claude

mcp-baseline

Install a guarded read-only MCP baseline with declared authority and independent trust-boundary review.

0 on GitHubby Youdedev1.0.1MITupdated today
/

Plugin mcp-baseline from marketplace youdede-toolkit in youdede/toolkit. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use and it starts local MCP servers. The exact commands are listed below; read them before installing.

What it installs

Skills (2)

  • author-mcp-server-contract

    Design or review an MCP server’s resources, prompts, tools, schemas, transport, authentication, pagination, errors, and authority boundaries before implementation. Use when exposing a real system to coding agents through the Model Context Protocol.

  • review-agent-tool-boundaries

    Review an agent, MCP server, plugin, or tool workflow for prompt-injection paths, identity propagation, least privilege, data exposure, confirmation, and failure safety. Use before granting an agent access to real systems or expanding tool permissions.

Subagents (1)

  • mcp-trust-boundary-reviewer

    Map an MCP server's tools, resources, prompts, transports, and credentials against their handler code and return paths where untrusted input reaches a capability or sensitive sink without adequate control. Use when the parent supplies MCP server source files, tool schemas, or transport and credentia

MCP servers (3)

  • youdede-allowlisted-fetch-readonly

    runs: node ${CLAUDE_PLUGIN_ROOT}/.youdede/mcp/runtime.mjs --profile ${CLAUDE_PLUGIN_ROOT}/.youdede/mcp/allowlisted-fetch-readonly/server.json

  • youdede-repository-git-readonly

    runs: node ${CLAUDE_PLUGIN_ROOT}/.youdede/mcp/runtime.mjs --profile ${CLAUDE_PLUGIN_ROOT}/.youdede/mcp/repository-git-readonly/server.json

  • youdede-workspace-files-readonly

    runs: node ${CLAUDE_PLUGIN_ROOT}/.youdede/mcp/runtime.mjs --profile ${CLAUDE_PLUGIN_ROOT}/.youdede/mcp/workspace-files-readonly/server.json

Hooks (1)

  • PreToolUse

    node "${CLAUDE_PLUGIN_ROOT}/hooks/youdede/mcp-capability-drift-guard.mjs"

View source on GitHub youdede.studio

More from youdede/toolkit

All 13 plugins →

Youdede toolkit

codex

169 coding-agent skills with 575 declared refusal boundaries.

169 skills

0

accessibility-assurance

claude

Plan, enforce, and independently verify accessible interface behavior from source evidence.

4 skills · 2 agents · hooks

0

reviewable-change

claude

Prepare bounded code changes, obtain independent review, and prevent oversized unreviewable commits.

3 skills · 1 command · 1 agent · hooks

0

daily-driver

claude

Deliver bounded incremental changes, prepare review evidence, and prevent unreviewable diffs.

2 skills · 1 command · 1 agent · hooks

0

release-readiness

claude

Build an evidence-backed release decision and stop publication from unsafe repository state.

1 skill · 1 command · 2 agents · hooks

0

secure-agent-boundaries

claude

Design agent integrations, review their trust boundary, and block obvious data-exposure paths.

2 skills · 2 agents · hooks

0

Maintain mcp-baseline?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins13 plugins