agentmods.dev

CodeAppsDevelopmentStandard: Skill for Claude Code

.github/skills/mcp-server/SKILL.md

mcp-server is a skill for Claude Code, Codex from geekfujiwara/CodeAppsDevelopmentStandard. It costs 110 tokens per session (6,318 once invoked), scanned A, original, MIT.

A guide for building a custom MCP server on Azure Functions for Copilot Studio. MCP is a protocol that lets an AI agent discover and call tools, while Azure Functions runs those tools in the cloud.

In plain words
What is it for?
Use it to implement JSON-RPC tool endpoints, verify incoming Entra ID tokens, access services with a managed identity, seed data behind private endpoints, and test deployed routes.
Why use it?
It addresses the protocol, identity checks, private data access, deployment, and connection details needed to let an agent use internal databases, files, or business APIs.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

This is geekfujiwara/CodeAppsDevelopmentStandard's own configuration. It tells Claude Code and Codex how to work on CodeAppsDevelopmentStandard itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything CodeAppsDevelopmentStandard configures →

Needs its repository: it reads a path above its own folder, which exists only inside the repository. The line is [azure-infra スキル](../azure-infra/SKILL.md) に委譲する。本スキルは **MCP プロトコル層・Entra 認可・データ投入・.

not rated 78repo +3 changed 17d ago A scan SkillSpector: warn 110 tokens original MIT
View source ↗ geekfujiwara/CodeAppsDevelopmentStandard
Reuse

Borrowing it

Nothing to install: this file belongs to geekfujiwara/CodeAppsDevelopmentStandard. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/geekfujiwara/CodeAppsDevelopmentStandard/main/.github/skills/mcp-server/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/geekfujiwara/CodeAppsDevelopmentStandard

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mcp-server

README.md
[![agentmods](https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/mcp-server/github.svg)](https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/mcp-server)
Your own site
<a href="https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/mcp-server"><img src="https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/mcp-server/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mcp-server

Your own site · 80×15
<a href="https://agentmods.dev/skills/geekfujiwara/codeappsdevelopmentstandard/mcp-server"><img src="https://agentmods.dev/badge/skills/geekfujiwara/codeappsdevelopmentstandard/mcp-server.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 110 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 6,318 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 1 finding, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Privilege Escalation · line 50
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00110 $0.06318
Opus 5.5 $0.00044 $0.02527
Sonnet 5.5 $0.00022 $0.01264
Haiku 4.5 $0.00011 $0.00632

Measured 17d ago against content hash 24669c85fff5, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mcp-server scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.

The scan reads SKILL.md. This mod also ships 16 executable files (scripts/add_connector_redirect_uri.py, scripts/cleanup_admin_endpoints.py, scripts/configure_connector_oauth.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl では成功するのにコネクタ接続だけが失敗する。
.github/skills/mcp-server/SKILL.md · 318 lines

How it starts

The opening of the file, as written. The whole thing — 318 lines — stays where its author put it; the contents beside it link to each section on GitHub.

MCP Server 開発スキル

Copilot Studio のエージェントから 社内の業務データ（DB・ファイル共有・業務 API） を参照させるための 自前 MCP Server を Azure Functions 上に構築する。

役割分離: VNet / Private Endpoint / Managed Identity といった Azure 基盤の構成は azure-infra スキル に委譲する。本スキルは MCP プロトコル層・Entra 認可・データ投入・ Copilot Studio 登録 を担当する。

設計原則

原則 内容
データ層は非公開、コンピュート層は公開 SQL / Storage は Private Endpoint のみ。Function App の HTTP エンドポイントは公開する（Copilot Studio は SaaS からアウトバウンド接続するため、非公開にすると到達できない）
キーレス 受信 = Entra ID Bearer JWT 検証、送信 = Managed Identity。関数キー・接続文字列・共有キーを使わない
プロトコルは最小実装 initialize / tools/list / tools/call / ping のみ。SSE ストリーム・セッション管理は実装しないが、Streamable HTTP の規約には従う（Copilot Studio は Streamable のみ対応）
成否はルート実測で判定 デプロイの終了コードや ARM のメタデータを信用せず、HTTP プローブで実際のルートを確認する
非対話で完走 Azure 操作も auth_helper 経由（az login を手順に含めない）。→ 認証リファレンス

サブリファレンス

リファレンス 内容
MCP プロトコル最小実装 JSON-RPC 2.0 の実装と Streamable HTTP の必須要件、ツール定義の書き方
認証モデル 受信 JWT 検証 / 送信 Managed Identity の実装
Private 環境でのデータ投入 Private Endpoint 下でシードするための管理エンドポイントパターン
ファイルを読ませるツールの設計 サイドカーテキストレイヤー・パストラバーサル対策・出力上限・プロンプトインジェクション防御
SQL バックエンドのツール設計 パラメータ化クエリ・集計軸のホワイトリスト・トークン寿命と接続プール・読み取り専用権限
File / DB の認可とページ画像 本人認可、索引 ID、改訂・ページ照合、投入時画像キャッシュ、欠損404と実測ゲート
Copilot Studio への登録 オンボーディングウィザード、コピペ用 MD 生成、OAuth 接続。OpenAPI 方式もここ
Copilot Studio の DLP 診断 MCP ツールが DLP でブロックされた場合の読み取り診断と最小変更
admin スキル 明示依頼時・障害時だけの権限確認付き環境・DLP 診断、承認済みの最小修復
.env サンプル 本スキルのパラメータ
異常系・トラブルシュート 実際に踏んだ失敗と恒久対策

ワークフロー（正常系）

Read the full file on GitHub · 318 lines

Files

What ships with it

26 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 17d ago Changed 24669c85fff5
  2. 1mo ago Changed 5bc5a154ba1e
  3. 1mo ago Changed · +6 lines 1a8aedad1d56
  4. 1mo ago Changed · +3 lines 196eee73e6c9
  5. 1mo ago Changed · +27 lines 52a887142f76
  6. 2mo ago Changed · +14 lines 0cc0e1de2480
  7. 2mo ago Changed · +26 lines d618d191720b
  8. 2mo ago First seen · 242 lines · 110 tokens per session scan A 2dc2b94e975a

Subscribe to this mod's changes

mcp-server is a skill published in the GitHub repository geekfujiwara/CodeAppsDevelopmentStandard (78 stars, last pushed yesterday), licensed MIT. It adds 110 tokens to every session and 6,318 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.

Building agentsCloudDevOps and cloudarchitecture
Related

mcp-server compared with skills from other repositories

mcp-server next to 6 skills from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
mcp-servergeekfujiwara/CodeAppsDevelopmentStandardSkill78yesterdayMITA110Claude Code, Codex
architecture-diagrammateaix/mateclawSkill1.2kyesterdayApache-2.0A15Claude Code, Codex
aws-architecture-diagramautomateyournetwork/netclawSkill715yesterdayApache-2.0A43Claude Code, Codex
architecture-paradigm-microservicesathola/claude-night-marketSkill348yesterdayMITA33Claude Code
architecture-paradigm-serverlessathola/claude-night-marketSkill348yesterdayMITA37Claude Code
data-data-lakehousej4flmao/agent-skillsSkill383d agoMITA113Claude Code, Codex
data-lake-architecturej4flmao/agent-skillsSkill383d agoMITA170Claude Code, Codex