AgentSkillsHub MCP server lets an agent discover, safety-check, and get install instructions for open-source AI skills and MCP servers.
search_skills: natural-language/keyword search with filters for category, platform, minimum stars, minimum quality, verified-only, result limit, and max security risk; returns security grade and estimated token cost.
audit_skill: basic free trust check for an owner/repo skill, returning security grade, plain-English verdict, and quality score; deep audits point to Pro.
get_skill_install: returns recommended install commands for a chosen runtime plus a pre-install safety check; it does not run anything.
Works without an API key or signup and searches a locally cached catalog index after the first download.
Enables agents to search for, audit, and install AI agent skills and MCP servers related to PostgreSQL, with security grades and quality scores.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@AgentSkillsHub MCP Server search for safe mcp servers to manage postgres"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
🌐 Website · 🔎 Browse Skills · 🛡️ Security Report · 🏢 Enterprise
Search, audit, and install open-source AI agent skills & MCP servers from inside your agent — Claude Code, Cursor, Cline, Cherry Studio, or any MCP client. Every result is security-graded and quality-scored by AgentSkillsHub, a directory of 100K+ skills. The trust signal comes before you install.
// add to your MCP client config
{
"mcpServers": {
"agentskillshub": {
"command": "npx",
"args": ["-y", "@agentskillshub/mcp"]
}
}
}That's it — no API key, no signup. The server downloads a static catalog index once (~1.7 MB, cached locally) and does all searching locally, so it's fast, works offline after the first run, and puts zero load on the Hub backend.
Discovering a skill is easy. Knowing whether it's safe to run against your credentials is not. This server puts search + a trust check right in the agent's tool loop:
need a capability → search_skills → audit_skill → get_skill_install → installYour agent sees the security grade and estimated token cost of a skill before it picks one — signals other directories don't give it.
Related MCP server: skillet
Tool | What it does |
| Find skills by natural-language query + filters ( |
| Free basic trust check for an |
| Install commands for a runtime + a "check before you install" safety line. Returns instructions; it does not run anything. |
| Pro members ( |
User: find me a safe way to query Postgres from Claude Code
The agent calls search_skills({ query: "query postgres", category: "mcp-server", max_security_risk: "safe" }) and gets back graded results:
call518/MCP-PostgreSQL-Ops 150★ 🟢 SAFE quality 75/100
sgaunet/postgresql-mcp 6★ 🟡 CAUTION ~17.2k tokthen audit_skill / get_skill_install before it installs anything.
🟢 SAFE · 🟡 CAUTION · 🔴 UNSAFE · ⛔ REJECT · ⚪ UNAUDITED
⚪ UNAUDITED is not "probably fine" — it means no one has audited it. The search_skills filter max_security_risk excludes un-audited skills, never silently treats them as safe.
We security-graded the whole catalog and wrote up what we found: We security-graded 117,854 AI agent skills.
Free (this server): search_skills · audit_skill (basic) · get_skill_install, for any catalogued skill.
Pro / Enterprise: 5-dimension deep audit (code · credentials · vendor · supply-chain · operational), any GitHub URL (incl. <5★ / private), CI/batch auditing, compliance evidence → https://agentskillshub.top/enterprise/
Var | Default |
|
|
|
|
| unset — Pro member key for |
CLI: @agentskillshub/cli — the same search/audit/install from your terminal (npx @agentskillshub/cli search "…").
MIT © AgentSkillsHub
Free basic trust check for a skill: security grade, plain-English verdict, and quality score. Run this BEFORE installing/trusting a skill. Deep 5-dimension audit and auditing any GitHub URL (incl. <5★ / private) are Pro features.
Inputs: target (required), depth.
Get install commands for a skill plus a 'check before you install' safety line. Does NOT run anything — returns what to install, how, and what to verify first. The agent/user executes.
Inputs: repo_full_name (required), runtime.
Find open-source AI agent skills & MCP servers in the AgentSkillsHub catalog (100K+ indexed, quality subset stars>=5). Natural-language query plus optional filters. Each result includes a security_grade and estimated_tokens so you can weigh safety and context-cost BEFORE selecting one.
Inputs: query (required), limit, category, platform, +4 more.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 3 tools
Each tool has a distinct purpose: searching skills, auditing trust, and getting install commands. No overlap.
All tools use consistent snake_case verb_noun pattern: search_skills, audit_skill, get_skill_install.
Three tools are on the lower end but appropriate for the focused domain of skill discovery and trust assessment.
Covers the main user workflow of finding, auditing, and installing skills, though missing possibly detailed metadata retrieval.
Search and install 4,000+ security-scanned MCP servers from inside any MCP-aware AI client.
Search & install 13,000+ AI agent skills from skills-hub.ai inside any MCP tool.
Search, vet & assemble MCP servers from your agent: verified tools, risk labels, and trust scores.
Find, compare, and audit software for AI agents. Scored registry of tools and MCP servers.
