Skills mcp-apps-builder

📦

mcp-apps-builder

Name: mcp-apps-builder
Author: mcp-use

Content revision r1 Safe ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables⚡ Contains scripts

Build MCP Servers with mcp-use

MCP server work often fails when tools, resources, prompts, widgets, and authentication are mixed without clear patterns. This skill gives Claude, Codex, and Claude Code focused mcp-use guidance for implementation, review, and deployment.

Supports: Claude Codex Code(CC)

📊 74 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "mcp-apps-builder" from https://skillstore.io/skills/mcp-use-mcp-apps-builder.md and its manifest at https://skillstore.io/api/skills/mcp-use-mcp-apps-builder/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/mcp-use-mcp-apps-builder.md Signed manifest GET /api/skills/mcp-use-mcp-apps-builder/manifest Signed lockfile GET /api/skills/mcp-use-mcp-apps-builder/lockfile

Test it

Using "mcp-apps-builder". Create a new MCP server with a greeting action.

Expected outcome:

The assistant identifies the quickstart and tools references, scaffolds the project, adds a focused greeting tool, and explains how to run it locally.

Using "mcp-apps-builder". Add a visual browser for search results.

Expected outcome:

The assistant recommends a widget-backed workflow, defines which data belongs in tool output, and outlines state handling in the widget.

Using "mcp-apps-builder". Review my MCP server before deployment.

Expected outcome:

The assistant checks validation, response helpers, authentication configuration, secret handling, rate limits, and deployment prerequisites.

Security Audit

Safe

v4 • 7/6/2026 Open versioned report

Static analysis reported many severe patterns, but contextual review found them in Markdown documentation, examples, relative links, and placeholder configuration. No confirmed malicious intent, credential exfiltration, prompt-injection attempt, or runnable hidden behavior was found. The main residual risk is that users may copy example commands, network calls, or environment variable handling without adapting them safely.

Files scanned

8,688

Lines analyzed

Review items

False positives ignored

Risk Factors

⚙️ External commands (230)

🌐 Network access (50)

📁 Filesystem access (40)

🔑 Env variables (47)

⚡ Contains scripts (1)

references/patterns/common-patterns.md:736

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/mcp-use-mcp-apps-builder/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/mcp-use-mcp-apps-builder/security.svg)](https://skillstore.io/skills/mcp-use-mcp-apps-builder?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/mcp-use-mcp-apps-builder?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/mcp-use-mcp-apps-builder/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/mcp-use-mcp-apps-builder.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

mcp-use. (2026). mcp-apps-builder security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/mcp-use-mcp-apps-builder/audits/4

BibTeX citation

@techreport{mcp-use-mcp-use-mcp-apps-builder-2026,
  author = {mcp-use},
  title = {mcp-apps-builder security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/mcp-use-mcp-apps-builder/audits/4},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "mcp-apps-builder security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
  - name: "mcp-use"
date-released: "2026-07-06"
url: "https://skillstore.io/skills/mcp-use-mcp-apps-builder/audits/4"
identifiers:
  - type: other
    value: "skillstore:mcp-use-mcp-apps-builder:audit:4"
    description: "Skillstore immutable audit report identifier"

Compare variants

2 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

mcp-use Recommended Current

mcp-use-mcp-apps-builder

Skillstore Score 74

Evidence Confidence High

Skillstore usage 11

Updated

2026-09-09

shubhamsaboo

shubhamsaboo-mcp-apps-builder

Skillstore Score 73

Evidence Confidence Medium

Skillstore usage 4

Updated

2026-09-09

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Create a new MCP server

Use the quickstart and architecture references to scaffold a mcp-use server and add the first tool.

Add authenticated MCP features

Use the authentication references to choose WorkOS, Supabase, or a custom OAuth provider.

Review MCP implementation quality

Use the checklists and common patterns to review validation, response formatting, widgets, and deployment readiness.

Try These Prompts

Start a Server

Use the mcp-apps-builder skill to help me create a new mcp-use MCP server with one simple tool.

Add Authentication

Use the mcp-apps-builder authentication references to add Supabase or WorkOS authentication to my MCP server.

Build a Widget Workflow

Use the mcp-apps-builder widget references to design a React widget that shows data and calls a server tool.

Audit an MCP Server

Use the mcp-apps-builder references to review my MCP server for architecture, validation, response helpers, authentication, and deployment risks.

Best Practices

Read the specific reference file before changing a matching MCP primitive.
Use Zod schemas and response helpers for predictable tool behavior.
Keep secrets in environment variables and document required configuration.

Avoid

Do not manually recreate framework boilerplate when the mcp-use scaffold is appropriate.
Do not expose broad tools when several focused tools would be clearer.
Do not copy placeholder API keys, URLs, or secrets into production code.