@skill-hub/mcp-server

MCP Server for SkillHub - Discover, search, and install Claude Code Skills directly from your AI assistant.

Features

MCP Tools

| Tool | Description | |------|-------------| | search_skills | Semantic search for skills using natural language | | get_skill_detail | Get detailed skill information, evaluation, and content | | install_skill | Generate installation commands for bash/PowerShell | | browse_catalog | Browse skill catalog with filters and sorting | | recommend_skills | Get context-based skill recommendations | | search_registry_skills | Search RedSkill upstream metadata without importing content | | resolve_registry_skill | Resolve one RedSkill distribution by exact identifier | | import_registry_skill | Preview, then confirm a normalized private import pending separate review |

MCP Resources

| Resource | Description | |----------|-------------| | skillhub://categories | List of all skill categories | | skillhub://popular | Top 10 popular skills | | skillhub://recent | Recently added skills |

Initial RedSkill imports are private forks and remain pending. The MCP server never runs RedSkill's bootstrap or native install command; automated delivery is available only when an exact canonical artifact has separately passed the full-artifact security gate.

Installation

Prerequisites

1. Get your API Key from SkillHub Developer Dashboard
2. Configure Claude Code or Claude Desktop with your key

Claude Code (CLI)

Add to ~/.claude/settings.json:

{
  "mcpServers": {
    "skillhub": {
      "command": "npx",
      "args": ["-y", "@skill-hub/mcp-server@latest"],
      "env": {
        "SKILLHUB_API_KEY": "your-api-key-here"
      }
    }
  }
}

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "skillhub": {
      "command": "npx",
      "args": ["-y", "@skill-hub/mcp-server@latest"],
      "env": {
        "SKILLHUB_API_KEY": "your-api-key-here"
      }
    }
  }
}

Manual Installation

npm install -g @skill-hub/mcp-server
SKILLHUB_API_KEY=your-api-key skillhub-mcp

The server checks npm before opening the MCP stdio transport. When a newer release exists, it automatically hands the same stdio session to the exact newer @skill-hub/mcp-server release. Registry/download failures and a 30-second startup timeout fall back to the installed server. The handoff forwards only the SkillHub/provider and operating-system environment variables the server needs, not unrelated cloud credentials. Set SKILLHUB_DISABLE_AUTO_UPDATE=1 only for intentionally pinned or offline environments.

Usage Examples

Once configured, you can use SkillHub directly in your AI conversations:

Search for Skills

User: "Find me a skill for processing PDF files"
AI: [Calls search_skills] Found 3 relevant skills...

Get Skill Details

User: "Tell me more about the pdf-processor skill"
AI: [Calls get_skill_detail] Here's the detailed information...

Install a Skill

User: "Install the pdf-processor skill"
AI: [Calls install_skill] Here are the installation commands...

Browse Catalog

User: "Show me the top-rated skills in the 'Development' category"
AI: [Calls browse_catalog] Here are the top development skills...

Get Recommendations

User: "I'm working on a code review automation project"
AI: [Calls recommend_skills] Based on your context, I recommend...

Import from RedSkill

User: "Find and import the RedSkill bigw-skill-2"
AI: [Calls resolve_registry_skill, then import_registry_skill with confirm=false]
User: "Confirm the import"
AI: [Calls import_registry_skill with confirm=true and the expected_sha256 returned by preview]

RedSkill is a distribution registry, not a target agent. Registry tools never run curl, shell installers, or the redskill command. A confirmed import must reach SkillHub's ready security state before install_skill can write files. Confirmation is bound to the previewed SHA-256; if the upstream bundle changes, the import fails and must be previewed again.

Environment Variables

| Variable | Description | Required | |----------|-------------|----------| | SKILLHUB_API_KEY | Your SkillHub API Key | Yes | | SKILLHUB_API_URL | SkillHub API base URL | No (default: https://www.skillhub.club/api/v1) | | SKILLHUB_TELEMETRY | Set to off, false, or 0 to disable anonymous telemetry | No |

Privacy-friendly telemetry

The MCP server records best-effort product events so SkillHub can measure tool reliability and the RedSkill search → resolve → import → install funnel. It uses a random UUID stored at ~/.skillhub/mcp-attribution-id and a new random session UUID for each server process. Neither identifier is derived from the device, hostname, username, network address, or other hardware data.

Events include the MCP package version, operating system/architecture, tool name, success/error result, duration, and non-content RedSkill funnel fields. Copied RedSkill prompts and URLs are not included in RedSkill event payloads. Delivery is asynchronous, bounded by a short timeout, and never changes a tool result. Set SKILLHUB_TELEMETRY=off (or SKILLHUB_TRACKING=false or DO_NOT_TRACK=1) in the MCP server environment to opt out. When opted out, no telemetry identity file is created and SkillHub API requests omit the anonymous and session identifiers.

Get Your API Key

1. Visit skillhub.club
2. Sign in or create an account
3. Go to Developer Dashboard
4. Click "New Key" to generate your API key
5. Copy the key and add it to your MCP configuration

Development

# Clone the repo
cd packages/mcp-server

# Install dependencies
npm install

# Run in development mode
npm run dev

# Build for production
npm run build

License

MIT