Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add danielgnh/statamic-mcp --skill statamic-mcp-setupgit clone --depth 1 https://github.com/danielgnh/statamic-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/danielgnh/statamic-mcp/statamic-mcp-setup)<a href="https://agentmods.dev/skills/danielgnh/statamic-mcp/statamic-mcp-setup"><img src="https://agentmods.dev/badge/skills/danielgnh/statamic-mcp/statamic-mcp-setup/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/danielgnh/statamic-mcp/statamic-mcp-setup"><img src="https://agentmods.dev/badge/skills/danielgnh/statamic-mcp/statamic-mcp-setup.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00044 | $0.01126 |
| Opus 5.5 | $0.00018 | $0.00450 |
| Sonnet 5.5 | $0.00009 | $0.00225 |
| Haiku 4.5 | $0.00004 | $0.00113 |
Grade A, and why
statamic-mcp-setup scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 94 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Statamic MCP Setup
When to use this skill
Use this skill when the developer wants to connect an AI client (Claude Code, Cursor, claude.ai, Claude Desktop, ChatGPT) to their Statamic site, or when the MCP endpoint answers 401/503 and needs fixing.
Pick the auth mode
- Token mode — clients that can send an
Authorization: Bearerheader: Claude Code, Cursor, MCP Inspector. Works on every install, no database needed. - OAuth mode — connector clients that cannot send static headers: individual-plan claude.ai, Claude Desktop, ChatGPT. Requires Laravel Passport and a database for Passport's own tables (sqlite is fine). Users stay wherever they are — file users work; no user migration.
Always diagnose first
php please mcp:doctor
Every [FAIL] line carries its exact remedy; [WARN]s alone still exit 0. Fix
[FAIL]s via the setup wizard below — not by hand-editing config files.
Token mode
php please mcp:setup --token [email protected] --yes
This issues the first token (shown exactly once) with ready-to-paste client snippets.
More tokens: php please mcp:token [email protected] --name="Claude" --expires-days=90.
The user must have the Access MCP permission (or be super).
OAuth mode
php please mcp:setup --oauth --yes
Unattended, this installs Passport, flips STATAMIC_MCP_AUTH=oauth, runs the
migrations — Passport's tables, the addon's key table, and the conversion of
user_id columns to strings (Statamic ids are UUIDs; Passport's stock columns
are bigint) — and provisions the encryption keys into the database. The migrate
step runs after the env flip on purpose: the addon's migrations only load in
OAuth mode. It finishes by running mcp:doctor and exits non-zero if anything
is still wrong.
There is no user migration, no HasApiTokens trait, and no api guard step: the
addon registers its own auth guard that validates bearers with Passport's
ResourceServer and resolves the user through the Statamic repository —
config/auth.php and the user model are never touched.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 94 lines · 44 tokens per session scan A 919eed60f903
statamic-mcp-setup is a skill published in the GitHub repository danielgnh/statamic-mcp (5 stars, last pushed 3d ago), licensed MIT. It adds 44 tokens to every session and 1,126 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
api-connector-builder
Use when writing a client for someone else's REST or GraphQL API: auth flow choice and token refresh, pagination to exhaustion, retry-with-jitter on transient failures only, rate-limit-aware throttling. NOT inbound callbacks (that is webhooks), NOT chaining services (that is automation-flows), NOT designing your own…
linkedin-api
Use when wiring an app to LinkedIn's organic Posts / Community Management API — 3-legged OAuth, publishing text, article or document posts to a member profile or company page, and pulling impressions, engagement and follower stats into a durable feedback record. NOT writing the post copy (that is linkedin-content)…
figranium-browser-automation
Build, run, validate, and schedule browser automations with Figranium. Use for rendered websites, repeatable browser workflows, extraction, downloads, forms, and tasks that need real browser interaction.
alice-goal
A session-goal tool that keeps a long-running task active across repeated work sessions. It can create, inspect, pause, resume, delay, or clear a goal.
alice-scheduler
A session scheduler that runs prompts automatically at set intervals or at times described by cron, a standard scheduling format. Each run starts as a separate LLM session.
alice-message
A skill for sending image and file attachments to the current session. It can use either a local file path or an existing Feishu attachment key.