Assess MCP server.json submissions for compliance, security, and registry suitability.
npx skills add https://github.com/stacklok/toolhive-catalog --skill mcp-review
Please help me install this Agent Skill. Skill: mcp-review Source: https://github.com/stacklok/toolhive-catalog/tree/main/.claude/skills/mcp-review Command: npx skills add https://github.com/stacklok/toolhive-catalog --skill mcp-review
This MCP Review skill provides structured guidance to evaluate MCP server.json submissions for compliance, security, and quality, ensuring submissions meet ToolHive registry standards and avoid incorrect entries.
Provide a concise, formal review of a server.json submission focusing on compliance and security.
High-intent search queries and answers about installing and using this skill.
Reviewing a server.json submission for MCP registry compliance involves checking required fields, extension-key matching against the identifier, namespace alignment, tier consistency, provenance presence, and documentation quality to meet ToolHive standards.
Security and provenance checks for MCP server entries involve verifying provenance presence, assessing security considerations, and ensuring the submission meets registry criteria for acceptance.
Auditing existing MCP server configurations for ToolHive registry quality requires evaluating server.json files against compliance criteria, checking namespace and extension alignment, and verifying tier consistency and documentation standards.
Yes, the MCP review process enforces namespace alignment and extension-key matching against the identifier to ensure server.json submissions maintain consistency across the ToolHive registry.
Acceptance criteria for new MCP server entries in the ToolHive registry include required fields, correct extension-key matching, tier consistency, provenance presence, and sufficient documentation quality to pass compliance and security assessment.
Yes, you can evaluate PR updates for MCP server entries by assessing changes against registry compliance criteria, checking namespace and extension alignment, and providing actionable feedback on security and provenance.
pulsemcpGenerate and validate MCP Registry server.json files against the latest schema.
stacklokDraft RFC documents using the THV template for ToolHive repositories.
PsychQuantAutomates MCP Server project publishing and updating to registries.
andisabAutomate security scanning and policy validation for Infrastructure as Code resources.
