based on the resulting score.

The server also separates general trust scoring from focused safety analysis. Safety checks look for prompt injection, shell execution, network exfiltration, credential theft, obfuscated payloads, public binding on 0.0.0.0, and risky npm lifecycle scripts. AI skills and MCP servers can receive the additional Skills Mode analysis described in the project documentation.

How it works

BeBraveBeKind/mcpskills-server MCP server sends requests to the mcpskills.io trust-scoring API. The API gathers repository information from GitHub and OpenSSF Scorecard, evaluates 13 standard signals, and adds two more signals in Skills Mode for a total of 15. Safety analysis includes checks based on the ClawHavoc and ToxicSkills attack patterns.

Inputs can be supplied as owner/repo, a GitHub URL, an npm package such as npm:@scope/name or @scope/name, a Smithery URL, or an OpenClaw URL, depending on the tool. The auto_gate operation converts the assessment into a proceed boolean and a reason, which is useful for an agent deciding whether to continue with installation.

Setup and configuration

Install the package as a local stdio MCP server with the @mcpskillsio/server npm package. The README provides configurations for Claude Code, Cursor, and Claude Desktop. Cursor and Claude Desktop configurations run the package through npx.

Set MCPSKILLS_API_KEY when full reports and safety findings are needed inside the client. The documented paid plans are Developer Pro at $19 per month or $149 per year, and Team at $99 per month.

Tools and capabilities

BeBraveBeKind/mcpskills-server MCP server exposes these operations:

  • check_trust_score scores a repository, package, or supported registry URL.
  • scan_safety runs focused security checks on an AI skill or MCP server.
  • list_packages displays curated, pre-scored packages for use cases such as full-stack development, research, DevOps, and content work.
  • get_badge returns an SVG trust-badge URL for a repository or package.
  • watch_repo starts score monitoring and requires a paid API key.
  • check_watched re-scans monitored items and reports significant score or tier changes.
  • batch_check evaluates up to five inputs and requires a Developer Pro or Team API key.
  • auto_gate returns a go/no-go installation decision with reasoning.
  • build_stack recommends a pre-scored tool set for a described development task.

Limitations and notes

The server depends on the mcpskills.io API rather than performing all scoring locally. Full reports, safety findings, monitoring, and batch checks have credential or plan requirements. The free tier has a stated daily limit of 10 scans. The repository is licensed under MIT.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Mcpskills Server

Install it as a stdio server with `npx -y @mcpskillsio/server`. The README includes configurations for Claude Code, Cursor, and Claude Desktop.

Yes. The README provides a Claude Desktop configuration that runs `@mcpskillsio/server` through `npx`.

Basic trust results are available on the free tier, but `MCPSKILLS_API_KEY` is needed for full reports and safety findings. Monitoring requires a paid API key, and batch checks require a Developer Pro or Team key.

Its focused safety scan checks for prompt injection, shell execution, network exfiltration, credential theft, obfuscated payloads, public network binding on `0.0.0.0`, and risky npm lifecycle scripts.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMcpskills Server AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/bebravebekind-mcpskills-server?style=directory)](https://allmcps.com/mcp/bebravebekind-mcpskills-server)
HTML Embed
<a href="https://allmcps.com/mcp/bebravebekind-mcpskills-server"><img src="https://allmcps.com/api/badge/bebravebekind-mcpskills-server?style=directory" alt="Mcpskills Server on AllMCPs" /></a>