PlugWiki

mcp-apps-builder skill: build and verify MCP servers with mcp-use

Teaches Claude to build, debug and verify TypeScript MCP servers and MCP Apps with the mcp-use package.

Installs
33K
on skills.sh
Stars
10.8K
on GitHub
Files
8
besides SKILL.md
Updated
Oct 2026
last repo commit

mcp-apps-builder makes Claude work the way the mcp-use project recommends. It first inspects your package and the installed mcp-use version, scaffolds a new project with create-mcp-use-app when you have none, and reads only the reference guides a task needs.

It covers tools, resources, prompts, interactive Views, sign-in, advanced features and migration. It ends by running a real check, such as typecheck, build and a call to the changed tool, before it calls the work done. You need Node.js and the mcp-use package in the project.

Good for

  • TypeScript developers building an MCP server with mcp-use
  • Teams adding interactive screens (Views) to MCP tool results
  • Maintainers moving older mcp-use code to the current API

Install mcp-apps-builder

Claude Code

  1. 1

    Copy this prompt.

    Install the mcp-apps-builder skill in Claude Code. Run this command:

npx skills add https://github.com/mcp-use/mcp-use --skill mcp-apps-builder

Then check that it loaded and tell me how to use it.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

From its listing on skills.sh. Source.

What's in the skill

When it loads

Build, modify, debug, migrate, review, or verify TypeScript MCP servers and MCP Apps with mcp-use. Use for tools, resources, prompts, middleware, Views, authentication, Skills over MCP, scaffolding, and advanced features.

Sections in SKILL.md

  1. Workflow
  2. Core invariants
  3. Guardrails

Key facts

Author
mcp-use
Repo
mcp-use/mcp-use
Installs on skills.sh
33,002 as of Nov 2, 2026
GitHub stars
10,837 for the whole mcp-use/mcp-use repo, Nov 2, 2026
License
MIT (repo LICENSE and README badge); the skill folder's own LICENSE.txt is Apache 2.0
Last repo commit
Oct 30, 2026
What is inside
9 files including SKILL.md: 7 reference guides and a LICENSE.txt
skills.sh audits
Gen Agent Trust Hub pass, Socket pass, Snyk pass
Built for
TypeScript MCP servers and MCP Apps made with the mcp-use package
Reference guides
server, views, auth, skills-over-mcp, advanced-features, migration, verification

What it includes

  • Reads package.json, the server entry, views/, skills/ and the installed mcp-use version

    Workflow step 1. The installed package and its types are the source of truth.

    Read · Inspect first

  • Runs create-mcp-use-app@latest with a template

    Workflow step 2. Match the package version or tag on beta, canary or versioned projects.

    Try: “Scaffold a new mcp-use server called inventory.”

    Runs code · Scaffold a new project

  • Tools, resources, prompts, middleware, request context, result envelopes

    references/server.md

  • Interactive MCP Apps: React hooks, model context, assets, CSP

    Each View lives at views/<name>/view.tsx and is bound to a tool.

    references/views.md

  • OAuth providers, verified identity, scopes and permissions

    references/auth.md

  • Ship reusable workflows alongside a server's tools

    For repeatable multi-step workflows that would otherwise bloat tool descriptions.

    references/skills-over-mcp.md

  • OpenAPI-generated tools, proxying, notifications, subscriptions, elicitation

    references/advanced-features.md

  • Only for retired or compatibility-only imports and patterns

    references/migration.md

  • Typecheck, build, start the dev server and call the changed tool

    Read before reporting work complete.

    Try: “Verify the lookup-inventory tool works end to end.”

    Runs code · references/verification.md

  • Tools get an inputSchema; schema-backed and View-bound tools also get outputSchema

    Also: results return structuredContent, the server entry is default-exported, state is request-scoped.

    Core invariants

  • No invented exports, no module globals for identity or state, no deploys unless asked

    The last guardrail says not to deploy or mutate external systems unless the user explicitly requests it.

    Guardrails

From the official docs

Permissions

Medium risk

Claude edits your project and runs npx, npm scripts and a local server while it builds and tests. Work in a project under version control and read the commands before you approve them.

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • It runs npx and project scripts

    Scaffolding uses create-mcp-use-app@latest and verification runs npm scripts and npx mcp-use commands. Use a project under version control and read each command before you approve it. github.com

  • Its licence text is split

    The repo LICENSE is MIT, but the skill folder carries its own LICENSE.txt with Apache License 2.0 text. Check which applies before you copy the folder into a product. github.com

Security advisories

No published security advisories as of Nov 2, 2026.

Technical details
Turning on read-onlySKILL.md defines no read-only mode. Its last guardrail says not to deploy or change external systems unless you explicitly ask.
Talks toPackage downloads when it scaffolds a project with create-mcp-use-app@latest. A local MCP client connects to http://localhost:3000/mcp during verification
Sign-in and keysSKILL.md names no credentials. If you add OAuth, the auth guide expects your identity provider's settings, for example AUTH0_DOMAIN in its Auth0 example.
Scopes

  • Claude edits your server and view source files

  • Claude runs npx, npm scripts and a local development server in your project

Questions

What does mcp-apps-builder do?

It teaches Claude to build, change, debug, migrate, review and verify TypeScript MCP servers made with the mcp-use package. An MCP server is the add-on that gives an AI assistant new tools. The skill also covers MCP Apps, which are interactive screens shown with a tool's result.

How do I install mcp-apps-builder?

Use the install box at the top of this page. The skill is the SKILL.md plus seven reference guides, and Claude opens only the guides a task needs.

Does it only work with mcp-use?

Yes. The skill is written around the mcp-use package and tells Claude to treat the installed package, its types and your project code as the source of truth. It is not a general MCP guide.

Does it need an API key?

The skill names none. If you add sign-in to your server, the auth guide expects your identity provider's settings, such as an Auth0 domain in its example.

Will it deploy my server?

Not on its own. One of its guardrails says not to deploy or change external systems unless you explicitly ask.

How does it check its own work?

The verification guide says to run the smallest checks that prove the change: typecheck, build, start the development server, connect through its MCP address and call the changed tool. A source build alone is not enough when types, authentication or interactive behaviour changed.

Is mcp-apps-builder safe?

It makes Claude run project commands such as npx, npm scripts and a local development server, and edit your code. Use it in a project under version control and read the commands before you approve them.

Information

updated Nov 2, 2026

Repository
mcp-use/mcp-use
Folder
skills/mcp-apps-builder

mcp-use/mcp-useskills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 7
  1. mcp-apps-builder SKILL.md · github.com
  2. verification.md · github.com
  3. server.md · github.com
  4. views.md · github.com
  5. auth.md · github.com
  6. skills-over-mcp.md · github.com
  7. skills.sh listing · skills.sh

Updated Nov 2, 2026.