phases-agents
phases-agents
English · Français

スキルを決定論的に発見・検証・選択するローカルMCPサーバー。Python標準ライブラリのみで、実行時の依存関係はありません。
1つのサーバー。5つのツール。背後で何かを実行することはありません。
なぜ
AIエージェントは即興で動きます。同じ質問を2回すると、2つの異なる計画が返ってきます。ブレインストーミングには問題ありませんが、監査やコンプライアンスの作業では許容できません。
phases-agents は即興性を排除します。ローカルプロジェクトをプロファイリングし、厳格な契約に照らしてスキルカタログを検証し、リプレイ可能な計画を返します。同じターゲット、同じカタログ、同じパラメータ、同じ決定。
Related MCP server: AAS Core (agentic-awesome-skills-mcp)
原理

configured root identifiers
→ bounded discovery
→ official validation
→ immutable registry
→ verified cache
→ detector profile
→ deterministic selection
→ MCP planサーバーは選択して公開します。呼び出し元のモデルは、選択されたスキルを読み取り、自身のツールを使ってそれらをどう扱うかを決定します。サーバーがスキルを実行することは決してありません。
アーキテクチャ
ファイル | 役割 |
| 公式契約と検証済みスナップショット |
| 制限付きローカルディスカバリ |
| 信頼されたルートと検証済みキャッシュ |
| 不変型と制限 |
| 検証済み・不変レジストリ |
| ターゲットのローカルプロファイル |
| 決定論的な選択と順序付け |
| JSON-RPC/MCPトランスポート |
| クライアントケイパビリティ語彙 |
| バージョン管理されたプロファイルファクト語彙 |
| ギャップルール( |
規範となる契約は core/SKILLS_CONTRACT.md(フランス語)にあります。
クイックスタート
examples/skills/ にサンプルパッケージが同梱されています。3つのステップで実際の計画が生成されます。
git clone https://github.com/Cherridsaid/phases-agents && cd phases-agentsサンプルルートを指す skills-roots.json を作成します:
{
"config_version": "1.0",
"roots": [
{ "id": "demo", "path": "/absolute/path/to/phases-agents/examples/skills" }
]
}python server.py --skills-config /absolute/path/to/skills-roots.jsonサーバーは標準入力からJSON-RPCを1行ずつ読み取ります。Pythonプロジェクトに対する phases_agents_plan 呼び出しは、hello-python を選択します:
{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"phases_agents_plan",
"arguments":{"root_ids":["demo"],"target":"/absolute/path/to/a/project",
"today":"2026-08-27","plan_version":"B3",
"client_capabilities":["filesystem_read","filesystem_search"]}}}2つの計画フォーマットが共存します。"B3" はバージョン管理されたフォーマットの名前であり、サーバーバージョンではありません。その公式スキーマは core/PLAN_B3_SCHEMA.json です。新規作業にはこれを使用してください。plan_version がない場合、レガシーフォーマットはフラットなステップリストを返します。これは既存の呼び出し元を壊さないために維持されており、削除前に非推奨化される予定です。client_capabilities はB3でのみ受け付けられます。クライアントが何をできるかを宣言することは、そのフォーマットでのみ意味を持つからです。
MCPクライアントの接続
Claude Code(プロジェクトのルートにある .mcp.json):
{
"mcpServers": {
"phases-agents": {
"command": "python",
"args": [
"/absolute/path/to/phases-agents/server.py",
"--skills-config",
"/absolute/path/to/skills-roots.json"
]
}
}
}Codex も自身の設定ファイルで同じコマンド/引数のペアを使用します。トークンも環境変数も必要ありません。
MCPツール
detect(target)
list_skills(root_ids, today)
get_skill(root_ids, today, skill_id)
plan(root_ids, target, today, constraints?)
plan(root_ids, target, today, plan_version, client_capabilities?)
refresh_skills(root_ids, today)today は時計から読み取られるのではなく注入されるため、すべての呼び出しがリプレイ可能です。get_skill はパスではなく識別子を受け取り、その内容は検証済みスナップショットから取得されます。公開出力では、絶対パスと検出されたシークレットはマスクされます。エンコードされたJSON-RPCレスポンスはすべて1 MiB未満に保たれます。
最初の呼び出しで検証済みレジストリが構築されます。ウォームコールはコンテンツを再読み取りせずにメタデータを検証します。refresh_skills は再ビルドを強制します。
スキルパッケージの作成
各パッケージはルートの直接の子であり、少なくとも以下を含みます:
<root>/<skill-id>/SKILL.md
<root>/<skill-id>/phases.json最も早く始めるには、examples/skills/hello-python/ をコピーして識別子をリネームします。
SKILL.md フロントマター
許可されるキーは5つです。すべて任意ですが、存在する場合はすべてチェックされます。
キー | 制約 |
|
|
| 上限のある自由文 |
|
|
| 自由な著者識別情報、不可視文字を含まないこと |
|
|
必須の14セクション
それぞれはMarkdownの見出し(##)で、順序は任意です。セクションタイトルはフランス語です。タイトルは契約に属するためです。本文はどの言語で書いても構いません。
Loi centrale · Ce que ce skill fait · Ce que ce skill ne fait pas ·
Conditions d'activation · Conditions d'exclusion ·
Capacites necessaires · Interdictions · Methode d'audit ·
Contrat de preuve · Format de sortie · Conditions de blocage ·
Limites connues · Exemples d'entree · Exemple de sortie attendue
phases.json のフィールド
すべて必須:schema_version、id、version、title、description、domain、project_types、platforms、activation、exclusions、requires_capabilities、optional_capabilities、forbidden_capabilities、execution_mode、human_approval、output_schema、rules_path、references_path、scripts_path、tests_path、files。
output_schema はシンボリック形式の core:SCHEMA_NAME.json を使用します。
クローズド語彙
project_types は検出器が出力できるものと交差する必要があります:apk、python、skill_package、solana、web。
activation.any はプロファイルファクトを使用します:collects_personal_data、has_api、has_apk、has_authentication、has_database、has_ecommerce、has_eu_context、has_file_upload、has_javascript、has_python、has_rust、has_skill_packages、has_solana、has_source_code、has_typescript、has_web、uses_ai、uses_payments。
requires_capabilities、optional_capabilities、forbidden_capabilities は次を使用します:browser、dependency_installation、filesystem_read、filesystem_search、filesystem_write、human_question、shell、target_code_execution、web。
Provided ケイパビリティはオープンな語彙です。各カタログは自身がもたらすものを命名し、強制されるのは形状のみです(^[a-z][a-z0-9_]{0,63}$)。クローズドなのはクライアントケイパビリティだけです。それらはあなたのドメインではなくプロトコルを記述するからです。
domain が legal、juridique、regulatory、compliance のいずれかの場合、追加の制度が発動します。引用されるすべてのルールには、公式情報源、管轄、検証日が必須です。
スキーマが言うことと言わないこと
SKILL_MANIFEST_SCHEMA.json は phases.json の形状を記述します:必須フィールド、型、クローズド語彙。
スキーマエンジンは意図的に最小限に設計されています。適用されるのは enum、minLength、minItems のみで、それ以外はありません:pattern も if/then も oneOf もありません。これらのキーワードを使用するスキーマは、それ自体が拒否されます。
その帰結は重要です:条件付きルールは validator.py にあり、そこが真実の源泉であり続けます。バージョンルールがその例です — provides_capabilities は 1.0 マニフェストでは禁止され、1.1 では必須です。このルールは強制されテストされていますが、スキーマでは表現できません。required を契約の全体として読まないでください。
SKILL.md だけのパッケージは失敗します。無効なパッケージは、静かに劣化するのではなく、レジストリをブロックします。
アイデンティティ
phases.json.id がアイデンティティであり、SKILL.md.name はそれと一致する必要があります。ディレクトリも同じキーを持つ必要があります。キーはNFKCで正規化された後 casefold されるため、ホモグリフが2つ目のアイデンティティを忍び込ませることはできません。衝突があればビルド全体がブロックされます。パッケージが恣意的に選ばれることはありません。
選択

レジストリ内のすべての有効なスキルは、その理由とともに、ちょうど1つのカテゴリに分類されます。何も黙って破棄されることはありません。
証明された唯一の自動シグナルは次のとおりです:
project_types ∩ profile.typesプラットフォーム、ドメイン、ケイパビリティは、呼び出し元がそれらの制約を指定した場合にのみフィルタリングします。禁止されたケイパビリティはスキルを拒否します。意味的スコアはでっち上げられず、計画は識別子でソートされます。
空の計画は明示的に有効です:NO_COMPATIBLE_SKILL を持ちます。
B3 計画は、インストールされたすべてのスキルを skills_selected、skills_not_applicable、skills_blocked に分類します。各スキルは正確に1回だけ出現します。skills_missing は、実行可能なプロバイダを持たないケイパビリティを、確認済みのファクトのみから導出してリストします。ギャップが不適合を証明することは決してありません — それは、必要と判断された監査がカバーされていないことを示すだけです。
制限
ルートは最大16
直接の深さのみ
パッケージは最大1,000
ルートごとに10,000エントリまで
SKILL.mdは256 KiB上限個々の参照は256 KiB上限、合計1 MiBまで
スナップショットは16 MiB上限
公開結果は1 MiB上限
パッケージごとに100件の問題まで
フィンガープリントは100,000ノード上限
呼び出し元はこれらの制限を下げることのみ可能で、上げることはできません。
ランタイム制約
Python
>=3.11サードパーティのランタイム依存なし
暗黙のネットワークなし
ランタイムシェルなし
ターゲットコードは実行されない
暗黙のクロックなし
テレメトリなし
スキルのダウンロードなし
pytest は開発依存のみです。
テスト
python -m pytest -q期待される結果:
729 passed, 2 skipped
0 failed規範テキストは、.gitattributes によってLF行末でチェックアウトされます。Windowsのシンボリックリンクのテストは2件スキップされます:それらはローカルWindows特権を必要とするためです。Windowsジャンクションは実際にテストされています。
証明のレベル
バリデータが確認するのはただ1つのことだけです:
STRUCTURALLY_VALIDATED実際のターゲットは検証しません。TARGET_VERIFIED はV1では禁止されたままです。
セキュリティ
ローダーはリパースポイントを拒否します。読み取りは制限され、封じ込められます。出力はソートされ、決定論的です。
1つの設計判断に注意が必要です:detect と plan は、設定されたルートに制限されない target パスを受け取ります。任意のプロジェクトをプロファイリングすることが目的だからです。このサーバーは、影響範囲を受け入れられるアカウントで実行し、信頼できるクライアントにのみ接続してください。完全な脅威モデルは SECURITY.md にあります。
非保証事項
普遍的な意味的関連性の保証なし
外部スキルの自動承認なし
スクリプト内容の監査なし
実際にマウントされたターゲットの証明なし
完全なWindowsアトミック性なし
普遍的なHTML認識なし
普遍的なシークレット検出なし
法的コンプライアンスの保証なし
マーケットプレイスなし、リモートソースなし
ライセンス
Apache-2.0。LICENSE と NOTICE を参照してください。
Available Tools
5 toolsphases_agents_detectC
Detecte localement le profil borne d'une cible. N'execute aucun fichier.
| Name | Required | Description | Default |
|---|---|---|---|
| target | Yes | Chemin absolu local du projet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden, and it does add one meaningful trait: the operation is local and executes nothing, implying a safe non-executing read. It says nothing about permissions, whether any state is written, rate limits, or what the detection result contains, so it falls short of the disclosure a no-annotation tool warrants.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the action and followed by the key constraint, with no filler. It is efficient, though the terse phrasing comes at the cost of the clarity noted elsewhere.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter detection tool with no output schema and no annotations, the description is minimally viable but leaves gaps: it never defines what a "profil borne" comprises, what the caller receives, or how the result should be used. The absence of an output schema means more, not less, explanation was needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is a single parameter with 100% schema description coverage ("Chemin absolu local du projet"), so the schema already fully documents its meaning and the baseline is 3. The description adds no syntax, format, or path-constraint detail beyond what the schema supplies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a verb ("Detecte") and an object ("le profil borne d'une cible"), so its basic function is identifiable. However, "profil borne" is undefined jargon and the scoping term "localement" is the only differentiator, leaving ambiguity about what is actually detected. It does not explicitly contrast with siblings like phases_agents_plan or phases_agents_list_skills.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to reach for this tool versus the other phases_agents_* siblings, nor any stated prerequisites beyond the required absolute path. The only usage-adjacent statement is a safety constraint ("N'execute aucun fichier"), which is behavioral rather than routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
phases_agents_get_skillC
Retourne le contenu borne d'un skill valide par identifiant. Aucun chemin libre n'est accepte.
| Name | Required | Description | Default |
|---|---|---|---|
| today | Yes | Date ISO YYYY-MM-DD injectee. | |
| root_ids | Yes | ||
| skill_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It hints at two behaviors — content is 'borne' (bounded) and only identifiers (no free paths) are accepted — but never explains the bound, what happens on an invalid/unknown skill_id, permission requirements, or the return shape.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the core purpose front-loaded and no padding. It is efficient, though extremely sparse for a three-required-parameter tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With three required parameters, no annotations, no output schema, and no explanation of root_ids or today, the description is too thin for an agent to call this tool confidently. The one behavioral constraint it does give ('aucun chemin libre') is not enough to cover the gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 33%: 'today' is documented in the schema while 'root_ids' and 'skill_id' are not. The description says lookup is 'par identifiant' but never explains what root_ids (1–16 ids) is for or why an injected 'today' is required, so it fails to compensate for the coverage gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Retourne le contenu ... d'un skill') and scopes it by 'identifiant', which separates it from the sibling phases_agents_list_skills (listing) without naming it. The qualifier 'valide' adds a validity condition, but no explicit sibling differentiation is given.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to use this tool versus phases_agents_list_skills, phases_agents_refresh_skills, or phases_agents_plan. 'Aucun chemin libre n'est accepte' is an input constraint, not usage guidance. The agent must infer the use case from the name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
phases_agents_list_skillsC
Decouvre et liste uniquement les packages de skills valides.
| Name | Required | Description | Default |
|---|---|---|---|
| today | Yes | Date ISO YYYY-MM-DD injectee. | |
| root_ids | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does not explain what makes a package 'valide', whether discovery scans the filesystem or a cache, whether it is read-only, or how it relates to refresh_skills; only a vague 'découvre' hint is offered.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single compact sentence with no filler, and the filtering constraint is included. It is terse to the point of being under-specified rather than bloated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations, no output schema, and half the parameters undocumented, the description does not provide enough for an agent to call this correctly or interpret results — notably it never says whether 'valides' filtering has side effects or what is returned.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 50% and the description adds no parameter information at all. In particular 'root_ids' is undocumented in both the schema and the description, leaving the agent to guess what roots to search and what identifier format they take.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource: 'Découvre et liste ... les packages de skills valides', with a scope qualifier ('uniquement ... valides') that hints at filtering. It does not name or contrast with the sibling get_skill or refresh_skills, so sibling differentiation is left to inference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no mention of the alternatives among siblings (detect, get_skill, plan, refresh_skills). The agent must guess whether listing is a discovery step or a cached read.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
phases_agents_planB
Detecte une cible, charge le registre valide et rend un plan deterministe. N'execute aucun skill.
| Name | Required | Description | Default |
|---|---|---|---|
| today | Yes | Date ISO YYYY-MM-DD injectee. | |
| target | Yes | Chemin absolu local du projet. | |
| root_ids | Yes | ||
| constraints | No | ||
| plan_version | No | ||
| client_capabilities | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It usefully discloses two behavioral traits: it loads a valid registry and it causes no side effects because it executes no skills. Beyond that it says nothing about failure modes, preconditions, or the determinism guarantees referenced around 'plan_version'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences with zero filler. Purpose and the no-execution constraint come first. It is efficiently written, though arguably too terse given the tool's parameter complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 6 parameters, a nested object, no annotations, and no output schema, the description is far too thin. It does not explain how constraints, plan_version, or client_capabilities shape the plan, nor what the returned plan contains, leaving an agent without enough context to invoke it confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 33% across 6 parameters, including a nested 'constraints' object, yet the description adds no meaning to any parameter. Words like 'cible' and 'registre valide' loosely map to target/root_ids, but no parameter is actually explained, so the coverage gap is not compensated.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action sequence ('Detecte une cible, charge le registre valide et rend un plan deterministe') with a clear deliverable: a deterministic plan. The negation 'N'execute aucun skill' clarifies its scope versus execution-oriented siblings, but it does not name an alternative tool explicitly, so sibling differentiation is only implicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The clause 'N'execute aucun skill' implies the tool is for planning rather than execution, giving an implied when-to-use signal. However, it never states when to prefer this over phases_agents_detect or the registry/skill tools, so usage is left largely to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
phases_agents_refresh_skillsC
Reconstruit explicitement un registre depuis les racines autorisees.
| Name | Required | Description | Default |
|---|---|---|---|
| today | Yes | Date ISO YYYY-MM-DD injectee. | |
| root_ids | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It implies a rebuild (likely a mutation that overwrites existing state) and hints at authorization via "racines autorisees", but never states whether existing data is destroyed, whether permissions are required, or if the operation is idempotent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler or repetition. It is efficiently written, though the terseness comes at the cost of the missing details scored elsewhere.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutating, no-annotation, no-output-schema tool, the definition leaves too much unsaid: what the rebuilt registry contains, the effect on existing skills, and what is returned. An agent cannot safely decide whether to call this.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 50%: "today" is documented in the schema, but "root_ids" has no description. The phrase "racines autorisees" loosely signals that root_ids must be authorized roots, but adds no format, cardinality (max 16), or relationship detail beyond what the schema already enforces.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description has a concrete verb ("Reconstruit") and object ("un registre"), but the object does not match the tool name: it says "registre" while the tool is about skills. Nothing distinguishes it from siblings like phases_agents_detect or phases_agents_list_skills, leaving the agent to guess what is actually being rebuilt.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance, no prerequisites, and no mention of the sibling tools (detect/get_skill/list_skills/plan) that could be alternatives. The adverb "explicitement" hints the operation is deliberate but does not tell the agent when that is warranted.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.5.0- First observed
phases_agents_detect - First observed
phases_agents_get_skill - First observed
phases_agents_list_skills - First observed
phases_agents_plan - First observed
phases_agents_refresh_skills
TDQS
Scored across 5 tools
Each tool targets a distinct operation: detect (profile), get_skill (read one), list_skills (enumerate), refresh_skills (rebuild registry), plan (produce a plan). The one soft overlap is that plan already performs detection, so an agent might wonder when to call detect versus plan directly.
All tools share the consistent phases_agents_ prefix followed by clear snake_case verbs/verb_noun forms (detect, get_skill, list_skills, plan, refresh_skills). No mixing of conventions.
Five tools is well-scoped for a skill-registry/planning domain, covering discovery, retrieval, detection, planning, and registry refresh without redundancy.
The surface covers the full read-side lifecycle: enumerate skills, read a skill, refresh the registry, detect a target, and produce a plan. It is read-only by design (no skill authoring/editing), which is a minor gap but consistent with the stated bounded-execution purpose.
Maintenance
Related MCP Connectors
Governed AI agent skills — one library, distributed to devs and exposed to remote agents over MCP.
Discover, plan and run tools across your connected business systems through one OAuth MCP endpoint
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables coding agents to search, recommend, and validate a stack of reusable skills from a local catalog, producing deterministic plans without modifying the project.6,024 npm1MIT
- AlicenseNot gradedqualityCmaintenanceA local, read-only MCP server that lets coding agents search the complete AAS skill catalog, compose and validate agent-chosen skill stacks, and generate reproducible, reviewable plans without uploading project code.6,024 npm1MIT
- AlicenseNot gradedqualityBmaintenanceEnables agents to search a local catalog, load skills, inspect MCP tool schemas, and invoke selected tools through a single unified MCP tool, reducing per-request overhead.1MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to search, retrieve, score, compose, and verify reusable agent skills from the SkillForge registry via MCP.9 npmMIT