Skillsmith — Claude Code MCP server: a registry for agent skills
A team-scoped registry for agent skills: publish with versions, scan for risk, track what actually gets used. Useful once more than one team ships skills.
claude mcp add skillsmith -- npx -y @skillsmith/mcp-serverWhat Skillsmith does
Skillsmith keeps agent skills in a registry scoped to your team. Versions are immutable, so drift between installs shows up instead of staying silent. Skills that get flagged or look suspicious are quarantined pending a security review, and stale ones can be deprecated rather than left to rot in someone's repo.
It runs as an MCP server. Claude takes a single command; Cursor and Copilot get JSON snippets, Codex gets TOML. In Cursor the bundled Node can't resolve packages through npx and throws ENOENT, so you point command at the installed binary instead: run npm install -g @skillsmith/mcp-server, then which skillsmith-mcp and paste that path. Cursor 2.4+ and Node >=22.22 are required.
An API key is optional. Without one the server falls back to a built-in public key and runs at Community rate, sharing a 30/min bucket per endpoint with every other keyless client. A key raises the limits and turns on usage tracking; get one through skillsmith login or the account page. Put the key in your MCP client settings, not in chat.
What it helps with
- see which version of a skill is installed where
- send a suspicious skill to review before anyone installs it
- deprecate a stale skill instead of deleting it quietly
- track which skills the team actually uses
- share one skill set across several agents
Example prompts for the agent
- Search the registry for testing skills and list their versions
- Publish this skill to our team registry
- Show me which skills we've deprecated or stopped maintaining
How to install Skillsmith
Platform CLI
claude mcp add skillsmith -- npx -y @skillsmith/mcp-serverPlatform CLI
codex mcp add skillsmith -- npx -y @skillsmith/mcp-serverConfig file
{
"mcpServers": {
"skillsmith": {
"command": "npx",
"args": [
"-y",
"@skillsmith/mcp-server"
]
}
}
}Config file
{
"servers": {
"skillsmith": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@skillsmith/mcp-server"
]
}
}
}Platform CLI
gemini mcp add skillsmith npx -y @skillsmith/mcp-serverStep by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about Skillsmith
How do I install Skillsmith in Claude Code?
Run claude mcp add skillsmith -- npx -y @skillsmith/mcp-server, then restart Claude.
What does Skillsmith do?
It keeps a registry of agent skills with immutable versions, quarantine for flagged ones, and deprecation for stale ones. It also tracks what the team uses.
Do I need an API key for Skillsmith?
No. Without one the server uses a built-in public key at Community rate — 30 requests per minute per endpoint, shared across all keyless clients. Your own key raises the limits and enables usage tracking.
