AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Mcp Tool Developer

skill-lihongwei-cn-lihongwei-cn-mcp-tool-developer · by LiHongwei-cn

Build Model Context Protocol (MCP) servers and tools from scratch. Full-stack MCP development with TypeScript/Python, testing, deployment, and registry publishing.

No reviews yet
0 installs
9 views
0.0% view→install

Install

$ agentstack add skill-lihongwei-cn-lihongwei-cn-mcp-tool-developer

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-lihongwei-cn-lihongwei-cn-mcp-tool-developer)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Mcp Tool Developer? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

MCP Tool Developer

Overview

Expert at building Model Context Protocol (MCP) servers that give AI agents new capabilities. Covers the full MCP development lifecycle: specification, implementation, testing, deployment, and registry publishing. Supports both TypeScript and Python with production-ready patterns.

This skill understands MCP specification primitives (tools, resources, prompts, sampling), transport options (stdio, SSE, Streamable HTTP), and the tool design patterns that make MCP servers reliable and composable.

When to Use This Skill

  • Use when building a new MCP server from scratch
  • Use when wrapping an existing API as an MCP tool
  • Use when debugging MCP server issues
  • Use when designing the tool schema for an MCP server
  • Use when publishing an MCP server to a registry

How It Works

Step 1: Define the MCP Server Scope

Identify what capabilities the server should expose:

  • Tools - Functions the LLM can call (primary use case)
  • Resources - Data the LLM can read (files, APIs, databases)
  • Prompts - Reusable prompt templates

Choose the transport:

  • stdio - For local CLI tools (Claude Code, Cursor)
  • SSE (Server-Sent Events) - For remote/hosted tools
  • Streamable HTTP - New in MCP spec for modern deployments

Step 2: Design the Tool Schema

Define input/output schemas before writing implementation:

{
  name: "tool_name",
  description: "What this tool does (visible to the LLM)",
  inputSchema: {
    type: "object",
    properties: { ... },
    required: [ ... ]
  }
}

Step 3: Implement the Server

Create the server with proper error handling, validation, and logging. Use the official MCP SDK for TypeScript (@modelcontextprotocol/sdk) or Python (mcp).

Step 4: Test and Deploy

Test with the MCP Inspector, validate tool schemas, handle edge cases, then deploy locally or remotely.

Examples

Example 1: TypeScript MCP Server

import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
import { z } from "zod";

const server = new McpServer({ name: "my-tools", version: "1.0.0" });

server.tool("greet", "Greet someone by name",
  { name: z.string().describe("Person's name") },
  async ({ name }) => ({ content: [{ type: "text", text: `Hello, ${name}!` }] })
);

const transport = new StdioServerTransport();
await server.connect(transport);

Example 2: API Wrapper Pattern

Wrap an external API as an MCP tool with auth, rate limiting, and error handling:

  • Map API endpoints to tools
  • Handle auth via environment variables
  • Transform API responses to LLM-friendly format
  • Add retry logic with exponential backoff

Best Practices

  • Build small, focused tools that can be chained rather than monolithic tools
  • Return structured errors, not crashes - tools should fail gracefully
  • Define schemas before implementation
  • Include descriptions that help the LLM understand when and how to use each tool
  • Validate all inputs against the schema
  • Add rate limiting for external API calls
  • Use environment variables for secrets, never hardcode credentials

Limitations

  • This skill provides guidance and code generation; actual runtime testing requires a development environment
  • MCP specification is evolving; always check the latest spec version
  • Security review is essential before deploying tools that handle sensitive data

Security and Safety Notes

  • Never hardcode API keys or credentials in tool implementations
  • Use environment variables or secret managers for all authentication
  • Validate and sanitize all inputs to prevent injection attacks
  • Rate limit external API calls to prevent abuse
  • Review tool permissions carefully - tools can access files, networks, and execute code

Common Pitfalls

  • Problem: LLM calls tools with wrong parameters

Solution: Improve tool descriptions and add examples in the description field. The LLM reads descriptions to decide how to call tools.

  • Problem: Tool times out on large inputs

Solution: Add input size validation and pagination. Stream large responses instead of buffering.

Related Skills

  • api-integration-architect - For API design patterns used in MCP tools
  • security-audit-code-reviewer - For reviewing MCP server code security

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.