SkillsBoard
Enables discovery and retrieval of skills from GitHub repositories, allowing teams to save and organize skill recommendations.
Why Skills Board
Useful skill recommendations tend to disappear into chats, bookmarks, and personal agent setups. Skills Board gives a team one searchable place to collect the skills it recommends and lets every teammate choose how to use them.
One team library. Save useful skills once, organize them with team-specific tags, and make them easy to find again.
Different agents welcome. Share the same recommendation across Claude, Codex, Cursor, and other agent setups.
A choice of handoff. Open the original source, copy a compatible install command, or download the latest skill files as a ZIP.
Organization-scoped access. Create a team, invite members, and keep each library available to its members.
Optional MCP access. Connect compatible agents to authenticated, scope-controlled tools for finding and organizing team skills and collections.
A saved skill is a team recommendation, not a security review, compatibility certification, or pinned release. Skills Board reads the latest available source; inspect that source before using it in an agent.
Related MCP server: agentskill-mcp
How it works
Create a team library and add a skill from its GitHub repository.
Skills Board keeps the original source visible and records the recommendation for the team.
Teammates search by task, description, repository, or tag.
Each teammate opens the source, copies a compatible command, or downloads the latest files as a ZIP.
The public catalog can help with discovery when the deployment has Vercel OIDC available. The team library and direct GitHub flow remain the core product.
Run locally
Prerequisites
Node.js 20.9 or newer
pnpm 10
PostgreSQL 15 or newer
1. Install the app
git clone https://github.com/TommyBez/skillsboard.git
cd skillsboard
corepack enable
pnpm install
cp .env.example .env.localGenerate a Better Auth secret with openssl rand -base64 32, then add it and your PostgreSQL connection string to .env.local.
2. Prepare the database
Apply the committed Drizzle migrations to a new database. This creates both the Better Auth tables and the application-specific tables from the versioned SQL in drizzle/.
pnpm db:migrate3. Start developing
pnpm devOpen http://localhost:3000. Restart the server after changing DATABASE_URL, because the PostgreSQL pool is created when the module loads.
Environment variables
Variable | Required | Purpose |
| Yes | PostgreSQL connection string used by the application; Neon may use the pooled URL here. |
| For migrations on Neon | Direct PostgreSQL connection used by Drizzle migrations. It can match |
| Yes | Secret used to sign and encrypt authentication data. |
| Recommended | Public application origin; use |
| Yes outside development | Sends sign-in OTP and team invitation emails through Resend. |
| Yes outside development | Verified Resend sender for OTP and invitation emails (e.g. |
| Yes for hosted email delivery | Verifies Resend bounce, complaint, suppression, and unsubscribe webhooks. |
| Yes in Vercel Production | At least 32 random bytes encoded as base64 or hex; the dedicated root for email hashes and encrypted unsubscribe links. Local/self-hosted environments can fall back to a domain-separated key derived from |
| Only during key rotation | JSON array of retained base64/hex roots used for dual-hash suppression lookup and unsubscribe-token decryption. A prior root cannot be removed while retained records still depend on it. |
| No | Raises GitHub API rate limits for metadata and ZIP downloads. |
| No | Supplied automatically by Vercel for the optional skills.sh catalog. |
Sign-in and sign-up use email one-time codes (no passwords). Outside development, configure both RESEND_API_KEY and a domain-verified EMAIL_FROM; the fallback Resend test sender only works for Resend’s own test recipients. In development, OTP emails are skipped and any 6-digit code works. Without Vercel OIDC, the Discover catalog degrades gracefully while team libraries continue to work.
Product communications are separate from transactional OTP and invitation email. Signup consent is optional and off by default, can be changed under Settings → Email, and is enforced with local consent history, suppression records, signed unsubscribe links, and verified Resend delivery webhooks. See docs/email-compliance.md before configuring a product broadcast.
MCP access
Skills Board exposes an OAuth-protected MCP endpoint at /api/mcp. After signing in, open Settings → MCP to connect it. The tools can search team skills and collections, retrieve install commands, and discover public or repository skills. With skills:write, they can save new skills and organize collections. They cannot edit or delete saved team skills, install them in an agent, or execute them.
Tech stack
Layer | Technology |
Application | Next.js 16 App Router, React 19, TypeScript |
UI | Tailwind CSS 4, shadcn/ui, Base UI |
Authentication | Better Auth (email OTP) with organizations and OAuth provider support |
Data | PostgreSQL, Drizzle ORM |
Resend and React Email | |
Agent access | Model Context Protocol via |
Hosting | Vercel and Neon in the hosted deployment; self-hosting is supported |
Project commands
Command | What it does |
| Start the Turbopack development server. |
| Run the TypeScript compiler without emitting files. |
| Run the repository's required local checks. |
| Generate a versioned migration after changing the schema. |
| Check that the schema and committed migration snapshots match. |
| Apply pending migrations to the configured database. |
| Push the schema only to a throwaway database used for prototyping. |
| Create a production build. |
| Start the production server. |
| Preview React Email templates on port 3001. |
Contributing
Issues and pull requests are welcome. Read CONTRIBUTING.md before making a substantial change, follow the Code of Conduct, and report vulnerabilities through the process in SECURITY.md.
See the people who have helped build Skills Board on the contributors page.
License
Skills Board is available under the MIT License.
This server cannot be installed
Maintenance
Related MCP Servers
- Alicense-qualityCmaintenanceA management toolkit for AI agent skills that provides an MCP server for search-first skill discovery and on-demand loading. It enables users to validate, organize, and serve standardized skills to MCP-compatible clients like Cursor and GitHub Copilot.Last updated406MIT

agentskill-mcpofficial
AlicenseAqualityFmaintenanceMCP server for discovering and installing AI agent skills from agentskill.sh. Search skills across platforms, browse trending skills, and install them with built-in security scanning.Last updated4233MIT- AlicenseAqualityFmaintenanceAgent-first skill marketplace MCP server. AI agents discover, install, and share skills across 7 platforms via MCP protocol. 15 tools including skill search, download, upload, and agent discovery.Last updated183MIT
- Alicense-qualityAmaintenanceAn agent skill discovery, recommendation, and management system for MCP-compatible AI tools, enabling search, install, validate, and compare skills from GitHub.Last updated175MIT
Related MCP Connectors
A registry of 5,900+ peer-authored skills any MCP agent can search and load on demand.
User-owned memory for AI agents, Copilot, Claude, IDEs, CLIs, and chat apps over remote MCP.
Agent-first skill marketplace with USK open standard for Claude, Cursor, Gemini, Codex CLI.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/TommyBez/skillsboard'
If you have feedback or need assistance with the MCP directory API, please join our Discord server