A built-in client for connecting a coding agent to MCP servers. MCP is a standard way for an AI tool to discover and use capabilities provided by other programs or services.

Use it to connect local or remote MCP servers, discover their tools, and make those tools available in agent sessions.

It lets the agent access external tools such as files, GitHub, databases, and APIs through one connection system, with automatic reconnection and security filtering.

native-mcp — Skill for Claude Code and Codex by graniet

Install

Getting it into your agent

There is no command for this one: it runs only inside a plugin, and the catalogue could not identify which plugin ships it. The source is linked below.

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/graniet/kheish/native-mcp.svg)](https://agentmods.dev/skills/graniet/kheish/native-mcp)

Your own site

<a href="https://agentmods.dev/skills/graniet/kheish/native-mcp"><img src="https://agentmods.dev/badge/skills/graniet/kheish/native-mcp.svg" alt="Measured on agentmods" height="20"></a>

Per session 50 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 3,137 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 86% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00050	$0.03137
Opus 5	$0.00025	$0.01569
Sonnet 5	$0.00010	$0.00627
Haiku 4.5	$0.00005	$0.00314

Measured 7d ago against content hash 28213ffea251, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-06, from the pricing page.

Security

Grade A, and why

native-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

86% identical to native-mcp — 103 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/mcp/native-mcp/SKILL.md · 388 lines

How it starts

The opening of the file, as written. The whole thing — 388 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Kheish Compatibility

This skill is repo-local and stays inactive until explicitly activated.

When the original instructions refer to legacy tool names, use these Kheish mappings:

terminal => bash
web_extract => web_fetch, plus web_search when discovery is needed
search_files => grep_search and glob_search
browser_* tools require a browser-capable surfaced tool or MCP; if none is available, use the closest available surface and say so explicitly

When the instructions mention local helper files, resolve them from ${KHEISH_SKILL_DIR}.

Native MCP Client

Kheish has a built-in MCP client in the daemon. It connects to MCP servers at daemon startup, discovers their tools, and surfaces them as first-class runtime tools when the current session is allowed to see them.

When to Use

Use this whenever you want to:

Connect to MCP servers and use their tools from within Kheish
Add external capabilities (filesystem access, GitHub, databases, APIs) via MCP
Run local stdio-based MCP servers (npx, uvx, or any command)
Connect to remote HTTP/StreamableHTTP MCP servers
Have MCP tools discovered by the daemon and exposed to sessions that are allowed to use them

For ad-hoc, one-off MCP tool calls from the terminal without configuring anything, see the mcporter skill instead.

Prerequisites

mcp Python package -- optional dependency; install with pip install mcp. If not installed, MCP support is silently disabled.
Node.js -- required for npx-based MCP servers (most community servers)
uv -- required for uvx-based MCP servers (Python-based servers)

Install the MCP SDK:

pip install mcp
# or, if using uv:
uv pip install mcp

Quick Start

Create an MCP config file for the daemon:

[mcp_servers.time]
command = "uvx"
args = ["mcp-server-time"]

Start the daemon with that config:

kheish-daemon serve --mcp-config ./mcp-config.toml

On startup the daemon will:

Connect to the server
Discover available tools
Register them with the prefix mcp__time__*
Expose them to sessions whose effective capability scope allows them

Read the full file on GitHub · 388 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

7d ago First seen · 388 lines · 50 tokens per session scan A 28213ffea251

Subscribe to this mod's changes

native-mcp is a skill published in the GitHub repository graniet/kheish (227 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 50 tokens to every session and 3,137 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. It is 86% identical to native-mcp, differing in 103 lines, and is treated as a copy.

Building agents agent ai ai-agent ai-agents anthropic framework

hive.pdf

Read, write, merge, split, rotate, watermark, encrypt, and OCR PDF files using Python (pypdf, pdfplumber, reportlab, pypdfium2) and command-line tools (poppler-utils, qpdf). Use when the user asks to extract text/tables/images from a PDF, create or modify a PDF, combine or split PDFs, OCR a scanned PDF…

aden-hive/hive · 98 tokens

baby-sit

Monitor a GitHub pull request until CI is green, diagnose failures, and rerun only evidence-backed flaky GitHub Actions jobs.

langchain-ai/open-swe · 30 tokens

continual-learning

Nightly refinement of an existing per-repo review-style prompt using this reviewer's own finding outcomes. Read confirmed (resolved-by-commit / thumbs-up) and dismissed (thumbs-down) findings, promote the bug patterns the team actually fixes, demote the false-positive patterns, reconcile against the current prompt…

langchain-ai/open-swe · 89 tokens

cascadeflow

Use when building, extending, or debugging AI agents with cascadeflow (agent runtime intelligence layer) — installing cascadeflow (Python) or @cascadeflow/core/@cascadeflow/langchain (TypeScript); using CascadeAgent, ModelConfig, harness APIs (cascadeflow.init, cascadeflow.run, @agent from cascadeflow.harness…

lemony-ai/cascadeflow · 231 tokens

hive.note-taking

Maintain a free-form scratchpad of decisions, extracted values, and open questions so context pruning doesn't lose anything you still need.

aden-hive/hive · 30 tokens

ha-skill-creator

Create, edit, improve, or audit Hope Agent skills. Use when the user wants to: (1) create a new skill from scratch, (2) edit or improve an existing skill, (3) review or clean up a SKILL.md file, (4) run evaluations to test skill effectiveness, (5) optimize skill descriptions for better trigger accuracy. Trigger…

shiwenwen/hope-agent · 106 tokens