Agent skill

MCP Dynamic Orchestrator

by secondsky in secondsky/claude-skills

Dynamic MCP server discovery and code-mode execution via central registry.

MITAuto-check passedAgent Workflows

Install MCP Dynamic Orchestrator

skills CLI
$ npx skills add secondsky/claude-skills --skill mcp-dynamic-orchestrator -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install secondsky/claude-skills mcp-dynamic-orchestrator --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/secondsky/claude-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins/mcp-dynamic-orchestrator/skills/mcp-dynamic-orchestrator .claude/skills/mcp-dynamic-orchestrator && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
mcp-dynamic-orchestrator
GitHub stars
227
Token cost
~1.5k tokens
SKILL.md length
532 words
Files
8 (incl. scripts, references)
Skills in repo
169
Repo updated
First seen
Licence
MIT

At a glance

Dynamic MCP server discovery and code-mode execution via central registry.

  • Works in 3 steps: Discover via list_mcp_capabilities. → Inspect via describe_mcp to see… → Use those operations via execute_mcp_code.
  • Multiple MCP integrations
  • SKILL.md covers Overview, Cloudflare MCP example, How to use and Rules, plus 2 more sections
  • Runs TypeScript scripts from its folder; reaches docs.mcp.cloudflare.com

What it does

MCP Dynamic Orchestrator is an agent skill from secondsky/claude-skills. Dynamic MCP server discovery and code-mode execution via central registry. Use for multiple MCP integrations, tool discovery, progressive disclosure, or encountering MCP context bloat, changing server sets, large tool sets.

Its SKILL.md is about 1.5k tokens, which your agent loads only when the skill is triggered. The skill folder holds 9 other files, including scripts and reference files (for example `references/mcp-protocol.md`, `references/registry-schema.md` and `references/security-model.md`).

It sits in Agent Workflows, covering MCP servers. It works with Model Context Protocol, Cloudflare and TypeScript. The repository describes itself as: Production-ready skills for Claude Code CLI - Cloudflare, React, Tailwind v4, and AI integrations. The licence is MIT.

When your agent uses it

  • Multiple MCP integrations
  • Progressive disclosure
  • Encountering MCP context bloat
  • Changing server sets

Example prompts

  • “/mcp-dynamic-orchestrator”

Requirements

  • Node.js
  • Pre-approved tools (allowed-tools): list_mcp_capabilities, describe_mcp, execute_mcp_code

Workflow steps

3 steps, taken from the first numbered list in SKILL.md.

  1. Discover via list_mcp_capabilities.
  2. Inspect via describe_mcp to see available operations.
  3. Use those operations via execute_mcp_code.

What it can do on your machine

Read from SKILL.md and the folder at commit 8837836. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • list_mcp_capabilities
    • describe_mcp
    • execute_mcp_code

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 3 files in scripts/ (TypeScript), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Hosts in commands or code, which the agent is likely to contact:

    • docs.mcp.cloudflare.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

MCP Dynamic Orchestrator loads about 1.5k tokens when it runs, and up to ~21k if it reads all its reference files. Until then it costs about 62 tokens; SKILL.md has 532 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~62
When it runs · the whole SKILL.md, loaded when a task matches
~1.5k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~21k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from secondsky/claude-skills at commit 8837836, republished under its MIT licence (© secondsky). 532 words, ~1,481 tokens.

Download SKILL.mdSave it as .claude/skills/mcp-dynamic-orchestrator/SKILL.md (or your agent's skills folder). This skill also uses 7 other files; get the full folder from GitHub.
name
mcp-dynamic-orchestrator
description
Dynamic MCP server discovery and code-mode execution via central registry. Use for multiple MCP integrations, tool discovery, progressive disclosure, or encountering MCP context bloat, changing server sets, large tool sets.
allowed-tools
list_mcp_capabilities, describe_mcp, execute_mcp_code
metadata.keywords
MCP, code-mode, registry, dynamic tools, tool discovery, progressive disclosure
license
MIT

Overview

Use this skill to:

  • Discover which MCP servers are available and what they are for.
  • Inspect a specific MCP's capabilities without loading all tool schemas.
  • Execute TypeScript/JavaScript that calls MCP tools via generated mcp-clients/* modules.

If no MCP servers are configured, list_mcp_capabilities will respond with an empty list and a message pointing to skills/mcp-dynamic-orchestrator/mcp.registry.json so the user can add MCP entries.

This skill reads from mcp.registry.json, so adding an MCP entry there (for example the Cloudflare MCP) automatically makes it discoverable without changing tool wiring.

Cloudflare MCP example

The Cloudflare MCP server can be configured in mcp.registry.json like this:

json
{
  "id": "cloudflare",
  "title": "Cloudflare platform MCP",
  "summary": "Interact with Cloudflare's MCP endpoint for documentation, examples, and platform operations exposed via the official Cloudflare MCP server.",
  "mcp": {
    "transport": "stdio",
    "command": "npx",
    "args": [
      "mcp-remote",
      "https://docs.mcp.cloudflare.com/sse"
    ]
  },
  "domains": ["cloudflare", "workers", "kv", "r2", "queues", "zero_trust", "networking", "security", "observability"],
  "tags": ["cloudflare", "platform", "infra", "docs", "workers", "mcp"],
  "examples": [
    "Fetch Cloudflare Workers documentation for a specific API.",
    "Search Cloudflare platform docs for queues or KV usage patterns.",
    "Look up configuration guidance for Zero Trust or networking features."
  ],
  "sensitivity": "low",
  "visibility": "default",
  "priority": 10,
  "autoDiscoverTools": true
}

With this entry present:

  • list_mcp_capabilities will return cloudflare when queries mention Cloudflare, Workers, KV, R2, Queues, etc.
  • describe_mcp with id: "cloudflare" will surface concise tool summaries from the Cloudflare MCP server.
  • execute_mcp_code lets the agent write TypeScript such as:
ts
import * as cloudflare from "mcp-clients/cloudflare";

async function main() {
  const docs = await cloudflare.search_docs({ query: "Workers KV" });
  console.log(docs.summary);
}

The actual available functions under mcp-clients/cloudflare are generated dynamically from the MCP tool definitions; the agent should always:

  1. Discover via list_mcp_capabilities.
  2. Inspect via describe_mcp to see available operations.
  3. Use those operations via execute_mcp_code.

How to use

  1. Call list_mcp_capabilities with a natural language query or filters to see which MCPs exist.
  2. For a chosen MCP (e.g. cloudflare), call describe_mcp to understand its operations.
  3. Write TypeScript/JavaScript that imports from mcp-clients/<id> and calls the exported functions.
  4. Run your code with execute_mcp_code, optionally restricting allowedMcpIds for safety.

Rules

  • Do not assume individual MCP tools are top-level tools.
  • Always: discover → describe → generate code → execute_mcp_code.
  • Request detail: "schema" in describe_mcp only when exact parameter shapes are required.

Known Limitations

Sandbox Security (CRITICAL)

⚠️ The current sandbox implementation is NOT secure for untrusted code.

⚠️ The vm-based sandbox is NOT a security boundary. Node's vm module can be escaped (see Node docs). This setting reduces accidental damage only. For untrusted MCP entries, run them in a separate process/container with proper OS-level isolation.

  • Uses vm.createContext() which is NOT a security boundary
  • Can be escaped via prototype pollution, require() manipulation, etc.
  • Only enable for Claude-generated code (trusted source)
  • Requires MCP_ORCH_ENABLE_SANDBOX=1 environment variable
  • See references/security-model.md for complete security details
Show full SKILL.md (189 more words)Show less
Spawn Hardening (Command & Env Allowlisting)

When adding entries to mcp.registry.json, the orchestrator enforces:

  1. Command allowlist — only npx, npm, pnpm, yarn, bunx, bun, node, deno, uvx, uv, python, python3, cargo, go (bare names resolved via PATH). Absolute/relative paths and shells are rejected. Set MCP_ORCH_ALLOW_RAW_COMMANDS=1 to opt out (loud stderr warning; only for fully-trusted registries).
  2. Env var denylist — PATH, NODE_OPTIONS, LD_PRELOAD, DYLD_INSERT_LIBRARIES, PYTHONPATH, etc. are stripped from mcp.env before spawn (stderr warning per dropped key).
Other Limitations
  • No TypeScript compilation: User code in .ts format will fail
  • No module resolution: Imports from mcp-clients/* don't resolve; use $call() API
  • Static registry: Adding/removing MCPs requires restart
  • Limited error handling: Generic errors for MCP connection failures

For detailed troubleshooting, see references/troubleshooting.md.

Production Status

What's Working ✅:

  • Discovery via list_mcp_capabilities (fully functional)
  • Inspection via describe_mcp (fully functional)
  • Registry management (16 MCPs configured)
  • MCP clients (stdio + HTTP transports)
  • Safety controls (visibility, sensitivity, policies)

What's Limited 🟡:

  • Code execution (requires env flag, sandbox not secure)
  • Testing (basic smoke tests only)

What's Planned 🔮:

  • Secure sandbox with Worker threads (v1.1)
  • TypeScript compilation support (v1.1)
  • Module resolution (v1.1)
  • Dynamic registry updates (v1.2)

For complete roadmap, see plan.md in repository root.

© secondsky, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 7 other files (scripts, references) in plugins/mcp-dynamic-orchestrator/skills/mcp-dynamic-orchestrator of secondsky/claude-skills.

  • SKILL.md
  • references/mcp-protocol.md
  • references/registry-schema.md
  • references/security-model.md
  • references/troubleshooting.md
  • scripts/describe_mcp.ts
  • scripts/execute_mcp_code.ts
  • scripts/list_mcp_capabilities.ts

Open the folder on GitHubat commit 8837836

Compare with similar skills

MCP Dynamic Orchestrator next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

MCP Dynamic Orchestrator compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
MCP Dynamic Orchestrator this skillsecondsky/claude-skills227—~1.5kAutomated safety check: PassMIT
MCP Server Builderanthropics/skills180k64 repos~2.3kAutomated safety check: PassApache-2.0
MCP Server BuildershareAI-lab/learn-claude-code78k5 repos~1.2kAutomated safety check: PassMIT
MCP Server Builder with mcp-usemcp-use/mcp-use11k—~923Automated safety check: PassApache-2.0
Source Driven Developmentshashankswe2020-ux/whoop-mcp1654 repos~2kAutomated safety check: PassMIT
OpenpetsOpenPetsHQ/openpets1.3k—~2.1kAutomated safety check: PassMIT

Similar skills

  • MCP Server Builder

    anthropics/skills

    Official

    Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.

    180k GitHub starsUsed in 64 repos~2.3k tokens
    Agent WorkflowsAuto-check passed
  • MCP Server Builder

    shareAI-lab/learn-claude-code

    Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.

    78k GitHub starsUsed in 5 repos~1.2k tokens
    Agent WorkflowsAuto-check passed
  • Builds, modifies, debugs, migrates and verifies TypeScript MCP servers and MCP Apps with the mcp-use framework, treating the installed package's types as the source of truth.

    11k GitHub stars~923 tokensUpdated yesterday
    Agent WorkflowsAuto-check passed
  • Source Driven Development

    shashankswe2020-ux/whoop-mcp

    Grounds every implementation decision in official documentation.

    165 GitHub starsUsed in 4 repos~2k tokens
    Agent WorkflowsAuto-check passed
  • Openpets

    OpenPetsHQ/openpets

    A skill your agent uses whenever the user wants to build, extend, debug, test, validate, locally load, package, or publish an OpenPets plugin; work with the OpenPets Plugin SDK v3, plugin manifest…

    1.3k GitHub stars~2.1k tokensUpdated 11 days ago
    Agent WorkflowsAuto-check passed
  • Dataforseo MCP Server

    dataforseo/mcp-server-typescript

    Run DataForSEO API tasks via the CLI in a shell (docs index, docs search, request).

    251 GitHub starsUsed in 1 repo~2.4k tokens
    Agent WorkflowsAuto-check passed

More from secondsky/claude-skills

All 169 skills in this repo
  • Tanstack AI

    secondsky/claude-skills

    TanStack AI (alpha) provider-agnostic type-safe chat with streaming for OpenAI, Anthropic, Gemini, Ollama.

    227 GitHub starsUsed in 1 repo~3.6k tokens
    Auto-check: notes
  • Auto Animate

    secondsky/claude-skills

    AutoAnimate (@formkit/auto-animate) zero-config animations for React.

    227 GitHub stars~2.9k tokensUpdated 10 days ago
    Auto-check passed
  • Base UI React

    secondsky/claude-skills

    MUI Base UI unstyled React components with Floating UI. An agent skill from secondsky/claude-skills.

    227 GitHub stars~1.9k tokensUpdated 10 days ago
    Auto-check passed
  • Cloudflare Images

    secondsky/claude-skills

    This skill should be used when the user asks to "upload images to Cloudflare", "implement direct creator upload", "configure image transformations", "optimize WebP/AVIF", "create image variants"…

    227 GitHub stars~3.6k tokensUpdated 10 days ago
    Auto-check: notes
  • Cloudflare Nextjs

    secondsky/claude-skills

    Deploy Next.js to Cloudflare Workers via the OpenNext adapter (@opennextjs/cloudflare).

    227 GitHub stars~5.3k tokensUpdated 10 days ago
    Auto-check: notes
  • Cloudflare Sandbox

    secondsky/claude-skills

    Cloudflare Sandboxes SDK for secure code execution in Linux containers at edge.

    227 GitHub stars~4.5k tokensUpdated 10 days ago
    Auto-check passed

Categories

Questions about MCP Dynamic Orchestrator

What does MCP Dynamic Orchestrator do?

Dynamic MCP server discovery and code-mode execution via central registry. MCP Dynamic Orchestrator is an agent skill from secondsky/claude-skills. Dynamic MCP server discovery and code-mode execution via central registry.

When should I use MCP Dynamic Orchestrator?

MCP Dynamic Orchestrator fits situations like: multiple MCP integrations; progressive disclosure; encountering MCP context bloat; changing server sets.

How do I install MCP Dynamic Orchestrator in Claude Code?

Run `npx skills add secondsky/claude-skills --skill mcp-dynamic-orchestrator -a claude-code`. Or copy the skill folder (plugins/mcp-dynamic-orchestrator/skills/mcp-dynamic-orchestrator in secondsky/claude-skills) into .claude/skills/mcp-dynamic-orchestrator in your project. Claude Code loads it when a task matches its description.

How do I install MCP Dynamic Orchestrator in Codex?

Run `npx skills add secondsky/claude-skills --skill mcp-dynamic-orchestrator -a codex`. Or copy the skill folder (plugins/mcp-dynamic-orchestrator/skills/mcp-dynamic-orchestrator in secondsky/claude-skills) into .agents/skills/mcp-dynamic-orchestrator in your project. Codex loads it when a task matches its description.

Can I use MCP Dynamic Orchestrator in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add secondsky/claude-skills --skill mcp-dynamic-orchestrator -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/mcp-dynamic-orchestrator, .gemini/skills/mcp-dynamic-orchestrator, .github/skills/mcp-dynamic-orchestrator and .opencode/skills/mcp-dynamic-orchestrator in your project.

What does MCP Dynamic Orchestrator need to run?

Going by SKILL.md and its folder, MCP Dynamic Orchestrator needs TypeScript for the scripts in its folder. Our summary lists: Node.js. Its frontmatter pre-approves these tools: list_mcp_capabilities, describe_mcp, execute_mcp_code.

Does MCP Dynamic Orchestrator access the network?

SKILL.md names 1 domain. In commands or code: docs.mcp.cloudflare.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.

Is MCP Dynamic Orchestrator safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does MCP Dynamic Orchestrator use?

MCP Dynamic Orchestrator is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does MCP Dynamic Orchestrator use?

About 1.5k tokens (SKILL.md is roughly 5.9k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 20k tokens, read only when the agent opens those files.

What are the alternatives to MCP Dynamic Orchestrator?

Skills that share tags, products or a category with MCP Dynamic Orchestrator: MCP Server Builder (anthropics/skills, 180k stars), MCP Server Builder (shareAI-lab/learn-claude-code, 78k stars), MCP Server Builder with mcp-use (mcp-use/mcp-use, 11k stars) and Source Driven Development (shashankswe2020-ux/whoop-mcp, 165 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains MCP Dynamic Orchestrator?

secondsky (a GitHub user) maintains it in secondsky/claude-skills, which has 227 GitHub stars. The repository holds 169 skills in this directory. The repository was last updated on September 28, 2026.

Source: secondsky/claude-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.