runx
Server Details
Discover and inspect public Runx skills before installing them. This read-only hosted MCP exposes search_skills and get_skill. The Apache-2.0 Rust runtime executes skills locally with scoped authority, approval gates and signed receipts. Docs: https://runx.ai/docs/mcp.
- Status
- Healthy
- Uptime
- 99.8% over 61 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- runxhq/runx
- GitHub Stars
- 84
- ChatGPT
- –
- Claude
- Runx
TDQS
Scored across 2 tools
search_skills is for discovery by capability and get_skill is for reading a single skill in full; the descriptions explicitly state the workflow (search, then read), so boundaries are unmistakable. Each tool targets a distinct action on the same resource.
Both names follow a consistent snake_case verb_noun pattern (search_skills, get_skill), with the verb accurately indicating the operation. No mixed conventions.
Two tools is thin even for a discovery server; a browse/list or version-comparison operation would round it out. The pair is focused but leaves the surface feeling minimal.
Search plus full-read covers the core discover-then-inspect flow, and install/run is delegated to the CLI as documented. However, there is no way to list or browse the catalog, compare versions, or check publisher-level details beyond a single skill lookup.
Available Tools
2 toolsget_skillInspect runx skillARead-onlyIdempotentInspect
Read one runx skill in full before running it: its manifest, the authority it asks for, its publisher and trust signals, and the exact command to install and run it through the runx CLI. Everything needed to decide whether to trust a skill arrives in this one call.
| Name | Required | Description | Default |
|---|---|---|---|
| version | No | Exact version to read. Defaults to the latest published version. | |
| skill_id | Yes | Skill id in publisher/name form, for example `ausca/browser-session`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint/idempotentHint/non-destructive, so the safety profile is covered. The description adds real value beyond that by disclosing the exact return payload (authority requested, publisher trust signals, install command) and asserting completeness ("Everything needed ... arrives in this one call"). It doesn't mention error behavior for unknown skill ids or version fallback beyond the schema default.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tightly packed sentences, with the primary action and the preflight trigger front-loaded. The closing "Everything needed to decide whether to trust a skill arrives in this one call" is slightly promotional but does reinforce that no follow-up call is needed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description carries the return-value burden and does so by enumerating what the caller gets. Annotations cover the safety profile, so the only unaddressed edge is failure/not-found behavior, which is minor for a 2-parameter read.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, including the `publisher/name` format example and the version default, so the description is not required to compensate. It adds no syntax or format detail beyond that baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource ("Read one runx skill in full") with an enumerated payload (manifest, authority, publisher/trust signals, install/run command). The singular "one skill" scopes it against the sibling search_skills, so an agent can route without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a clear trigger: read this "before running it," framing the tool as a trust/inspection preflight step. It never names search_skills as the alternative or states when-not to use this tool, so it stops short of explicit routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_skillsSearch runx skillsARead-onlyIdempotentInspect
Find runx skills by what they do. Returns each match with its skill id, publisher, description, latest version, and trust tier, so a caller can pick one and then read it in full with get_skill.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum matches to return. | |
| query | Yes | What the skill should do, in plain words. An empty string browses everything. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description adds value beyond that by enumerating the returned fields (skill id, publisher, description, latest version, trust tier), which matters because there is no output schema; it omits ranking or truncation behavior, keeping it below a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the verb and resource, and the second sentence carries return shape and the next-step handoff. No redundant restatement of the title or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description correctly takes on the burden of describing return fields, and it names the follow-up tool. Slightly incomplete on result ordering, page/limit interaction, and what a trust tier means, but nothing that would cause a mis-call.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so both query and limit are already documented, including the empty-string browse behavior. The description's "by what they do" reinforces the query intent but adds no syntax, matching, or limit semantics beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ("Find runx skills") plus the retrieval axis ("by what they do"), and explicitly positions itself relative to the sibling get_skill. An agent can immediately tell this is the discovery step, not the read step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Describes the intended workflow: search, pick a match, then read it in full with get_skill. That is clear context and a named alternative, though it gives no explicit when-not-to-use conditions (e.g., when to skip straight to get_skill with a known id).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
get_skill1 field changed- changed
Input schema / properties / skill_id / descriptionPrevious value: -"Skill id in owner/name form, for example `ausca/browser-session`."New value: +"Skill id in publisher/name form, for example `ausca/browser-session`."
2 tool updates
- First observed
get_skill - First observed
search_skills
Related MCP Connectors
Search and inspect source-pinned agent skills, plugins and tools through a free public MCP.
Search and discover Agent Skills from the skills.sh registry. Powered by HAPI MCP server.
Hosted MCP server for live public-data APIs and Skills for AI agents.
Find AI agent skills: public previews and source links. Read-only discovery; no account required.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables MCP clients to search skills.sh, view leaderboards, inspect skill details, retrieve third-party security audits, and browse official curated skills, with install commands for each result.49 npmMIT

craftbag-mcpofficial
AlicenseNot gradedqualityAmaintenanceEnables MCP hosts to discover, list, load, explain, and validate Agent Skills (SKILL.md) from project and home skill trees. Hosts can filter, rank, and load skills without depending on any one agent product.2MIT
Sigistry Plugin Catalogofficial
AlicenseNot gradedqualityCmaintenanceRead-only, authless MCP server over the Sigistry registry: a security-verified catalog of Claude Code plugins and portable skills. Search plugins and skills, fetch install commands, and read MCP-server security scorecards.MIT- AlicenseNot gradedqualityBmaintenanceEnables AI agents to search, retrieve, and read skill files from a registry, exposing each skill as an MCP prompt and resource over HTTP or through a stdio bridge.326 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.