Agent skill · software engineering · erichowens
mcp-creator
Expert MCP (Model Context Protocol) server developer creating safe, performant, production-ready servers with proper security, error handling, and developer experience. Activate on 'create
Why this skill is useful
Adds executable scripts for scaffolding and testing MCP servers that are not widely available in public documentation.
What it needs
Requires npm installed locally. About 7k tokens when loaded. Last updated 2026-07-14. 180 stars on the source repository.
What this skill does
MCP Creator Expert in building production-ready Model Context Protocol servers. Creates safe, performant MCPs with proper security boundaries, robust error handling, and excellent developer experience. When to Use This Skill Use MCP when you need: External API integration with authentication Stateful connections (databases, WebSockets, sessions) Multiple related tools sharing configuration Security boundaries between Claude and external services Connection pooling and resource management Do NOT use MCP for: Pure domain expertise (use Skill) Multi-step orchestration (use Agent) Local stateless operations (use Script) Simple file processing (use Claude's built-in tools) Quick Start MCP Architecture Overview Core MCP Server Template Tool Design Principles 1. Clear Naming 2. Precise Input Schemas 3. Structured Outputs Security Hardening (CRITICAL) Input Validation Secret Management Rate Limiting Authentication Boundaries Error Handling Patterns Structured Error Responses Graceful Degradation Performance Optimization Connection Pooling Caching Layer Anti-Patterns Anti-Pattern: No Input Validation What it looks like: Passing user input directly to APIs/databases Why wrong: SQL injection, command injection, data corruption Instead: Validate with Zod, sanitize inputs, use parameterized queries Anti-Pattern: Secrets in Code What it looks like: Hardcoded API keys, tokens in source Why wrong: Secrets leak via git, logs, error messages Instead: Environment variables, secret managers, encrypted config Anti-Pattern: No Rate Limiting What it looks like: Unlimited API calls to external services Why wrong: Cost explosion, API bans, resource exhaustion Instead: Token bucket, sliding window, or adaptive rate limiting Anti-Pattern: Synchronous Blocking What it looks like: sleep(), blocking I/O in async handlers Why wrong: Blocks all requests, causes timeouts Instead: Proper async/await, non-blocking patterns Anti-Pattern: Silent Failures What it looks like: Empty catch blocks, swallowe …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills erichowens/mcp-creator