MCP SDK Audit
awdr74100/figwright
Upgrade @modelcontextprotocol/server (the MCP TypeScript SDK v2) and prove the wire contract survived.
Guide for creating new MCP server integrations. An agent skill from WellApp-ai/Well.
$ npx skills add WellApp-ai/Well --skill mcp-server -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install WellApp-ai/Well mcp-server --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .claude/skills && cp -r skills-src/cursor-rules/skills/mcp-server .claude/skills/mcp-server && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "mcp-server" agent skill from https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-server into .claude/skills/mcp-server/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "mcp-server", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-serverType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add WellApp-ai/Well --skill mcp-server -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install WellApp-ai/Well mcp-server --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .agents/skills && cp -r skills-src/cursor-rules/skills/mcp-server .agents/skills/mcp-server && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "mcp-server" agent skill from https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-server into .agents/skills/mcp-server/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "mcp-server", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add WellApp-ai/Well --skill mcp-server -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install WellApp-ai/Well mcp-server --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/cursor-rules/skills/mcp-server .cursor/skills/mcp-server && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "mcp-server" agent skill from https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-server into .cursor/skills/mcp-server/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "mcp-server", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/WellApp-ai/Well.git --path cursor-rules/skills/mcp-server--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add WellApp-ai/Well --skill mcp-server -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install WellApp-ai/Well mcp-server --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/cursor-rules/skills/mcp-server .gemini/skills/mcp-server && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "mcp-server" agent skill from https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-server into .gemini/skills/mcp-server/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "mcp-server", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install WellApp-ai/Well mcp-serverInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add WellApp-ai/Well --skill mcp-server -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .github/skills && cp -r skills-src/cursor-rules/skills/mcp-server .github/skills/mcp-server && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "mcp-server" agent skill from https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-server into .github/skills/mcp-server/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "mcp-server", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add WellApp-ai/Well --skill mcp-server -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install WellApp-ai/Well mcp-server --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/WellApp-ai/Well.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/cursor-rules/skills/mcp-server .opencode/skills/mcp-server && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "mcp-server" agent skill from https://github.com/WellApp-ai/Well/tree/main/cursor-rules/skills/mcp-server into .opencode/skills/mcp-server/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "mcp-server", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
mcp-serverGuide for creating new MCP server integrations. An agent skill from WellApp-ai/Well.
MCP Server is an agent skill from WellApp-ai/Well. Guide for creating new MCP server integrations
Its SKILL.md is about 680 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Agent Workflows, covering MCP servers. It works with Model Context Protocol and Figma. The repository describes itself as: No more Sundays on Finance. We build the infrastructure that retrieves, processes, and routes your financial and business data to your FinOps stack, so founders can ship, not… The licence is MIT.
3 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit c740217. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md (its code samples are json).
From the folder's file list and the shell code blocks in SKILL.md.
Hosts in commands or code, which the agent is likely to contact:
service.comFrom URLs in SKILL.md, links to its own repository left out.
Names these keys or tokens, usually read from environment variables:
API_KEYFrom names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
MCP Server loads about 679 tokens when it runs. Until then it costs about 14 tokens; SKILL.md has 218 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from WellApp-ai/Well at commit c740217, republished under its MIT licence (© WellApp-ai). 218 words, ~679 tokens.
.claude/skills/mcp-server/SKILL.md (or your agent's skills folder).Use this skill when creating a new MCP server integration.
MCPs live in: ~/.cursor/projects/<project>/mcps/<server-name>/
mcps/
├── user-notion/
│ └── tools/
│ ├── API-retrieve-a-page.json
│ └── ...
├── cursor-ide-browser/
│ └── tools/
│ ├── browser_navigate.json
│ └── ...
└── user-n8n-mcp/
└── tools/
└── ...Each tool is a JSON file:
{
"name": "tool-name",
"description": "What this tool does",
"arguments": {
"type": "object",
"properties": {
"param1": { "type": "string", "description": "..." }
},
"required": ["param1"]
}
}CallMcpTool with server, toolName, argumentsCallMcpTool:
server: "user-notion"
toolName: "API-retrieve-a-page"
arguments: { "page_id": "abc123" }| MCP | Capabilities |
|---|---|
| user-notion | Page/block CRUD, search, comments |
| cursor-ide-browser | Navigation, clicks, screenshots, console |
| user-n8n-mcp | Workflow search, details, execution |
| user-context7 | Library docs lookup |
| figma | Design specs, code generation from frames |
mcps/<server-name>/tools/~/.cursor/mcp.jsonCallMcpToolFor MCPs that use API keys (Notion, n8n):
"mcp-name": {
"command": "npx",
"args": ["-y", "@package/mcp-server"],
"env": {
"API_KEY": "your-token-here"
}
}For MCPs that connect to local servers (Figma desktop):
"mcp-name": {
"url": "http://127.0.0.1:PORT/mcp"
}For MCPs that use browser OAuth (Figma remote):
"mcp-name": {
"url": "https://service.com/mcp"
}After adding, click "Connect" in Cursor MCP settings to authorize.
Installation loops infinitely:
~/.cursor/mcp.jsonMCP not appearing:
© WellApp-ai, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in cursor-rules/skills/mcp-server of WellApp-ai/Well.
Open the folder on GitHubat commit c740217
MCP Server next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| MCP Server this skillWellApp-ai/Well | 345 | — | ~679 | Automated safety check: Pass | MIT | |
| MCP SDK Auditawdr74100/figwright | 995 | — | ~4.1k | Automated safety check: Pass | MIT | |
| Loora Design Guidelassejlv/loora | 140 | — | ~2.4k | Automated safety check: Pass | AGPL-3.0 | |
| Igniteui Angular Figma To AppIgniteUI/igniteui-angular | 599 | — | ~6.4k | Automated safety check: Pass | MIT | |
| Igniteui Wc Figma To AppIgniteUI/igniteui-webcomponents | 170 | — | ~7.2k | Automated safety check: Pass | MIT | |
| MCP Server Builderanthropics/skills | 180k | 63 repos | ~2.3k | Automated safety check: Pass | Apache-2.0 |
awdr74100/figwright
Upgrade @modelcontextprotocol/server (the MCP TypeScript SDK v2) and prove the wire contract survived.
lassejlv/loora
Build, edit, refine, troubleshoot, and review polished responsive product interfaces through the Loora MCP server and its structured Canvas schemas.
IgniteUI/igniteui-angular
Builds Angular views from Figma designs with Ignite UI for Angular, supporting Indigo.Design kits, third-party kits, and plain frames.
IgniteUI/igniteui-webcomponents
Builds Ignite UI Web Components views from Figma designs, supporting Indigo.Design kits, third-party kits (Material 3, Fluent 2, shadcn/ui, Untitled UI, in-house), and plain frames.
anthropics/skills
Guides the design and implementation of Model Context Protocol servers in TypeScript or Python, from tool naming and error messages to evaluation.
shareAI-lab/learn-claude-code
Walks through building MCP servers in Python or TypeScript that expose tools, resources and prompts to Claude, with templates, registration and testing.
WellApp-ai/Well
Evaluate technical options with scoring matrix, trigger Gate 4 for significant decisions
WellApp-ai/Well
Produce an accounts-receivable aging report and surface overdue invoices for a Well workspace.
WellApp-ai/Well
Iterate until success or limit, composing existing skills with Jidoka integration
WellApp-ai/Well
Build a balance sheet (bilan) from a Well workspace. An agent skill from WellApp-ai/Well.
WellApp-ai/Well
Generate and maintain BPMN 2.0 diagrams linked to Gherkin scenarios
WellApp-ai/Well
Forecast cash flow and runway for a Well workspace from booked invoices and collected bank transactions.
Works with
Categories
Guide for creating new MCP server integrations. An agent skill from WellApp-ai/Well. MCP Server is an agent skill from WellApp-ai/Well.
MCP Server fits situations like: tasks that involve MCP servers.
Run `npx skills add WellApp-ai/Well --skill mcp-server -a claude-code`. Or copy the skill folder (cursor-rules/skills/mcp-server in WellApp-ai/Well) into .claude/skills/mcp-server in your project. Claude Code loads it when a task matches its description.
Run `npx skills add WellApp-ai/Well --skill mcp-server -a codex`. Or copy the skill folder (cursor-rules/skills/mcp-server in WellApp-ai/Well) into .agents/skills/mcp-server in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add WellApp-ai/Well --skill mcp-server -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/mcp-server, .gemini/skills/mcp-server, .github/skills/mcp-server and .opencode/skills/mcp-server in your project.
Going by SKILL.md and its folder, MCP Server needs credentials named API_KEY. Our summary lists: A credential in API_KEY.
SKILL.md names 1 domain. In commands or code: service.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
MCP Server is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 679 tokens (SKILL.md is roughly 2.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with MCP Server: MCP SDK Audit (awdr74100/figwright, 995 stars), Loora Design Guide (lassejlv/loora, 140 stars), Igniteui Angular Figma To App (IgniteUI/igniteui-angular, 599 stars) and Igniteui Wc Figma To App (IgniteUI/igniteui-webcomponents, 170 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
WellApp-ai (a GitHub organization) maintains it in WellApp-ai/Well, which has 345 GitHub stars. The repository holds 36 skills in this directory. The repository was last updated on October 7, 2026.
Source: WellApp-ai/Well on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.