MCP Meta Skill
🚨 MANDATORY: Invoke docs-management First
STOP - Before providing ANY response about MCP (Model Context Protocol):
- INVOKE
docs-management skill
- QUERY for the user's specific topic
- BASE all responses EXCLUSIVELY on official documentation loaded
Skipping this step results in outdated or incorrect information.
Verification Checkpoint
Before responding, verify:
If ANY checkbox is unchecked, STOP and invoke docs-management first.
Overview
Central authority for Claude Code Model Context Protocol (MCP) integration. This skill uses 100% delegation to docs-management - it contains NO duplicated official documentation.
Architecture: Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.
When to Use This Skill
Keywords: MCP, Model Context Protocol, MCP servers, MCP tools, MCP resources, MCP prompts, HTTP transport, SSE transport, stdio transport, MCP installation, MCP scopes, local scope, project scope, user scope, .mcp.json, plugin MCP servers, enterprise MCP, managed-mcp.json, OAuth authentication, MCP resources, @ mentions, mcp__server__prompt, MCP output limits, MAX_MCP_OUTPUT_TOKENS, claude mcp serve
Use this skill when:
- Installing or configuring MCP servers
- Understanding MCP transport types (HTTP, SSE, stdio)
- Managing MCP server scopes (local, project, user)
- Working with plugin-provided MCP servers
- Setting up enterprise MCP configurations
- Using MCP resources with @ mentions
- Executing MCP prompts as slash commands
- Authenticating with remote MCP servers (OAuth)
- Configuring environment variable expansion in .mcp.json
- Using Claude Code as an MCP server
- Managing MCP output limits
- Troubleshooting MCP connection issues
Keyword Registry for docs-management Queries
Use these keywords when querying docs-management skill for official documentation:
Core Concepts
| Topic |
Keywords |
| Overview |
"MCP", "Model Context Protocol", "MCP overview" |
| What MCP Does |
"what you can do with MCP", "MCP capabilities" |
| Popular Servers |
"popular MCP servers", "MCP servers table" |
Installation and Transport
| Topic |
Keywords |
| Installation Overview |
"installing MCP servers", "MCP server configuration" |
| HTTP Transport |
"HTTP transport MCP", "remote HTTP server", "--transport http" |
| SSE Transport |
"SSE transport MCP", "Server-Sent Events transport" |
| Stdio Transport |
"stdio transport MCP", "local stdio server" |
| Windows Setup |
"Windows MCP servers", "cmd /c npx" |
Server Management
| Topic |
Keywords |
| Commands |
"claude mcp add", "claude mcp list", "claude mcp remove", "/mcp command" |
| JSON Configuration |
"add-json MCP", "MCP JSON configuration" |
| Import from Desktop |
"add-from-claude-desktop", "import MCP servers" |
Installation Scopes
| Topic |
Keywords |
| Scope Overview |
"MCP installation scopes", "MCP scope levels" |
| Local Scope |
"local scope MCP", "project-specific user settings" |
| Project Scope |
"project scope MCP", ".mcp.json file" |
| User Scope |
"user scope MCP", "cross-project MCP" |
| Scope Precedence |
"MCP scope precedence", "scope hierarchy" |
Plugin Integration
| Topic |
Keywords |
| Plugin MCP Servers |
"plugin-provided MCP servers", "plugin MCP configuration" |
| Plugin Features |
"CLAUDE_PLUGIN_ROOT", "plugin MCP lifecycle" |
Enterprise Configuration
| Topic |
Keywords |
| Enterprise Setup |
"enterprise MCP configuration", "managed-mcp.json" |
| Allowlists/Denylists |
"allowedMcpServers", "deniedMcpServers", "MCP restrictions" |
| Enterprise Paths |
"enterprise MCP paths", "managed MCP locations" |
Resources and Prompts
| Topic |
Keywords |
| MCP Resources |
"MCP resources", "@ mentions MCP", "reference MCP resources" |
| MCP Prompts |
"MCP prompts", "mcp__servername__promptname", "MCP skills" |
Authentication
| Topic |
Keywords |
| OAuth Setup |
"MCP OAuth", "authenticate remote MCP", "/mcp authentication" |
| Token Management |
"MCP token refresh", "clear MCP authentication" |
Advanced Configuration
| Topic |
Keywords |
| Environment Variables |
"environment variable expansion", ".mcp.json variables", "${VAR}" |
| Output Limits |
"MCP output limits", "MAX_MCP_OUTPUT_TOKENS", "output warning" |
| Claude as Server |
"claude mcp serve", "Claude Code as MCP server" |
Tool Search & Auto Mode (v2.1.7+)
| Topic |
Keywords |
| Auto Mode Default |
"MCP tool search auto mode", "ENABLE_TOOL_SEARCH", "auto mode default" |
| Auto Threshold Syntax |
"auto:N syntax", "MCP threshold percentage", "context threshold" |
| Enable/Disable |
"/mcp enable", "/mcp disable", "tool search toggle" |
Behavior Change (v2.1.7): MCP tool search auto mode is now enabled by default with a 10% context threshold. Use auto:N syntax to configure custom thresholds (0-100%).
Behavior Change (v2.1.6): @-mention syntax for MCP servers was removed. Use /mcp enable <server> instead.
Security
| Topic |
Keywords |
| MCP Security |
"MCP security", "MCP prompt injection", "trust MCP servers" |
Quick Decision Tree
What do you want to do?
- Add a remote MCP server -> Query docs-management: "installing MCP servers", "HTTP transport MCP"
- Add a local MCP server -> Query docs-management: "stdio transport MCP", "local stdio server"
- Understand scopes -> Query docs-management: "MCP installation scopes", "scope precedence"
- Share MCP with team -> Query docs-management: "project scope MCP", ".mcp.json file"
- Use MCP across projects -> Query docs-management: "user scope MCP", "cross-project MCP"
- Configure plugin MCP -> Query docs-management: "plugin-provided MCP servers"
- Set up enterprise MCP -> Query docs-management: "enterprise MCP configuration", "managed-mcp.json"
- Authenticate with OAuth -> Query docs-management: "MCP OAuth", "/mcp authentication"
- Reference MCP resources -> Query docs-management: "MCP resources", "@ mentions MCP"
- Use MCP prompts -> Query docs-management: "MCP prompts", "MCP skills"
- Expose Claude as MCP server -> Query docs-management: "claude mcp serve"
- Troubleshoot MCP issues -> Query docs-management: "MCP troubleshooting" + specific issue
Topic Coverage
Transport Types and Installation
- HTTP transport (recommended for remote servers)
- SSE transport (deprecated, use HTTP)
- Stdio transport (local processes)
- Windows-specific setup (cmd /c wrapper)
- Double dash (--) parameter explanation
- MCP_TIMEOUT environment variable
Server Management Commands
claude mcp add (with transport flags)
claude mcp list (show all servers)
claude mcp get (server details)
claude mcp remove (delete server)
/mcp command (in-session status)
claude mcp add-json (JSON configuration)
claude mcp add-from-claude-desktop (import)
claude mcp reset-project-choices (approval reset)
Scope Configuration
- Local scope (default, private to user/project)
- Project scope (.mcp.json, version controlled)
- User scope (cross-project, private)
- Scope precedence (local > project > user)
- --scope flag usage
Environment Variable Expansion
- ${VAR} syntax
- ${VAR:-default} syntax with defaults
- Supported expansion locations (command, args, env, url, headers)
- Missing variable handling
Plugin MCP Server Integration
- Plugin .mcp.json configuration
- Inline mcpServers in plugin.json
- CLAUDE_PLUGIN_ROOT variable
- Automatic lifecycle management
- Multiple transport type support
Enterprise MCP Management
- managed-mcp.json file locations (macOS, Windows, Linux)
- allowedMcpServers configuration
- deniedMcpServers configuration
- Allowlist/denylist precedence
- Enterprise scope precedence
MCP Resources System
- @ mention syntax for resources
- Resource path format (@server:protocol://path)
- Multiple resource references
- Fuzzy search in autocomplete
- Resource content types
MCP Prompts as Skills
- /mcp__servername__promptname format
- Executing prompts with arguments
- Dynamic discovery from servers
- Name normalization (spaces to underscores)
Authentication Mechanisms
- OAuth 2.0 support
- /mcp command for authentication
- Token storage and refresh
- Clear authentication option
- HTTP server authentication
Output Limits and Configuration
- Default 25,000 token limit
- Warning at 10,000 tokens
- MAX_MCP_OUTPUT_TOKENS configuration
- Use cases for higher limits
Claude Code as MCP Server
claude mcp serve command
- Claude Desktop integration
- Configuration format
- Exposed tools (View, Edit, LS, etc.)
- Executable path configuration
Delegation Patterns
Standard Query Pattern
User asks: "How do I add an MCP server?"
1. Invoke docs-management skill
2. Use keywords: "installing MCP servers", "claude mcp add"
3. Load official documentation
4. Provide guidance based EXCLUSIVELY on official docs
Multi-Topic Query Pattern
User asks: "I want to share MCP servers with my team and authenticate with OAuth"
1. Invoke docs-management skill with multiple queries:
- "project scope MCP", ".mcp.json file"
- "MCP OAuth", "/mcp authentication"
2. Synthesize guidance from official documentation
Troubleshooting Pattern
User reports: "My MCP server won't connect on Windows"
1. Invoke docs-management skill
2. Use keywords: "Windows MCP servers", "cmd /c npx"
3. Check official docs for Windows-specific requirements
4. Guide user through Windows setup from official docs
Troubleshooting Quick Reference
| Issue |
Keywords for docs-management |
| Server won't connect |
"installing MCP servers", specific transport type |
| Windows connection errors |
"Windows MCP servers", "cmd /c" |
| Authentication failing |
"MCP OAuth", "/mcp authentication" |
| Scope not working |
"MCP installation scopes", "scope precedence" |
| Environment variables not expanding |
"environment variable expansion", ".mcp.json variables" |
| Output too large |
"MCP output limits", "MAX_MCP_OUTPUT_TOKENS" |
| Plugin MCP not loading |
"plugin-provided MCP servers", "plugin MCP lifecycle" |
| Enterprise restrictions |
"allowedMcpServers", "deniedMcpServers" |
Repository-Specific Notes
This repository uses MCP servers for:
- context7 MCP: Library documentation lookup
- firecrawl MCP: Web scraping and search
- microsoft-learn MCP: Microsoft/Azure documentation
- perplexity MCP: AI-powered search
- Ref MCP: Documentation reference lookup
MCP servers are configured in the project's settings and should follow the patterns documented in official Claude Code documentation.
Auditing MCP Configurations
This skill provides the validation criteria used by the mcp-auditor agent for formal audits.
CRITICAL: CLI-First Discovery (MANDATORY)
ALWAYS run claude mcp list FIRST before searching for configuration files. This is mandatory because:
- File locations can change between Claude Code versions
- User config is in
~/.claude.json (NOT ~/.claude/.mcp.json - this path does not exist)
- The
mcpServers key may be deep in the file (line 200+) - easy to miss with partial reads
- CLI shows runtime state - files may not reflect what is actually running
# Step 1: Get authoritative list of configured servers
claude mcp list
# Step 2: Get details on specific server (shows scope and config)
claude mcp get <server-name>
Common Discovery Mistakes:
| Mistake |
Why It Fails |
Correct Approach |
Only searching for .mcp.json files |
User MCP is in ~/.claude.json, not a separate file |
Use CLI first, then verify files |
Reading only first N lines of ~/.claude.json |
mcpServers may be deep in the file (line 200+) |
Grep for mcpServers key first |
| Ignoring CLI discovery |
Files may not reflect runtime state |
Always start with claude mcp list |
Wrong path ~/.claude/.mcp.json |
This path does not exist; user config is ~/.claude.json |
Check official docs for current paths |
Audit Resources
| Resource |
Location |
Purpose |
| Audit Framework |
references/audit-framework.md |
Query guides and scoring criteria |
Scoring Categories
| Category |
Points |
Key Criteria |
| Configuration Structure |
25 |
Valid JSON, required fields |
| Server Entries |
25 |
Valid server configs, proper format |
| Transport Config |
20 |
Valid transport types, correct settings |
| Authentication |
15 |
Proper auth, no exposed secrets |
| Scope Compliance |
15 |
Correct scope (project/user/plugin) |
Thresholds: 85+ = PASS, 70-84 = PASS WITH WARNINGS, <70 = FAIL
Related Agent
The mcp-auditor agent (Haiku model) performs formal audits using this skill:
- Auto-loads this skill via
skills: mcp-integration
- Uses audit framework and docs-management for rules
- Generates structured audit reports
- Invoked by
/audit-mcp command
External Technology Validation
When auditing MCP configurations that reference external technologies (scripts, packages, runtimes), the auditor MUST validate claims using MCP servers before flagging findings.
Technologies Requiring MCP Validation:
- .NET/C# scripts: Validate with microsoft-learn + perplexity
- Node.js/npm packages: Validate with context7 + perplexity
- Python scripts/packages: Validate with context7 + perplexity
- Shell scripts: Validate with perplexity
- Any version-specific claims: ALWAYS validate with perplexity
Validation Rule:
Never flag a technology usage as incorrect without first:
- Querying appropriate MCP server(s) for current documentation
- Verifying with perplexity for recent changes (especially .NET 10+)
- Documenting MCP sources in the finding
Stale Data Warning:
- microsoft-learn can return cached/outdated documentation
- ALWAYS pair microsoft-learn with perplexity for version verification
- Trust perplexity for version numbers and recently-released features
References
Reference files:
- Audit Framework - Audit scoring and query guides
- Credential Patterns - Secure credential management patterns
Official Documentation (via docs-management skill):
- Primary: "mcp" documentation
- Related: "plugins", "hooks", "settings", "security"
Repository-Specific:
- MCP configuration: Project-level .mcp.json or local settings
- Skills configuration:
.claude/settings.json
Version History
v1.2.0 (2026-01-16): Tool Search & Auto Mode keywords (v2.1.6-v2.1.9)
- Added "Tool Search & Auto Mode (v2.1.7+)" keyword section
- Auto mode default behavior change (10% threshold)
- auto:N syntax for custom thresholds
- Documented @-mention removal (v2.1.6) - use /mcp enable instead
v1.1.0 (2025-12-25): Audit framework enhancement
- Added external technology validation guidance
- Enhanced CLI-first discovery documentation
- Improved scoring rubric for MCP audits
v1.0.0 (2025-11-26): Initial release
- Pure delegation architecture
- Comprehensive keyword registry
- Quick decision tree
- Topic coverage for all MCP features
- Troubleshooting quick reference
Last Updated
Date: 2026-01-16
Model: claude-opus-4-5-20251101
Converted and distributed by TomeVault — claim your Tome and manage your conversions.
1---2name: mcp-integration-53description: Central authority for Claude Code Model Context Protocol (MCP) integration. Covers MCP server installation (HTTP, SSE, stdio transports), server management (add, list, remove), installation scopes (local, project, user), plugin-provided MCP servers, enterprise MCP configuration, MCP resources and @ mentions, MCP prompts as skills, OAuth authentication, environment variable expansion, Claude Code as MCP server, output limits, and MCP security. Assists with connecting external tools, configuring MCP servers, managing authentication, and troubleshooting MCP issues. Delegates 100% to docs-management skill for official documentation. Use when this capability is needed.4---56# MCP Meta Skill78## 🚨 MANDATORY: Invoke docs-management First910> **STOP - Before providing ANY response about MCP (Model Context Protocol):**11>12> 1. **INVOKE** `docs-management` skill13> 2. **QUERY** for the user's specific topic14> 3. **BASE** all responses EXCLUSIVELY on official documentation loaded15>16> **Skipping this step results in outdated or incorrect information.**1718### Verification Checkpoint1920Before responding, verify:2122- [ ] Did I invoke docs-management skill?23- [ ] Did official documentation load?24- [ ] Is my response based EXCLUSIVELY on official docs?2526If ANY checkbox is unchecked, STOP and invoke docs-management first.2728---2930## Overview3132Central authority for Claude Code Model Context Protocol (MCP) integration. This skill uses **100% delegation to docs-management** - it contains NO duplicated official documentation.3334**Architecture:** Pure delegation with keyword registry. All official documentation is accessed via docs-management skill queries.3536## When to Use This Skill3738**Keywords:** MCP, Model Context Protocol, MCP servers, MCP tools, MCP resources, MCP prompts, HTTP transport, SSE transport, stdio transport, MCP installation, MCP scopes, local scope, project scope, user scope, .mcp.json, plugin MCP servers, enterprise MCP, managed-mcp.json, OAuth authentication, MCP resources, @ mentions, mcp__server__prompt, MCP output limits, MAX_MCP_OUTPUT_TOKENS, claude mcp serve3940**Use this skill when:**4142- Installing or configuring MCP servers43- Understanding MCP transport types (HTTP, SSE, stdio)44- Managing MCP server scopes (local, project, user)45- Working with plugin-provided MCP servers46- Setting up enterprise MCP configurations47- Using MCP resources with @ mentions48- Executing MCP prompts as slash commands49- Authenticating with remote MCP servers (OAuth)50- Configuring environment variable expansion in .mcp.json51- Using Claude Code as an MCP server52- Managing MCP output limits53- Troubleshooting MCP connection issues5455## Keyword Registry for docs-management Queries5657Use these keywords when querying docs-management skill for official documentation:5859### Core Concepts6061| Topic | Keywords |62| --- | --- |63| Overview | "MCP", "Model Context Protocol", "MCP overview" |64| What MCP Does | "what you can do with MCP", "MCP capabilities" |65| Popular Servers | "popular MCP servers", "MCP servers table" |6667### Installation and Transport6869| Topic | Keywords |70| --- | --- |71| Installation Overview | "installing MCP servers", "MCP server configuration" |72| HTTP Transport | "HTTP transport MCP", "remote HTTP server", "--transport http" |73| SSE Transport | "SSE transport MCP", "Server-Sent Events transport" |74| Stdio Transport | "stdio transport MCP", "local stdio server" |75| Windows Setup | "Windows MCP servers", "cmd /c npx" |7677### Server Management7879| Topic | Keywords |80| --- | --- |81| Commands | "claude mcp add", "claude mcp list", "claude mcp remove", "/mcp command" |82| JSON Configuration | "add-json MCP", "MCP JSON configuration" |83| Import from Desktop | "add-from-claude-desktop", "import MCP servers" |8485### Installation Scopes8687| Topic | Keywords |88| --- | --- |89| Scope Overview | "MCP installation scopes", "MCP scope levels" |90| Local Scope | "local scope MCP", "project-specific user settings" |91| Project Scope | "project scope MCP", ".mcp.json file" |92| User Scope | "user scope MCP", "cross-project MCP" |93| Scope Precedence | "MCP scope precedence", "scope hierarchy" |9495### Plugin Integration9697| Topic | Keywords |98| --- | --- |99| Plugin MCP Servers | "plugin-provided MCP servers", "plugin MCP configuration" |100| Plugin Features | "CLAUDE_PLUGIN_ROOT", "plugin MCP lifecycle" |101102### Enterprise Configuration103104| Topic | Keywords |105| --- | --- |106| Enterprise Setup | "enterprise MCP configuration", "managed-mcp.json" |107| Allowlists/Denylists | "allowedMcpServers", "deniedMcpServers", "MCP restrictions" |108| Enterprise Paths | "enterprise MCP paths", "managed MCP locations" |109110### Resources and Prompts111112| Topic | Keywords |113| --- | --- |114| MCP Resources | "MCP resources", "@ mentions MCP", "reference MCP resources" |115| MCP Prompts | "MCP prompts", "mcp__servername__promptname", "MCP skills" |116117### Authentication118119| Topic | Keywords |120| --- | --- |121| OAuth Setup | "MCP OAuth", "authenticate remote MCP", "/mcp authentication" |122| Token Management | "MCP token refresh", "clear MCP authentication" |123124### Advanced Configuration125126| Topic | Keywords |127| --- | --- |128| Environment Variables | "environment variable expansion", ".mcp.json variables", "${VAR}" |129| Output Limits | "MCP output limits", "MAX_MCP_OUTPUT_TOKENS", "output warning" |130| Claude as Server | "claude mcp serve", "Claude Code as MCP server" |131132### Tool Search & Auto Mode (v2.1.7+)133134| Topic | Keywords |135| --- | --- |136| Auto Mode Default | "MCP tool search auto mode", "ENABLE_TOOL_SEARCH", "auto mode default" |137| Auto Threshold Syntax | "auto:N syntax", "MCP threshold percentage", "context threshold" |138| Enable/Disable | "/mcp enable", "/mcp disable", "tool search toggle" |139140**Behavior Change (v2.1.7):** MCP tool search auto mode is now enabled by default with a 10% context threshold. Use `auto:N` syntax to configure custom thresholds (0-100%).141142**Behavior Change (v2.1.6):** @-mention syntax for MCP servers was removed. Use `/mcp enable <server>` instead.143144### Security145146| Topic | Keywords |147| --- | --- |148| MCP Security | "MCP security", "MCP prompt injection", "trust MCP servers" |149150## Quick Decision Tree151152**What do you want to do?**1531541. **Add a remote MCP server** -> Query docs-management: "installing MCP servers", "HTTP transport MCP"1552. **Add a local MCP server** -> Query docs-management: "stdio transport MCP", "local stdio server"1563. **Understand scopes** -> Query docs-management: "MCP installation scopes", "scope precedence"1574. **Share MCP with team** -> Query docs-management: "project scope MCP", ".mcp.json file"1585. **Use MCP across projects** -> Query docs-management: "user scope MCP", "cross-project MCP"1596. **Configure plugin MCP** -> Query docs-management: "plugin-provided MCP servers"1607. **Set up enterprise MCP** -> Query docs-management: "enterprise MCP configuration", "managed-mcp.json"1618. **Authenticate with OAuth** -> Query docs-management: "MCP OAuth", "/mcp authentication"1629. **Reference MCP resources** -> Query docs-management: "MCP resources", "@ mentions MCP"16310. **Use MCP prompts** -> Query docs-management: "MCP prompts", "MCP skills"16411. **Expose Claude as MCP server** -> Query docs-management: "claude mcp serve"16512. **Troubleshoot MCP issues** -> Query docs-management: "MCP troubleshooting" + specific issue166167## Topic Coverage168169### Transport Types and Installation170171- HTTP transport (recommended for remote servers)172- SSE transport (deprecated, use HTTP)173- Stdio transport (local processes)174- Windows-specific setup (cmd /c wrapper)175- Double dash (--) parameter explanation176- MCP_TIMEOUT environment variable177178### Server Management Commands179180- `claude mcp add` (with transport flags)181- `claude mcp list` (show all servers)182- `claude mcp get` (server details)183- `claude mcp remove` (delete server)184- `/mcp` command (in-session status)185- `claude mcp add-json` (JSON configuration)186- `claude mcp add-from-claude-desktop` (import)187- `claude mcp reset-project-choices` (approval reset)188189### Scope Configuration190191- Local scope (default, private to user/project)192- Project scope (.mcp.json, version controlled)193- User scope (cross-project, private)194- Scope precedence (local > project > user)195- --scope flag usage196197### Environment Variable Expansion198199- ${VAR} syntax200- ${VAR:-default} syntax with defaults201- Supported expansion locations (command, args, env, url, headers)202- Missing variable handling203204### Plugin MCP Server Integration205206- Plugin .mcp.json configuration207- Inline mcpServers in plugin.json208- CLAUDE_PLUGIN_ROOT variable209- Automatic lifecycle management210- Multiple transport type support211212### Enterprise MCP Management213214- managed-mcp.json file locations (macOS, Windows, Linux)215- allowedMcpServers configuration216- deniedMcpServers configuration217- Allowlist/denylist precedence218- Enterprise scope precedence219220### MCP Resources System221222- @ mention syntax for resources223- Resource path format (@server:protocol://path)224- Multiple resource references225- Fuzzy search in autocomplete226- Resource content types227228### MCP Prompts as Skills229230- /mcp__servername__promptname format231- Executing prompts with arguments232- Dynamic discovery from servers233- Name normalization (spaces to underscores)234235### Authentication Mechanisms236237- OAuth 2.0 support238- /mcp command for authentication239- Token storage and refresh240- Clear authentication option241- HTTP server authentication242243### Output Limits and Configuration244245- Default 25,000 token limit246- Warning at 10,000 tokens247- MAX_MCP_OUTPUT_TOKENS configuration248- Use cases for higher limits249250### Claude Code as MCP Server251252- `claude mcp serve` command253- Claude Desktop integration254- Configuration format255- Exposed tools (View, Edit, LS, etc.)256- Executable path configuration257258## Delegation Patterns259260### Standard Query Pattern261262```text263User asks: "How do I add an MCP server?"2642651. Invoke docs-management skill2662. Use keywords: "installing MCP servers", "claude mcp add"2673. Load official documentation2684. Provide guidance based EXCLUSIVELY on official docs269```270271### Multi-Topic Query Pattern272273```text274User asks: "I want to share MCP servers with my team and authenticate with OAuth"2752761. Invoke docs-management skill with multiple queries:277 - "project scope MCP", ".mcp.json file"278 - "MCP OAuth", "/mcp authentication"2792. Synthesize guidance from official documentation280```281282### Troubleshooting Pattern283284```text285User reports: "My MCP server won't connect on Windows"2862871. Invoke docs-management skill2882. Use keywords: "Windows MCP servers", "cmd /c npx"2893. Check official docs for Windows-specific requirements2904. Guide user through Windows setup from official docs291```292293## Troubleshooting Quick Reference294295| Issue | Keywords for docs-management |296| --- | --- |297| Server won't connect | "installing MCP servers", specific transport type |298| Windows connection errors | "Windows MCP servers", "cmd /c" |299| Authentication failing | "MCP OAuth", "/mcp authentication" |300| Scope not working | "MCP installation scopes", "scope precedence" |301| Environment variables not expanding | "environment variable expansion", ".mcp.json variables" |302| Output too large | "MCP output limits", "MAX_MCP_OUTPUT_TOKENS" |303| Plugin MCP not loading | "plugin-provided MCP servers", "plugin MCP lifecycle" |304| Enterprise restrictions | "allowedMcpServers", "deniedMcpServers" |305306## Repository-Specific Notes307308This repository uses MCP servers for:309310- **context7 MCP**: Library documentation lookup311- **firecrawl MCP**: Web scraping and search312- **microsoft-learn MCP**: Microsoft/Azure documentation313- **perplexity MCP**: AI-powered search314- **Ref MCP**: Documentation reference lookup315316MCP servers are configured in the project's settings and should follow the patterns documented in official Claude Code documentation.317318## Auditing MCP Configurations319320This skill provides the validation criteria used by the `mcp-auditor` agent for formal audits.321322### CRITICAL: CLI-First Discovery (MANDATORY)323324**ALWAYS run `claude mcp list` FIRST** before searching for configuration files. This is mandatory because:3253261. **File locations can change** between Claude Code versions3272. **User config is in `~/.claude.json`** (NOT `~/.claude/.mcp.json` - this path does not exist)3283. **The `mcpServers` key may be deep** in the file (line 200+) - easy to miss with partial reads3294. **CLI shows runtime state** - files may not reflect what is actually running330331```bash332# Step 1: Get authoritative list of configured servers333claude mcp list334335# Step 2: Get details on specific server (shows scope and config)336claude mcp get <server-name>337```338339**Common Discovery Mistakes:**340341| Mistake | Why It Fails | Correct Approach |342| --- | --- | --- |343| Only searching for `.mcp.json` files | User MCP is in `~/.claude.json`, not a separate file | Use CLI first, then verify files |344| Reading only first N lines of `~/.claude.json` | `mcpServers` may be deep in the file (line 200+) | Grep for `mcpServers` key first |345| Ignoring CLI discovery | Files may not reflect runtime state | Always start with `claude mcp list` |346| Wrong path `~/.claude/.mcp.json` | This path does not exist; user config is `~/.claude.json` | Check official docs for current paths |347348### Audit Resources349350| Resource | Location | Purpose |351| --- | --- | --- |352| Audit Framework | `references/audit-framework.md` | Query guides and scoring criteria |353354### Scoring Categories355356| Category | Points | Key Criteria |357| --- | --- | --- |358| Configuration Structure | 25 | Valid JSON, required fields |359| Server Entries | 25 | Valid server configs, proper format |360| Transport Config | 20 | Valid transport types, correct settings |361| Authentication | 15 | Proper auth, no exposed secrets |362| Scope Compliance | 15 | Correct scope (project/user/plugin) |363364**Thresholds:** 85+ = PASS, 70-84 = PASS WITH WARNINGS, <70 = FAIL365366### Related Agent367368The `mcp-auditor` agent (Haiku model) performs formal audits using this skill:369370- Auto-loads this skill via `skills: mcp-integration`371- Uses audit framework and docs-management for rules372- Generates structured audit reports373- Invoked by `/audit-mcp` command374375### External Technology Validation376377When auditing MCP configurations that reference external technologies (scripts, packages, runtimes), the auditor MUST validate claims using MCP servers before flagging findings.378379**Technologies Requiring MCP Validation:**380381- .NET/C# scripts: Validate with microsoft-learn + perplexity382- Node.js/npm packages: Validate with context7 + perplexity383- Python scripts/packages: Validate with context7 + perplexity384- Shell scripts: Validate with perplexity385- Any version-specific claims: ALWAYS validate with perplexity386387**Validation Rule:**388389Never flag a technology usage as incorrect without first:3903911. Querying appropriate MCP server(s) for current documentation3922. Verifying with perplexity for recent changes (especially .NET 10+)3933. Documenting MCP sources in the finding394395**Stale Data Warning:**396397- microsoft-learn can return cached/outdated documentation398- ALWAYS pair microsoft-learn with perplexity for version verification399- Trust perplexity for version numbers and recently-released features400401## References402403**Reference files:**404405- [Audit Framework](references/audit-framework.md) - Audit scoring and query guides406- [Credential Patterns](references/credential-patterns.md) - Secure credential management patterns407408**Official Documentation (via docs-management skill):**409410- Primary: "mcp" documentation411- Related: "plugins", "hooks", "settings", "security"412413**Repository-Specific:**414415- MCP configuration: Project-level .mcp.json or local settings416- Skills configuration: `.claude/settings.json`417418## Version History419420- **v1.2.0** (2026-01-16): Tool Search & Auto Mode keywords (v2.1.6-v2.1.9)421 - Added "Tool Search & Auto Mode (v2.1.7+)" keyword section422 - Auto mode default behavior change (10% threshold)423 - auto:N syntax for custom thresholds424 - Documented @-mention removal (v2.1.6) - use /mcp enable instead425426- **v1.1.0** (2025-12-25): Audit framework enhancement427 - Added external technology validation guidance428 - Enhanced CLI-first discovery documentation429 - Improved scoring rubric for MCP audits430431- **v1.0.0** (2025-11-26): Initial release432 - Pure delegation architecture433 - Comprehensive keyword registry434 - Quick decision tree435 - Topic coverage for all MCP features436 - Troubleshooting quick reference437438---439440## Last Updated441442**Date:** 2026-01-16443**Model:** claude-opus-4-5-20251101444445---446> Converted and distributed by [TomeVault](https://tomevault.io/claim/melodic-software) — claim your Tome and manage your conversions.447<!-- tomevault:4.0:skill_md:2026-04-11 -->