
Catalog Mcp
co.skillsandagents由 skillsandagents.co 發布官方發布者v0.1.0更新於 Oct 26, 2026
Search and fetch skills from your org's Skills and Agents catalog. Bearer token required.
概覽
遠端 MCP 端點,讓助理搜尋並取得你所屬組織 Skills and Agents 目錄中的技能。
- 可以做什麼
- 在組織的 Skills and Agents 目錄中搜尋符合任務的技能
- 取得目錄中某個技能的詳細資料,供助理使用或安裝
- 該目錄收錄供 Claude Code 與 Claude Desktop 使用的技能與代理,涵蓋現金流追蹤、品牌在 AI 助理中的曝光、SEO 修正、廣告資料分析、會議紀錄等情境
- 清單未列出具體工具,因此確切操作未在此說明
- 適用情境
- 適合讓助理在安裝前先確認哪個已發布的技能或代理適合某項任務,而不必手動瀏覽目錄網站。它只涵蓋你所屬組織的目錄,並非通用的技能或套件搜尋。
- 執行需求
- 透過 streamable HTTP 連線至 app.skillsandagents.co 的遠端 MCP 端點,使用 OAuth 驗證。每個請求都需在 Authorization 標頭帶上 'Bearer ' 形式的權杖,該權杖需在 Skills and Agents 應用程式的 Marketplace 權杖設定頁產生。不支援匿名存取。
安裝
在 SourceWeft 中
- 開啟 儀表板中的 Catalog Mcp,將其新增到工作區。
- 連接 所需的 憑證。它們會被私密儲存,絕不會在公開頁面上展示。
- 為需要使用其工具的對話啟用該服務。
Web executable,透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。
交給代理程式安裝
把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式,或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南,先向你展示發布者、端點和登入方式,經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。
閱讀 https://sourceweft.com/mcp/co.skillsandagents%2Fcatalog-mcp/install.md,並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前,先告訴我它的發布者、端點和登入方式,等我確認。不要把 API 金鑰寫進命令或我會提交的檔案;問我金鑰應從哪裡取得。其他 MCP 客戶端
把它新增到你客戶端的 mcpServers 設定中。 客戶端會在首次連接時完成 OAuth 登入。
{
"mcpServers": {
"catalog": {
"type": "http",
"url": "https://app.skillsandagents.co/catalog/mcp"
}
}
}README
Skills and Agents Library
Skills that make Claude Code more capable. Install one with a single command.
Browse the live catalog at skillsandagents.co · Built and maintained by Skills and Agents Co
Each skill adds a specific capability to Claude: check your business cashflow, see where your brand shows up in ChatGPT, fix your Ghost site's Google indexing, walk through filing an unemployment claim. One install, and Claude instantly knows how to do the job.
This repo is the source of truth for every skill we publish. Each is MIT-licensed, version-tagged, and ready to drop into Claude Code, Claude Desktop, or any Anthropic-compatible runtime that loads SKILL.md files.
Install the plugin marketplace
Add the marketplace once, then install any plugin from it:
Swap financial-pulse for any plugin listed in .claude-plugin/marketplace.json. financial-pulse connects to Mercury, Ramp, and Grasshopper for a cashflow pulse. product-builder bundles code review, PR summaries, research briefs, competitor intel, and document drafting.
Who this is for
- End users who want Claude to handle a specific task end-to-end — no prompting tricks, no glue code. Pick a skill, install it, ask Claude.
- Product managers evaluating what Claude skills look like in the wild — real-world scope, packaging, and triggers worth borrowing.
- Developers building their own skills and agents — every folder here is a working reference you can fork, study, or PR against.
What's inside
Find a skill by what you want to do
More skills land here regularly. Star or watch this repo or follow the catalog to catch new releases.
Install in 30 seconds
Every skill installs the same way: download one pinned tarball, extract the skill's whole folder into ~/.claude/skills/, then restart Claude Code. Extracting the folder, not just SKILL.md, is what brings along the scripts/ and references/ files a skill's own instructions actually run.
The block runs in a subshell (the parens) so skill, ref, and the other variables it sets do not leak into your shell, and set -e inside it means a failed download or a bad skill name stops the install instead of leaving a half-populated directory that looks successful. It downloads and unpacks into a scratch directory first and only touches ~/.claude/skills/ once the extraction has succeeded, so a failed install leaves nothing behind: no empty skill folder for Claude Code to find, and no stray tarball. Re-running it replaces the install rather than merging into it, so a file dropped from a later release does not survive as a stale leftover.
What to put in skill. For almost every entry it is the folder name shown in the table above (resume-tailor, ceo-todo, and so on) — which is also the slug. It is not the slug for the four agents that ship inside another skill's folder: ceo-todo-daily installs as skill="ceo-todo", and financial-pulse-grasshopper, financial-pulse-mercury, and financial-pulse-ramp all install as skill="financial-pulse". Installing one of those pulls in the whole parent skill (including its other agents), which is expected — the agent file itself is the payload you actually run.
Installing an agent takes one more step. Claude Code loads subagents from ~/.claude/agents/, not from inside a skill folder, so the four agent entries above need their markdown copied out after the install block runs. Otherwise the file is on disk and the agent still does not register:
The fastest path is skillsandagents.co — every skill's catalog page will generate this exact pinned command for you, copy-paste ready, once the catalog site adopts the manifest this repo now publishes. Until then it still generates the older single-file command, so the command above is the one to use by hand in the meantime.
Two skills nest their
SKILL.mdone level deeper:ads-copilotandfinancial-pulse. The command above still extracts their whole folder correctly, butSKILL.mdlands at$dest/skills/<skill-name>/SKILL.mdinstead of at the top, where Claude Code looks for it. Run this once more, right after the block above, for those two:
references/andscripts/are already siblings of the movedSKILL.md, which is where its own text expects them. Every other skill in this repo is flat and needs no extra step.
Install via skills.sh
These skills are also installable through skills.sh, the open skills registry. Install the whole catalog at once:
Or pull a single skill by its slug:
Available skills and their slugs:
learn-quiz(make Claude teach you the work until you actually understand it)ghost-seo-agent(diagnose and fix Ghost Google indexing)office-tells(strip the AI tells from .pptx/.docx/.xlsx)buy-side-diligence(run buy-side due diligence on a private company)llm-visibility-agent(see where your brand shows up across ChatGPT, Perplexity, and Claude)financial-pulse(weekly cashflow pulse across Mercury, Ramp, and Grasshopper)ads-copilot(chat with your ad and analytics data for ranked optimization moves)meeting-scribe(turn a meeting transcript into structured meeting memory, inspired by USV)calendar-agent(prep briefs for upcoming meetings against your tracked people/companies, inspired by USV)news-monitor(news digests on your tracked people/companies filtered against your own entity files, inspired by USV)librarian(recurring themes from your meeting notes drafted into short posts, inspired by USV)email-agent(log an email thread's deal-flow or portfolio update against your tracked people/companies, inspired by USV)
The full catalog, with per-skill pages and pinned install commands, lives at skillsandagents.co. Skills surface on skills.sh automatically through install telemetry, so there is no registration step on our end.
Why these skills exist
Every skill in this repo solves a problem we actually had running our own companies — then we generalized it so anyone can use it.
We pin every install URL to a tagged release (never main), so the skill you install today behaves the same way next month.
For skill authors
This repo doubles as a working reference for how we package skills:
SKILL.mdwith rich YAML frontmatter — name, description, and trigger phrases that Claude actually matches against- One folder per skill, supporting files in
references/,agents/,scripts/ - Tagged releases —
v1.0.0,v1.1.0, etc. — with a generatedindex.jsonthe catalog consumes - Contribution path in CONTRIBUTING.md: new skill = new top-level folder, one PR
A skill that ships both standalone and bundled inside a plugin (e.g. local-lead-prospector and its plugin copy plugins/eta-searcher) can end up with the same supporting file committed twice. For requirements.txt, exactly one copy is human-edited — the top-level skill's — and every plugin-nested copy is generated from it via scripts/plugin-file-map.json. After editing a canonical requirements.txt, run node scripts/generate-plugin-files.mjs and commit the regenerated copy alongside your change. CI's scripts/check-plugin-files-fresh.mjs step fails the build if a plugin-nested copy has drifted from its source, so a forgotten regeneration cannot merge silently.
Cutting a release:
The index is committed before the tag is placed, not after. Tagging first would leave the tag's own tarball carrying the previous release's index.json, so the manifest a user downloads would never describe the download it came in.
A release commit does not go through a pull request. It is the one commit in this repo that pushes straight to
main, with the tag created and pushed in the same motion. The reason is mechanical, not stylistic: a release commit bumpsindex.jsonand theref="…"line above to a tag that does not exist yet, andscripts/check-index-additive.mjsandscripts/test-install.shboth resolve that ref. Opened as a PR, the release commit is red by construction, and there is no green state to merge — the ref only becomes resolvable once the tag is pushed, which happens after the merge. So: land the content changes through PRs as usual, then cut the release as a direct push. Nothing else in this repo is allowed to bypass review this way.
- Bump
versionin frontmatter for any changedSKILL.md. This is normal PR work, reviewed like anything else, and it lands before the release commit. - On an up-to-date
main, rebuild the index for the tag you are about to cut:node scripts/build-index.mjs --tag v1.x.0 --worktree.--worktreeis required here and only here — the tag does not exist yet, so there is no ref to read content from, and the working tree is what is about to become that tag. - In the same commit, bump the
ref="v1.x.0"line in the install block above to the new tag.scripts/check-index-additive.mjsfails the build if the README's ref andindex.json's ref disagree, so this is not optional and CI will say so. - Commit the regenerated
index.jsonand the README together, directly onmain. - Tag that commit and push both in one command:
git tag v1.x.0 && git push --atomic origin main v1.x.0.--atomicis what makes this one command: either the commit and the tag both land or neither does. Without it, a partial push leavesmainbriefly pinned to a ref nobody can resolve, which is exactly the red state this step exists to avoid. - Only now do the ref-resolving local checks mean anything. Run
node scripts/check-index-additive.mjs,bash scripts/test-install.sh, andbash scripts/test-readme-install.shagainst the pushed tag. Running them between steps 2 and 5 is expected to fail and tells you nothing.
Because the tag lands on the commit that already holds the matching index.json, the tag-push build checks the tag against its own manifest rather than against the last release's, and re-running node scripts/build-index.mjs --tag v1.x.0 afterwards reproduces the committed file byte for byte.
On a normal pull request none of this bites. A PR does not touch the pinned ref, so the ref index.json names is the last release's tag, which resolves fine, and every check runs for real. The only PR that would go red by construction is one that bumps the ref — and that is precisely the commit the note above says not to open as a PR.
index.json describes the tagged release, not your checkout: build-index.mjs --tag v1.x.0 reads the repo's contents at that tag, and scripts/test-install.sh verifies the published files manifest against that same tag's tarball. That is why a pull request adding a file inside a skill folder does not need to regenerate index.json — the new file joins the manifest at the next release, and until then both checks are looking at the same snapshot. If the tag is not in your clone the build fails rather than quietly reading your working tree instead; run git fetch --tags, or pass --worktree when reading the working tree is what you actually want.
License
MIT — see LICENSE. Individual skill folders may carry their own license file if imported from a separately-licensed source.
Questions, bug reports, or skill ideas? Open an issue or PR. We read every one.
來源:README.md,提交 8bab9bd
工具
0版本歷史
1- v0.1.0最新Sep 17, 2026
評分
已滿足適用檢查項的 85%
該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。
- 近 30 天內可連通必需25 分
- 已宣告認證方式必需10 分
- 已列出工具15 分
請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。
- 描述必需15 分
- 圖示10 分
- 文件15 分
- 授權條款10 分