agentmods.dev

askit-build-mcp

askit-build-mcp is a skill for Claude Code from product-on-purpose/agent-skills-toolkit. It costs 62 tokens per session (716 once invoked), scanned B, original, Apache-2.0.

A builder for defining MCP servers, which let coding agents connect to external tools, data, or prompts through a common protocol.

In plain words
What is it for?
Adding or improving stdio or HTTP MCP servers, specifying commands or URLs and environment-variable secrets, and registering them in a plugin.
Why use it?
It avoids manually assembling server configuration and helps keep the plugin manifest connected to the portable server definition.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: mentions Codex.

Part of the agent-skills-toolkit plugin — 27 skills, 2 commands, 7 agents, 1 hook, 1 plugin shipped together

not rated 2repo yesterday B scan 62 tokens original Apache-2.0

Good fit Adding or improving stdio or HTTP MCP servers, specifying commands or URLs and environment-variable secrets, and registering them in a plugin.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp
View source ↗ product-on-purpose/agent-skills-toolkit product-on-purpose.github.io
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add product-on-purpose/agent-skills-toolkit --skill askit-build-mcp
Clone the repo
git clone --depth 1 https://github.com/product-on-purpose/agent-skills-toolkit

Made for: Claude Code.

Or install agent-skills-toolkit, the plugin that ships this one along with the rest of its 27 skills, 2 commands, 7 agents, 1 hook, 1 plugin.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for askit-build-mcp

README.md
[![agentmods](https://agentmods.dev/badge/skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp/github.svg)](https://agentmods.dev/skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp)
Your own site
<a href="https://agentmods.dev/skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp"><img src="https://agentmods.dev/badge/skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for askit-build-mcp

Your own site · 80×15
<a href="https://agentmods.dev/skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp"><img src="https://agentmods.dev/badge/skills/product-on-purpose/agent-skills-toolkit/askit-build-mcp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 62 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 716 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00062 $0.00716
Opus 5 $0.00031 $0.00358
Sonnet 5 $0.00012 $0.00143
Haiku 4.5 $0.00006 $0.00072

Measured 11d ago against content hash bc44e9fb6aa1, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade B, and why

askit-build-mcp scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

The scan reads SKILL.md. This mod also ships 3 executable files (examples/golden-1-stdio-server.mjs, examples/golden-2-http-server.mjs, examples/golden-3-resources-server.mjs), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads MCP configurationmediumAgent snooping

mcp.json carries server URLs and auth tokens; reading it lets a mod discover and abuse other integrations.

The root `.mcp.json` is the single authored source; the manifest pointers are generated, so never hand-edit a generated manifest. Secrets MUST be referenced from the environment, never committed (Standard sec 9). MCP is
skills/askit-build-mcp/SKILL.md · 32 lines

How it starts

The opening of the file, as written. The whole thing — 32 lines — stays where its author put it; the contents beside it link to each section on GitHub.

askit-build-mcp

Purpose

Author the plugin's MCP servers as one portable .mcp.json at the plugin root (the standard { "mcpServers": { ... } } format) and wire the per-target mcpServers manifest pointer. Two modes: create adds a server; improve fixes findings. MCP is Universal-tier: the server definition is portable and both Claude and Codex ingest a bundled .mcp.json referenced by the native manifest's mcpServers pointer (Standard sec 3.9). Authoring depth is in references/authoring-mcp.md. Follows the shared builder contract (../../docs/reference/builder-pattern.md).

When to use

When the user asks to add, scaffold, author, or improve an MCP server (tools, resources, or prompts via the Model Context Protocol) for a plugin.

create mode

  1. Brief interview: server name (kebab-case), transport (stdio or http), the command plus args (stdio) or the url (http), and any secrets as an env-var NAME (never an inline value). Skip the interview if these are already in context.
  2. Author or extend the root .mcp.json: add the server under mcpServers. Copy templates/mcp.json if the file does not exist yet.
  3. Register the server in library.json components.mcpServers as { name, version, tier, status }.
  4. Wire the per-target pointer: run node scripts/generators/gen-manifest.mjs <plugin-root> --write --target=all. Each native manifest gains "mcpServers": "./.mcp.json".
  5. Assess with node scripts/evaluate.mjs . --json and iterate to 0 errors (mcp-valid, the S3 components index, and the S6 per-target pointer).

improve mode

  1. Run node scripts/evaluate.mjs . --json and read the report.
  2. For each finding: a malformed server (mcp-valid) -> add the missing command or url; a committed secret (mcp-valid) -> replace the inline value with an env-var reference or bearer_token_env_var; a missing pointer (S6) -> regenerate the manifests; an undeclared server (S3) -> add it to components.mcpServers. For any other finding, read its message and apply the fix it states.
  3. Re-run evaluate to confirm.

Read the full file on GitHub · 32 lines

Files

What ships with it

9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 11d ago First seen · 32 lines · 62 tokens per session scan B bc44e9fb6aa1

Subscribe to this mod's changes

askit-build-mcp is a skill published in the GitHub repository product-on-purpose/agent-skills-toolkit (2 stars, last pushed yesterday), licensed Apache-2.0. It adds 62 tokens to every session and 716 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it B with 1 finding (reads mcp configuration). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Backend and APIsBuilding agentsClaude Codeagent-skillscodexconformancepluginskills
Related

Other skills, from other repositories

data-manager-api-setup

Guides developers through client library installation and authentication setup steps for the Data Manager API. Use this skill when a user is getting started with the Data Manager API and needs to setup their local environment, install the client library, or setup access to the API. Don't use for implementing audience…

google/skills · 86 tokens

workers-best-practices

Cloudflare Workers best practices for production applications. Use when writing, reviewing, or configuring Workers.

cloudflare/skills · 25 tokens

new

Create a new project to start development quickly.

clacky-ai/openclacky · 10 tokens

flow-next-impl-review

Carmack-level implementation review of changes via the configured backend. Use when asked to review code or a diff in a flow-next repo.

gmickel/flow-next · 34 tokens

flow-next-resolve-pr

Resolve PR review feedback. Fetches unresolved threads, triages, fixes, replies and resolves via GraphQL. Use when asked to address review comments.

gmickel/flow-next · 36 tokens

skd-edit

A focused editor for 1C data composition schemas, the report definitions that describe queries, fields, filters, totals, and parameters. It changes an existing Template.xml file through specific operations.

Nikolay-Shirokov/cc-1c-skills · 55 tokens