claude

mcp-server-smith

Scaffold, audit, and harden MCP servers for the MCP 2026-07-28 spec: stateless Streamable HTTP core, OAuth 2.1 / OIDC authorization, versioned extensions, tool design, and a security review that catches confused-deputy, token-passthrough, and prompt-injection risks.

3 on GitHubby Sigistryv1.0.0MITupdated yesterdaymcp
/

Plugin mcp-server-smith from marketplace sigistry in sigistry/marketplace. Commands read from the repo's manifest — yesterday.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (4)

  • mcp-2026-07-28

    This skill should be used when the user mentions "MCP 2026-07-28", "MCP spec", "Model Context Protocol spec", "stateless MCP", "Streamable HTTP", "HTTP+SSE", "MCP transport", "MCP lifecycle", "MCP capabilities", "MCP Apps", "MCP Tasks", "versioned extensions", "protocolVersion", or building/upgradin

  • mcp-authorization

    This skill should be used when the user mentions "MCP auth", "MCP OAuth", "MCP authorization", "OAuth 2.1", "OIDC", "access token validation", "audience", "resource server", "protected resource metadata", "token passthrough", "confused deputy", "Entra", "Okta", or securing a remote MCP server's iden

  • mcp-server-security

    This skill should be used when the user mentions "MCP security", "MCP server security", "prompt injection", "tool poisoning", "confused deputy", "token passthrough", "MCP threat model", "command injection", "SSRF", "rate limiting MCP", "MCP CORS", or hardening a Model Context Protocol server against

  • mcp-tool-design

    This skill should be used when the user mentions "MCP tool", "tool design", "tool schema", "inputSchema", "tool annotations", "readOnlyHint", "destructiveHint", "tool description", "resources vs tools", "MCP prompts", or designing the tools/resources/prompts an MCP server exposes to an agent. It pro

Slash commands (3)

  • /mcp-server-smith:mcp-audit

    Audit an MCP server for 2026-07-28 spec compliance, tool design, and security, no server started

  • /mcp-server-smith:mcp-migrate

    Migrate an MCP server to the 2026-07-28 stateless core, transport, lifecycle, and auth

  • /mcp-server-smith:mcp-scaffold

    Scaffold a new MCP server, stateless Streamable HTTP core, 2026-07-28 spec, TS or Python

Subagents (2)

  • mcp-migrator

    Use this agent to migrate a Model Context Protocol (MCP) server to the MCP 2026-07-28 specification, swapping the removed HTTP+SSE transport for the stateless Streamable HTTP core, making per-session state stateless, and bringing lifecycle, capabilities, and OAuth/OIDC authorization up to spec, whil

  • spec-compliance-auditor

    Use this agent to statically audit a Model Context Protocol (MCP) server for MCP 2026-07-28 spec compliance, tool-design quality, and security, without starting the server. Trigger it when the user wants to know whether an MCP server is up to spec, is still on the removed HTTP+SSE transport, is stat

Hooks (1)

  • PostToolUse

    node "${CLAUDE_PLUGIN_ROOT}/hooks/mcp-detect.mjs"

View source on GitHub sigistry.com

More from sigistry/marketplace

All 30 plugins →

Monitoring and evaluation jobs on your project folder: twelve job skills (evaluation questions, question-method alignment, evaluation TOR drafts, indicator reference sheets, measurement feasibility, M&E plan drafts, progress evidence, findings to actions, results chain alignment, sampling plans, data quality assessment plans, baseline planning), three workflow packs and nineteen commands that cross-reference logframes, M&E plans, proposals, reports and TORs and write editable Markdown with source traceability.

24 skills · 19 commands

3

me-review

claude

Twelve structured monitoring and evaluation document reviews: logframes, theories of change, indicators, evaluation TORs, M&E plans, proposals, sampling plans, surveys, baseline reports, progress reports, data quality assessments, and evaluation reports. Each returns section-by-section PASS/PARTIAL/FAIL ratings, a summary verdict, and prioritized recommendations.

36 skills

3

ballast

claudecodex

Builds up to a goal in a field you have no expertise in: splits it into the foundations that goal actually needs, mobilizes what you already hold, learns what is missing, and leaves every solved path behind for the next goal. Nothing is called done until a check passes.

16 skills · hooks

3

Triages failing GitHub Actions runs, hardens Dockerfiles, pre-flights Kubernetes manifests before they reach the cluster, and drafts blameless postmortems from incident evidence

4 skills · 5 commands · 3 agents · hooks

3

Goes past detecting accessibility and localization issues to fixing them: cross-element ARIA and keyboard-focus remediation, color-contrast rewrites, hardcoded-string extraction, ICU MessageFormat correctness, and RTL readiness

3 skills · 5 commands · 2 agents · hooks

3

A repo-native toolchain for LLM apps: scaffolds eval suites, red-teams for prompt injection, hardens structured-output reliability, and audits token cost, riding promptfoo/DeepEval/Pydantic rather than replacing them

4 skills · 4 commands · 2 agents · hooks

3

Similar plugins

claude-mem

claudecodex

Persistent memory for Claude Code: the next session starts where the last one left off.

29 skills · 1 MCP server · hooks

thedotmack/claude-mem 116,618

context7

claudecodex

Up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your coding agent's context.

1 MCP server

upstash/context7 64,709

mempalace

claudecodex

AI memory system — mine projects and conversations into a searchable palace. 47 MCP tools, auto-save hooks, guided setup.

3 skills · 6 commands · 1 MCP server · hooks

MemPalace/mempalace 60,536

Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer

8 skills · 1 MCP server

ChromeDevTools/chrome-devtools-mcp 55,181

gitnexus

claudecodex

Code intelligence powered by a knowledge graph. Provides execution flow tracing, blast radius analysis, and augmented search across your codebase.

12 skills · 1 MCP server · hooks

abhigyanpatwari/GitNexus 48,482

daisyUI Blueprint MCP server - (Needs paid license)

saadeghi/daisyui 42,821

Maintain mcp-server-smith?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins30 plugins