Borrowing it
Nothing to install: this file belongs to taichuy/1flowbase. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/taichuy/1flowbase/main/.agents/skills/mcp-configuration-development/SKILL.mdgit clone --depth 1 https://github.com/taichuy/1flowbaseWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/taichuy/1flowbase/mcp-configuration-development)<a href="https://agentmods.dev/skills/taichuy/1flowbase/mcp-configuration-development"><img src="https://agentmods.dev/badge/skills/taichuy/1flowbase/mcp-configuration-development/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/taichuy/1flowbase/mcp-configuration-development"><img src="https://agentmods.dev/badge/skills/taichuy/1flowbase/mcp-configuration-development.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00093 | $0.01890 |
| Opus 5.5 | $0.00037 | $0.00756 |
| Sonnet 5.5 | $0.00019 | $0.00378 |
| Haiku 4.5 | $0.00009 | $0.00189 |
Grade A, and why
mcp-configuration-development scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
MCP Configuration Development
Goal
把当前 1flowbase 源码表达的用户任务与可执行接口，转换为 Agent 可逐层发现、理解并调用的 MCP Virtual UI。GUI 与后端产品源码只作为只读取证；只修改完成任务所需的 MCP 配置数据，不把配置缺口伪装成产品代码任务。
Source of Truth
- 从 GUI 路由、页面、动作和状态文案提取用户目标、领域术语与操作顺序。
- 从 backend interface catalog、DTO、领域状态与执行入口确认可调用契约。
- 从现有 MCP catalog 确认实例、Group、Tool、Binding 和 discovery policy 的真实状态。
- 以当前源码为原始说明文档，不维护会随产品漂移的静态应用能力清单。
Read by Change
| 任务 | 必要阅读 |
|---|---|
| 首次建立领域目录或重组任务路径 | Virtual UI 与 Source Routing；配置前读 Configuration Contract 的相关对象 |
| 已有 Tool / mapping / 描述的局部修复 | 先 mcp_get 与当前 interface / DTO，再读 Configuration Contract 对应字段；任务语义不明时才补 Source Routing |
| Group / Binding / discovery 调整 | Virtual UI 的分组与复用规则，加 Configuration Contract 对应对象 |
| 动态接口或不熟悉的组合契约 | 读 Configuration Contract 的组合契约与 Acceptance 的动态接口 / 缺口分类，不默认读取其他领域 |
| 验收 | Acceptance 的完成判定与命中变化的检查项；保留目标路径的 list/get/call 和关键失败边界 |
本轮写集 ⊆ 已授权实例内的 MCP 配置对象
阻断某 Tool ⇒ 暂停该 Tool 及依赖路径；独立路径可继续
范围缩小只减少无关阅读，不免除当前 contract、并发状态和写后回读核对。
Workflow
以下步骤按缺口应用：局部修复可复用已核实的 GUI 任务路径与 canonical 目录，只检查变化影响的 contract 和引用；不重新执行目录设计或创建批次。新领域建模才完整走任务还原与目录设计。批量写入先验证代表性 Tool，单项修改直接验证该项；两者都保留并发检查、写后回读与目标 list/get/call 证据。
- 确定一个边界清晰的用户任务范围，列出起点、目标结果和必要前置状态。
- 沿 GUI 源码还原人类完成该任务的路径，只提取用户目标和领域词，不复制纯展示组件树。
- 沿 backend/interface catalog 找到每个动作的可绑定接口，核对参数、结果、风险、权限和状态约束。
- 通过渐进列表、关键词和单项读取盘点现有 MCP catalog；只有结果规模可控时才读取完整 catalog，先判断复用、修复或新增。
- 设计 canonical Virtual UI：按用户目标组织 Group 路径，让一个业务能力只有一个规范入口；必要时用搜索和简短描述提高可发现性。
- 形成有限变更账本，记录计划创建、复用、更新和删除的 Tool、Group、Binding、mapping 与 policy，以及每项回滚身份；这些对象是本 Skill 的完整允许写集。
- 先验证一个代表性 Tool 的创建或更新与
mcp_get；通过后按Tool → Group → Binding → policy应用，避免先留下空目录。 - 在每项写入前复核接口仍可绑定、目标记录仍存在且当前值未并发变化；写入后重新读取确认落库结果。
- 创建会动态注册后续接口的资源时，先完成创建与生命周期切换，再重新发现 interface catalog；只为已经出现的动态接口配置 canonical Tool。
- 用 Agent 视角依次验证
mcp_list → mcp_get → mcp_call，覆盖成功路径和至少一个关键失败边界。 - 输出覆盖表、未覆盖能力和原因；区分配置、业务接口与运行时缺口。中途停止时按账本回滚本轮无消费者的半成品，不越界修代码。
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +11 lines 3e89d117d88a
- 2mo ago First seen · 74 lines · 93 tokens per session scan A 0550ccf60599
mcp-configuration-development is a skill published in the GitHub repository taichuy/1flowbase (284 stars, last pushed today), licensed Apache-2.0. It adds 93 tokens to every session and 1,890 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
unified-ai-gateway
Operate and evaluate Unified AI System through fifteen governed MCP tools, including provider-free prompt enhancement, while preserving fake-provider, authorization, and evidence boundaries.
llm-pipeline
Use when wiring several LLM calls into a production flow: typed contracts between steps, a router/gateway so 429s, timeouts and outages fail over instead of taking you down, and cost control via caching, model tiers and abort caps. NOT single-prompt wording (that is prompt-engineering), NOT a model-driven tool loop…
zcode-usage-sync
A data export tool that copies ZCode's local record of model usage into 10Router, a service that tracks usage statistics.
10router-add-provider
Self-serve adding a custom OpenAI/Anthropic-compatible upstream provider (baseUrl + its own API key + models) to a running 10Router — no source change, no repackage, live immediately. Use when the user wants to register a self-hosted gateway / sk-xxx / baseUrl as a routable node, or an agent needs to add a custom…
10router-web-search
Web search via 10Router /v1/search using Tavily / Exa / Brave / Serper / SearXNG / Google PSE / Linkup / SearchAPI / You.com / Perplexity. Use when the user wants to search the web, look up information, find articles, or query a search engine.
10router
Entry point for 10Router — local/remote AI gateway with OpenAI-compatible REST for chat, image, TTS, embeddings, web search, web fetch. Use when the user mentions 10Router, TENROUTERURL, or wants AI without writing provider boilerplate. This skill covers setup + indexes capability skills; fetch the relevant capability…