Install
$ agentstack add skill-romiluz13-cc10x-mcp-cli ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
MCP CLI (Transient MCP Access)
Overview
The mcp CLI (from github.com/f/mcptools) discovers and invokes MCP server capabilities on-demand, then releases them. Use it when a task needs ONE server's tool — a doc fetch, a single query, a quick lookup — instead of permanently mounting that server as an always-loaded integration.
This keeps accelerators transient: spun up for the task, used, and dropped. A permanently mounted MCP server costs context on every session whether you call it or not. The CLI costs nothing until you run it. This is the same context-hygiene principle behind disabling unused MCP servers in monthly /mcp review.
Composes with cc10x:research (transient retrieval, used then released, never resident).
Prerequisite (install once)
Check first: command -v mcp. If absent, install:
git clone https://github.com/f/mcptools /tmp/mcptools
CGO_ENABLED=0 go build -o ~/.local/bin/mcp /tmp/mcptools/cmd/mcptools
# ensure ~/.local/bin is on PATH
If go is unavailable, report that the accelerator is missing and proceed with built-in tools — do NOT treat the missing binary as a task blocker (it is a fallback message, not a wall).
Flow: discover → call → release
1. Discover first — always. Never call a tool whose schema you have not seen.
mcp tools # list tools
mcp tools --format json # full param schema for parsing
mcp resources # list resources
mcp prompts # list prompts
2. Lead read-only when exploring. Restrict the surface before you touch an unfamiliar server:
mcp guard --allow 'tools:read_*,list_*' --deny 'tools:write_*,delete_*'
Drop the guard only once you know exactly which write you intend.
3. Call with params matching the discovered signature exactly (param:str, param:num, [optional]):
mcp call --params '' -f json
Output -f json for parsing, -f pretty for reading. Check exit code and stderr on failure — a non-zero exit is a real error, not a fallback message.
Server-command examples:
- stdio:
npx -y @modelcontextprotocol/server-filesystem /path - HTTP: pass the URL (auto-detected); SSE via
--transport sse - auth:
--auth-header "Bearer ",--auth-user user:pass, or-e ENV_VARfor docker servers
Aliases (only for repeated use in one task)
If you call the same server several times, alias it; remove it when the task ends so nothing lingers:
mcp alias add # then: mcp tools , mcp call ...
mcp alias remove # release when done
Aliases persist in ~/.mcpt/aliases.json. Cleaning them up is part of keeping the accelerator transient.
Discipline
- Discover before calling; match param signatures exactly.
- Use JSON output when a downstream step parses the result.
- Guard to read-only while exploring; widen only with intent.
- Release aliases when the task is done — do not leave a transient tool resident.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: romiluz13
- Source: romiluz13/cc10x
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.