# SerpentStack

> Find any AI agent skill or MCP server. Search every registry, install in seconds.

- **Type:** MCP server
- **Install:** `agentstack add mcp-benja-pauls-serpentstack`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [Benja-Pauls](https://agentstack.voostack.com/s/benja-pauls)
- **Installs:** 0
- **Category:** [Search](https://agentstack.voostack.com/c/search)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [Benja-Pauls](https://github.com/Benja-Pauls)
- **Source:** https://github.com/Benja-Pauls/SerpentStack
- **Website:** https://www.npmjs.com/package/serpentstack

## Install

```sh
agentstack add mcp-benja-pauls-serpentstack
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# SerpentStack

  
  
  
  

Find any AI agent skill or MCP server. Search every registry, install in seconds.

  Quick Start &middot;
  Search &middot;
  Install &middot;
  Discover &middot;
  Base Skills &middot;
  Persistent Agents

---

[Agent skills](https://agentskills.io/home) are how [Stripe merges 1,300+ agent-generated PRs per week](https://stripe.dev/blog/how-we-build-software-at-stripe-in-2025) and [Shopify operates with agents as a core part of engineering](https://www.businessinsider.com/shopify-ceo-tells-employees-to-use-ai-before-asking-for-more-staff-2025-4). But skills are scattered across registries with no unified way to find or install them.

SerpentStack searches **every major skill registry and MCP server directory at once** — [Anthropic](https://github.com/anthropics/skills), [skills.sh](https://skills.sh/), [awesome-agent-skills](https://github.com/VoltAgent/awesome-agent-skills), public GitHub, and the [MCP Registry](https://registry.modelcontextprotocol.io/) — with a single command. One CLI to search, install, and manage skills and discover MCP servers for any AI coding agent.

```bash
npm install -g serpentstack
```

Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, Windsurf, and any tool that reads the [Agent Skills open standard](https://agentskills.io/home). Zero dependencies. Requires Node 22+.

---

## Why SerpentStack?

Skills and MCP servers are scattered across isolated registries. There's no unified way to find what exists.

| | [skills.sh](https://skills.sh/) | [Anthropic](https://github.com/anthropics/skills) | [awesome-agent-skills](https://github.com/VoltAgent/awesome-agent-skills) | [Glama](https://glama.ai/mcp) | [mcp.so](https://mcp.so) | **SerpentStack** |
|---|---|---|---|---|---|---|
| Skills | :white_check_mark: | :white_check_mark: | :white_check_mark: | | | :white_check_mark: **all** |
| MCP servers | | | | :white_check_mark: | :white_check_mark: | :white_check_mark: **all** |
| Single CLI search | | | | | | :white_check_mark: |
| Install from any source | | | | | | :white_check_mark: |
| Project-aware recommendations | | | | | | :white_check_mark: |
| Auto-generate missing skills | | | | | | :white_check_mark: |

One search, every source. Skills and MCP servers together, clearly labeled.

---

## Quick Start

```bash
serpentstack search "react testing"        # search every registry
serpentstack add clerk                     # install by name
serpentstack add stripe/agent-toolkit      # install from a GitHub repo
serpentstack discover                      # get recommendations for your project
```

That's it. Skills are installed to `.skills//SKILL.md` and your agents pick them up automatically.

---

## Search

Search across all major skill registries and MCP server directories with one command. Results are ranked by relevance, clearly split into **Skills** and **MCP Servers** so you always know what you're looking at.

```bash
serpentstack search "auth oauth"
serpentstack search "stripe payments"
serpentstack search "postgres database"
serpentstack search "docker deploy"
```

```
  ── Skills (3) ──────────────────────────────────────

   1. clerk  anthropic
      Authentication and user management with Clerk
      $ serpentstack add anthropics/skills/clerk

   2. better-auth  skills.sh
      Type-safe authentication framework for TypeScript
      $ serpentstack add better-auth/best-practices

   3. oauth-patterns  awesome
      OAuth 2.0 and OpenID Connect integration patterns
      $ serpentstack add nichochar/oauth-patterns

  ── MCP Servers (2) ─────────────────────────────────

   1. supabase  mcp
      Manage Supabase projects, databases, edge functions, and auth
      Claude Code: claude mcp add supabase -- npx -y supabase-mcp-server
      Docs:        github.com/supabase-community/supabase-mcp

   2. neon  mcp
      Serverless Postgres with branching, schema migrations, and database management
      Claude Code: claude mcp add --transport http neon https://mcp.neon.tech/sse
      Docs:        github.com/neondatabase/mcp-server-neon
```

Skills and MCP servers are clearly labeled: `anthropic` `skills.sh` `awesome` `github` for skills, `mcp` for MCP servers. Skills teach agents *how* to build; MCP servers give agents *tools* to use — you often want both.

---

## Install

Install skills from any source — a registry name, a GitHub repo, or a URL. SerpentStack resolves the source, fetches the `SKILL.md`, and drops it into your `.skills/` directory.

```bash
serpentstack add clerk                           # resolve via registries
serpentstack add anthropics/skills/clerk          # specific GitHub path
serpentstack add stripe/agent-toolkit             # GitHub repo
serpentstack add --force clerk                    # overwrite existing
```

**If no community skill exists**, SerpentStack auto-generates a context-rich stub by pulling the project's README, package metadata, install commands, and docs URL from GitHub. You get a useful starting point instead of nothing.

```bash
serpentstack add fastify
# → Generated fastify → .skills/fastify/SKILL.md
#   Source: github.com/fastify/fastify
#   Docs:   fastify.dev
```

---

## Discover

Analyze your project and get skill and MCP server recommendations tailored to your actual stack. SerpentStack reads your dependency files, detects frameworks/services/tools, and searches registries for matching skills and MCP servers — skipping skills you already have installed.

```bash
cd your-project
serpentstack discover
```

```
  Your stack
  Languages:    javascript, typescript
  Frameworks:   react, nextjs
  Services:     clerk, stripe, prisma
  Tools:        vitest, tailwindcss, eslint

  ── Services ────────────────────────────────────────
  clerk  anthropic
  $ serpentstack add anthropics/skills/clerk

  stripe-best-practices  skills.sh
  $ serpentstack add stripe/agent-toolkit
  ...

  ── MCP Servers (3) ─────────────────────────────────
  stripe  mcp
  $ claude mcp add stripe -- npx -y @stripe/mcp

  neon  mcp
  $ claude mcp add --transport http neon https://mcp.neon.tech/sse
  ...

  12 skill recommendations, 3 MCP servers based on your stack.
  3 skills already installed.
```

Detects: JavaScript/TypeScript, Python, Go, Rust, Ruby — and 50+ frameworks, services, and tools within each.

---

## Base Skills

SerpentStack ships 10 production-quality skills you can install into any project. These aren't descriptions — they contain complete, copy-paste templates with real imports and type signatures. Every skill ends with a verification step so agents can confirm their own work.

```bash
serpentstack skills                     # install all 10 base skills
serpentstack skills update              # update to latest versions
```

| Skill | What it teaches agents |
|---|---|
| `scaffold` | End-to-end resource generation: model, schema, service, route, migration, tests, frontend types |
| `auth` | JWT, ownership enforcement, SSO swap patterns (one function to replace) |
| `test` | Real Postgres via testcontainers, savepoint isolation, async httpx |
| `db-migrate` | Alembic workflow: create, review, apply, troubleshoot, rollback |
| `deploy` | Docker multi-stage builds, ECR push, Terraform plan/apply, rollback |
| `dev-server` | Error detection patterns for FastAPI and Vite/React |
| `git-workflow` | Branch naming, conventional commits, PR checklists |
| `model-routing` | Delegate code generation to local models for 10-50x cost reduction |
| `generate-skills` | Interview-based generation of project-specific skills for any codebase |
| `find-skills` | Evaluate and adopt community skills safely |

The most powerful is **`generate-skills`** — ask your agent to read `.skills/generate-skills/SKILL.md` and it will analyze your codebase, interview you about your decisions, and produce a custom skill set for your project. This is the fastest path to agents that understand your conventions.

---

## Persistent Agents

SerpentStack also includes three background agents that run on local models via [Ollama](https://ollama.com) at zero cost. They watch your project continuously — catching crashes, running tests, and keeping your skills accurate as code evolves.

Setup and usage

```bash
serpentstack persistent                  # guided setup on first run
serpentstack persistent --start          # launch agents
serpentstack persistent --stop           # stop all agents
serpentstack persistent --agents         # change models or enable/disable
serpentstack notifications               # see what your agents found
```

```
.openclaw/
  SOUL.md                     # shared context inherited by all agents
  agents/
    log-watcher/AGENT.md      # dev server health, crash detection     (every 30-60s)
    test-runner/AGENT.md       # test suite, lint, typecheck            (every 5-15min)
    skill-maintainer/AGENT.md  # skill drift detection                  (every 1hr)
```

**Log Watcher** monitors dev server output and catches crashes, import failures, and runtime errors with file paths and fix suggestions.

**Test Runner** runs your test suite, linter, and type checker on a schedule. Tracks which tests are failing, what changed, and whether the test or the source needs updating.

**Skill Maintainer** compares `.skills/` files against actual code patterns and proposes updates when conventions drift. Without this, skills go stale and agents start producing code that doesn't match your project.

During setup, SerpentStack installs Ollama and downloads a model if needed — no API keys required. To add your own agent, create a folder under `.openclaw/agents/` with an `AGENT.md` file.

---

## Production Template

Projects created with `serpentstack stack new` include a complete fullstack application with all skills and agents pre-configured. This is not a starter template with TODO comments — it ships with working authentication, resource CRUD, ownership enforcement, database migrations, and infrastructure-as-code.

Architecture and conventions

**Prerequisites:** Python 3.12+, Node 22+, Docker, [uv](https://docs.astral.sh/uv/)

```bash
serpentstack stack new my-app
cd my-app
make init && make setup && make dev
```

```
backend/        FastAPI + async SQLAlchemy + asyncpg + Alembic
frontend/       React + TypeScript + Vite + Tailwind + React Query
infra/          Terraform: App Runner, RDS, ECR, VPC (dev/staging/prod)
.skills/        All 10 base skills pre-installed
.openclaw/      Persistent agent workspace pre-configured
```

**Key conventions** (encoded in `.skills/` so agents learn them automatically):

- **Services flush, routes commit.** Services call `db.flush()` but never `db.commit()`. Routes own the transaction boundary.
- **Services return domain objects, not HTTP errors.** `None` = not found, `False` = forbidden, domain object = success. Routes translate to HTTP status codes.
- **Auth is one function.** All protected routes depend on `get_current_user()`. Swapping JWT for Clerk/Auth0 means replacing one dependency.
- **Types flow from backend to frontend.** `make types` generates TypeScript interfaces from the OpenAPI spec. No hand-written API types.

```bash
make dev             # Postgres + Redis + backend + frontend with hot reload
make verify          # lint + typecheck + test (both stacks)
make deploy          # build, push, terraform apply
```

---

## CLI Reference

```bash
# Search & install
serpentstack search              # search skills + MCP servers across all registries
serpentstack add                # install a skill from any registry or repo
serpentstack discover                   # analyze project, recommend skills + MCP servers

# Base skills
serpentstack skills                     # download base skills + agent configs
serpentstack skills update              # update to latest versions

# Persistent agents
serpentstack persistent                 # status dashboard (guided setup on first run)
serpentstack persistent --start         # launch agents
serpentstack persistent --stop          # stop all agents
serpentstack notifications              # what your agents found

# Template
serpentstack stack new            # scaffold a new project
serpentstack stack update               # update template files
```

---

## Contributing

Contributions are welcome — see [CONTRIBUTING](CONTRIBUTING) for setup and guidelines. The highest-impact areas:

- **MCP server entries** — add popular servers to the curated registry in `registries.js`
- **Registry adapters** — connect additional skill or MCP sources
- **Stack detection** — detect more languages, frameworks, and tools in `discover`
- **New skills** for popular frameworks and services (follow [SKILL-AUTHORING.md](SKILL-AUTHORING.md))

[Open an issue](https://github.com/Benja-Pauls/SerpentStack/issues) for bugs and feature requests.

## License

[MIT](LICENSE)

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [Benja-Pauls](https://github.com/Benja-Pauls)
- **Source:** [Benja-Pauls/SerpentStack](https://github.com/Benja-Pauls/SerpentStack)
- **License:** MIT
- **Homepage:** https://www.npmjs.com/package/serpentstack

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** yes
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-benja-pauls-serpentstack
- Seller: https://agentstack.voostack.com/s/benja-pauls
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.
