Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/agentfront/frontmcp/frontmcp-confignpx skills add agentfront/frontmcp --skill frontmcp-configgit clone --depth 1 https://github.com/agentfront/frontmcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/agentfront/frontmcp/frontmcp-config)<a href="https://agentmods.dev/skills/agentfront/frontmcp/frontmcp-config"><img src="https://agentmods.dev/badge/skills/agentfront/frontmcp/frontmcp-config.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00187 | $0.04406 |
| Opus 5 | $0.00093 | $0.02203 |
| Sonnet 5 | $0.00037 | $0.00881 |
| Haiku 4.5 | $0.00019 | $0.00441 |
Grade A, and why
frontmcp-config scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
- [ ] CORS allows expected origins (test with browser or curl) How it starts
The opening of the file, as written. The whole thing — 269 lines — stays where its author put it; the contents beside it link to each section on GitHub.
FrontMCP Configuration Router
Entry point for configuring FrontMCP servers. This skill helps you find the right configuration reference (under references/) based on what aspect of your server you need to set up.
When to Use This Skill
Must Use
- Setting up a new server and need to understand which configuration options exist
- Deciding between authentication modes, transport protocols, or storage backends
- Planning server configuration across transport, auth, throttling, and storage
Recommended
- Looking up which reference covers a specific config option (CORS, rate limits, session TTL, etc.)
- Understanding how configuration layers work (server-level vs app-level vs tool-level)
- Reviewing the full configuration surface area before production deployment
Skip When
- You already know which config area to change (go directly to
configure-transport,configure-auth, etc.) - You need to build components, not configure the server (see
frontmcp-development) - You need to deploy, not configure (see
frontmcp-deployment)
Decision: Use this skill when you need to figure out WHAT to configure. Open the matching reference under
references/directly when you already know.
Prerequisites
- A FrontMCP project scaffolded with
frontmcp create(seefrontmcp-setup) - Node.js 24+ and npm/yarn installed
Steps
- Identify the configuration area you need using the Scenario Routing Table below
- Navigate to the specific configuration reference (e.g.,
references/configure-transport.md,references/configure-auth.md) for detailed instructions - Apply the configuration in your
@FrontMcpor@Appdecorator - Verify using the Verification Checklist at the end of this skill
Scenario Routing Table
| Scenario | Reference | Description |
|---|---|---|
| Choose between SSE, Streamable HTTP, or stdio | configure-transport |
Transport protocol selection with distributed session options |
| Set up CORS, port, base path, or request limits | configure-http |
HTTP server options for Streamable HTTP and SSE transports |
| Add rate limiting, concurrency, or IP filtering | configure-throttle |
Server-level and per-tool throttle configuration |
| Enable tools to ask users for input | configure-elicitation |
Elicitation schemas, stores, and multi-step flows |
| Set up authentication (public, transparent, local, remote) | configure-auth |
OAuth flows, credential vault, multi-app auth |
| Configure session storage backends | configure-session |
Memory, Redis, Vercel KV, and custom session stores |
| Add Redis for production storage | setup-redis |
Docker Redis, Vercel KV, pub/sub for distributed subscriptions |
| Add SQLite for local development | setup-sqlite |
SQLite with WAL mode, migration helpers |
| Understand auth mode details (public/transparent/local/remote) | configure-auth-modes |
Authentication mode details (public, transparent, local, remote) |
| Fine-tune guard configuration for throttling | configure-throttle-guard-config |
Advanced guard configuration for throttling |
| Use transport protocol presets | configure-transport-protocol-presets |
Transport protocol preset configurations |
| Configure multi-target deployments and frontmcp.config.ts | configure-deployment-targets |
Typed config with defineConfig(), 9 deployment targets, JSON schema |
| Add CSP, HSTS, X-Frame-Options, and other security headers | configure-security-headers |
CSP directives, report-only mode, HSTS preload, custom headers |
| Configure skills HTTP, instructions injection, or audit log | configure-skills-http |
Full skillsConfig reference: auth, cache, instructions, audit log |
Split apps into separate scopes (splitByApp) |
decorators-guide |
Per-app scope and basePath isolation on @FrontMcp |
| Enable widget-to-host communication (ext-apps) | decorators-guide |
extApps host capabilities, session validation, widget comms |
| Enable background jobs and workflows | decorators-guide |
jobs: { enabled: true, store? } on @FrontMcp |
| Configure pagination for list operations | decorators-guide |
pagination defaults for tools/list endpoint |
| Configure npm/ESM package loader for remote apps | decorators-guide |
loader config for App.esm() / App.remote() resolution |
What ships with it
55 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- examples/configure-auth-modes/local-behind-tunnel.md 2.5 KB
- examples/configure-auth-modes/local-consent-enforcement.md 3.2 KB
- examples/configure-auth-modes/local-dcr-control.md 3.6 KB
- examples/configure-auth-modes/local-minimal.md 1.9 KB
- examples/configure-auth-modes/local-multi-provider-orchestration.md 4.0 KB
- examples/configure-auth-modes/local-self-signed-tokens.md 2.8 KB
- examples/configure-auth-modes/local-single-operator.md 2.0 KB
- examples/configure-auth-modes/remote-enterprise-oauth.md 3.8 KB
- examples/configure-auth-modes/transparent-jwt-validation.md 3.2 KB
- examples/configure-auth/local-credential-vault.md 4.1 KB
- examples/configure-auth/local-secure-store.md 5.8 KB
- examples/configure-auth/multi-app-auth.md 2.5 KB
- examples/configure-auth/public-mode-setup.md 1.6 KB
- examples/configure-auth/remote-oauth-with-vault.md 4.1 KB
- examples/configure-deployment-targets/distributed-ha-config.md 3.2 KB
- examples/configure-deployment-targets/json-schema-ide-support.md 1.6 KB
- examples/configure-deployment-targets/multi-target-with-security.md 3.3 KB
- examples/configure-elicitation/basic-confirmation-gate.md 2.3 KB
- examples/configure-elicitation/distributed-elicitation-redis.md 2.5 KB
- examples/configure-http/cors-restricted-origins.md 1.5 KB
- examples/configure-http/custom-http-routes.md 4.0 KB
- examples/configure-http/entry-path-reverse-proxy.md 1.9 KB
- examples/configure-http/unix-socket-local.md 1.7 KB
- examples/configure-security-headers/csp-report-only.md 1.9 KB
- examples/configure-security-headers/full-production-headers.md 2.8 KB
- examples/configure-session/multi-server-key-prefix.md 2.0 KB
- examples/configure-session/redis-session-store.md 1.6 KB
- examples/configure-session/vercel-kv-session.md 1.5 KB
- examples/configure-skills-http/audit-log-basic.md 2.6 KB
- examples/configure-skills-http/audit-log-redis.md 4.3 KB
- examples/configure-skills-http/inject-instructions.md 2.1 KB
- examples/configure-throttle-guard-config/full-guard-config.md 2.7 KB
- examples/configure-throttle-guard-config/minimal-guard-config.md 1.5 KB
- examples/configure-throttle/distributed-redis-throttle.md 2.6 KB
- examples/configure-throttle/per-tool-rate-limit.md 2.6 KB
- examples/configure-throttle/server-level-rate-limit.md 2.1 KB
- examples/configure-transport-protocol-presets/legacy-preset-nodejs.md 1.9 KB
- examples/configure-transport-protocol-presets/stateless-api-serverless.md 2.0 KB
- examples/configure-transport/custom-protocol-flags.md 2.4 KB
- examples/configure-transport/distributed-sessions-redis.md 2.5 KB
- examples/configure-transport/stateless-serverless.md 1.9 KB
- references/configure-auth-modes.md 14 KB
- references/configure-auth.md 31 KB
- references/configure-deployment-targets.md 13 KB
- references/configure-elicitation.md 9.4 KB
- references/configure-http.md 20 KB
- references/configure-security-headers.md 8.6 KB
- references/configure-session.md 12 KB
- references/configure-skills-http.md 10 KB
- references/configure-throttle-guard-config.md 2.8 KB
- references/configure-throttle.md 12 KB
- references/configure-transport-protocol-presets.md 3.6 KB
- references/configure-transport.md 11 KB
- references/setup-redis.md 546 B
- references/setup-sqlite.md 527 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 269 lines · 187 tokens per session scan A 1e05685c6b3d
frontmcp-config is a skill published in the GitHub repository agentfront/frontmcp (146 stars, last pushed 3d ago), licensed Apache-2.0. It adds 187 tokens to every session and 4,406 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
Clerk Auth Testing
Testing patterns for Clerk authentication including sign-in flow testing, protected route testing, webhook verification, middleware testing, and organization-based access control.
forgetful-mcp-setup
Set up an MCP client for Forgetful — wire Claude Code, Cursor, Copilot, Codex, Gemini, or OpenCode to the server and verify the connection behaves. Covers stdio vs HTTP transport, auth and scopes, the three meta-tools every client sees, and delegation to subagents.
state-memory-mcp
Teaches the agent to use the state-memory-mcp MCP server to track workflow state, tasks, decisions, blockers, artifacts, plans, milestones, and their semantic relationships in a persistent graph database.
rekal-init
Bootstrap rekal memory for a project. Scans the codebase for architecture, conventions, dependencies, workflows, and config, then stores durable knowledge as properly typed, tagged, deduplicated memories. Use when starting rekal on a new project, or when user says "init rekal", "bootstrap memory", "populate rekal"…
video-ingest
Teaches the agent to process, ingest, analyze, and compare WebM, MP4, and GIF video recordings using vision-memory-mcp and state-memory-mcp.
rekal-save
End-of-session memory capture with deduplication. Extracts durable knowledge, checks for duplicates, stores or replaces as appropriate. Use whenever a session wraps up, a task finishes, or the user says goodbye/thanks/done. Also use when significant preferences, decisions, or discoveries emerge mid-session. Make sure…