# Configure MCP Servers for Claude Code

Plugin developers need a clear path for connecting external tools and services. This skill explains MCP configuration, authentication, tool naming, testing, and secure usage patterns.

## Install

```bash
npx skillstore add anthropics/mcp-integration
```

## Metadata

- Status: approved
- Slug: mcp-integration
- Version: 0.1.0
- Author version: 0.1.0
- Skillstore revision: r1
- Version status: valid
- Tree hash: 42d95b79203bee6c7f0174c22ea647a2ddd7f745efe839ac5e16d312031f44e9
- Author: anthropics
- GitHub username: anthropics
- License: MIT
- Repository: https://github.com/anthropics/claude-code/tree/main/plugins/plugin-dev/skills/mcp-integration
- Ref: 426dcacce0b57cb18ace616fd241b7c665d58f37
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: allowed
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: network, env\_access, external\_commands
- Quality score: 68
- Public page: https://skillstore.pages.dev/skills/mcp-integration
- Manifest: https://skillstore.pages.dev/api/skills/mcp-integration/manifest

## Capabilities

- Explains dedicated .mcp.json and inline plugin.json MCP server configuration.
- Compares stdio, SSE, HTTP, and WebSocket MCP server types.
- Describes OAuth, token, environment variable, and dynamic header authentication patterns.
- Shows how MCP tool names are formed for commands and agents.
- Provides testing, debugging, and error handling guidance for MCP integrations.
- Includes example configurations for local, hosted, and REST-style MCP servers.

## Use Cases

- Add External Service Tools: Configure a Claude Code plugin to expose service actions through MCP tools.
- Standardize Secure Authentication: Document OAuth, token, and environment variable setup for plugin users.
- Validate MCP Plugin Behavior: Test server connections, tool discovery, authentication failures, and error handling before release.

## Prompt Templates

### Choose a Server Type

```
Help me choose the right MCP server type for a Claude Code plugin that connects to [service]. Explain the tradeoffs.
```

### Draft Setup Guidance

```
Create user-facing setup instructions for an MCP plugin that uses [authentication method] and needs [required permissions].
```

### Review Tool Permissions

```
Review this MCP tool plan for least-privilege access. Identify broad permissions, risky wildcards, and safer alternatives.
```

### Design a Multi-Server Workflow

```
Design an MCP integration that combines [local server] and [hosted service]. Include authentication, testing, failure handling, and documentation needs.
```

## Limitations

- Does not implement or ship a working MCP server.
- Requires users to provide their own endpoints, credentials, and service permissions.
- Examples use placeholders and must be adapted before production use.
- Security depends on the configured MCP server, OAuth scopes, and tool allow-lists.

## Best Practices

- Use specific MCP tool allow-lists instead of broad wildcards whenever possible.
- Use HTTPS, WSS, OAuth, and environment variables for sensitive service access.
- Document required permissions, setup steps, and failure modes before publishing.

## Anti Patterns

- Hardcoding tokens, passwords, or service secrets in plugin configuration.
- Granting agents unrestricted access to all tools from a sensitive MCP server.
- Publishing example endpoints or local paths without explaining how users must replace them.

## Security Audit

- Audited at: 2026-07-20T03:35:35.144\+00:00
- Summary: The static alerts are predominantly documentation examples, Markdown formatting, placeholder URLs, and credential placeholders rather than executable behavior in this skill. No prompt injection, credential exfiltration, or hidden execution was found. Installing an MCP configuration can still cause a local process or third-party package to run, so users must review and pin servers before enabling them.

## Stats

- Views: 584
- Downloads: 18
- Favorites: 0
- Popularity score: 0