@agent-root/mcp-server 0.1.0

package/bin/server.js

@@ -0,0 +1,257 @@
+#!/usr/bin/env node
+
+// AgentRoot MCP Server — search and install AI agent skills via MCP
+// Stateless, no auth, no config. All state lives in AgentRoot's API and on the local filesystem.
+
+import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { z } from 'zod';
+import { createRequire } from 'module';
+import path from 'path';
+
+const require = createRequire(import.meta.url);
+const {
+  API_BASE, MANIFEST_FILE, TOOL_NAMES,
+  detectTools, resolveToolDir, hashContent, scanInstalled, writeSkill,
+} = require('@agent-root/core');
+
+const USER_AGENT = '@agent-root/mcp-server/0.1.0';
+
+// ─── Helpers ───────────────────────────────────────────────────────────────
+
+async function apiFetch(urlPath) {
+  const url = `${API_BASE}${urlPath}`;
+  const res = await fetch(url, {
+    headers: {
+      'Accept': 'application/json',
+      'User-Agent': USER_AGENT,
+    },
+  });
+
+  if (!res.ok) {
+    throw new Error(`API error: HTTP ${res.status} for ${url}`);
+  }
+
+  const contentType = res.headers.get('content-type') || '';
+  if (!contentType.includes('application/json')) {
+    throw new Error(`Expected JSON response from ${url}, got ${contentType}`);
+  }
+
+  return res.json();
+}
+
+async function fetchText(url) {
+  const res = await fetch(url, {
+    headers: { 'User-Agent': USER_AGENT },
+  });
+  if (!res.ok) {
+    throw new Error(`HTTP ${res.status} fetching ${url}`);
+  }
+  return res.text();
+}
+
+// ─── MCP Server ────────────────────────────────────────────────────────────
+
+const server = new McpServer({
+  name: 'agentroot',
+  version: '0.1.0',
+});
+
+// ─── Tool: search_skills ──────────────────────────────────────────────────
+
+server.tool(
+  'search_skills',
+  'Search the AgentRoot registry for AI agent skills. Returns matching skills with name, description, domain, and verification status.',
+  {
+    query: z.string().describe('Search query (e.g. "stripe payments", "github actions", "database migrations")'),
+    verified_only: z.boolean().optional().describe('If true, only return skills verified via DNS by the domain owner'),
+  },
+  async ({ query, verified_only }) => {
+    try {
+      const data = await apiFetch(`/api/find-skills?q=${encodeURIComponent(query)}`);
+
+      if (!data.skills || data.skills.length === 0) {
+        return {
+          content: [{ type: 'text', text: `No skills found for "${query}".` }],
+        };
+      }
+
+      let skills = data.skills.map(s => ({
+        skill_id: s.skill_id,
+        name: s.name,
+        description: s.description,
+        domain: s.domain,
+        verified: s.source === 'dns',
+        skill_md_url: s.skill_md_url,
+      }));
+
+      if (verified_only) {
+        skills = skills.filter(s => s.verified);
+      }
+
+      if (skills.length === 0) {
+        return {
+          content: [{ type: 'text', text: `No verified skills found for "${query}". Try searching without verified_only filter.` }],
+        };
+      }
+
+      return {
+        content: [{ type: 'text', text: JSON.stringify(skills, null, 2) }],
+      };
+    } catch (err) {
+      return {
+        content: [{ type: 'text', text: `Error searching skills: ${err.message}` }],
+        isError: true,
+      };
+    }
+  }
+);
+
+// ─── Tool: install_skill ──────────────────────────────────────────────────
+
+server.tool(
+  'install_skill',
+  'Install a skill from the AgentRoot registry. Fetches the SKILL.md from the publisher\'s domain and writes it to the correct tool directory. For unverified skills, a warning is included that should be presented to the user before confirming.',
+  {
+    domain: z.string().describe('The publisher domain (e.g. "stripe.com", "agentroot.io")'),
+    skill_id: z.string().describe('The skill identifier (e.g. "payments", "discover-skills")'),
+    tool: z.enum(['claude', 'codex', 'gemini', 'cursor', 'agents']).optional().describe('Target tool directory. Auto-detected if omitted.'),
+  },
+  async ({ domain, skill_id, tool }) => {
+    try {
+      // 1. Resolve skill metadata from API
+      const data = await apiFetch(`/api/skills/${encodeURIComponent(domain)}/item/${encodeURIComponent(skill_id)}`);
+
+      if (!data.skill) {
+        return {
+          content: [{ type: 'text', text: `Skill not found: ${domain}/${skill_id}` }],
+          isError: true,
+        };
+      }
+
+      const skill = data.skill;
+      const verified = skill.source === 'dns';
+
+      if (!skill.skill_md_url) {
+        return {
+          content: [{ type: 'text', text: `Skill ${domain}/${skill_id} has no SKILL.md URL.` }],
+          isError: true,
+        };
+      }
+
+      // 2. Fetch SKILL.md content from publisher's domain
+      let content;
+      try {
+        content = await fetchText(skill.skill_md_url);
+      } catch (err) {
+        return {
+          content: [{ type: 'text', text: `Failed to fetch SKILL.md from ${skill.skill_md_url}: ${err.message}` }],
+          isError: true,
+        };
+      }
+
+      // 3. Resolve target tool directory
+      let targetTool;
+      if (tool) {
+        targetTool = tool;
+      } else {
+        const detected = detectTools();
+        if (detected.length === 1) {
+          targetTool = detected[0];
+        } else if (detected.length > 1) {
+          // Default to 'claude' if multiple detected, since we're likely in an MCP context
+          targetTool = detected.includes('claude') ? 'claude' : detected[0];
+        } else {
+          targetTool = 'agents'; // cross-tool fallback
+        }
+      }
+
+      // 4. Write SKILL.md and manifest
+      const baseDir = resolveToolDir(targetTool);
+      const skillDir = path.join(baseDir, skill_id);
+      const skillPath = path.join(skillDir, 'SKILL.md');
+
+      const manifest = {
+        source_domain: domain,
+        skill_id: skill_id,
+        name: skill.name,
+        description: skill.description,
+        skill_md_url: skill.skill_md_url,
+        installed_at: new Date().toISOString(),
+        version_hash: hashContent(content),
+        tool: targetTool,
+      };
+      writeSkill(skillDir, content, manifest);
+
+      // 5. Build response
+      const result = {
+        success: true,
+        path: skillPath,
+        verified,
+        skill_id,
+        domain,
+        tool: targetTool,
+      };
+
+      if (!verified) {
+        result.warning = 'This skill is unverified. It was submitted by URL, not verified via DNS by the domain owner. Please confirm with the user before they rely on it.';
+      }
+
+      return {
+        content: [{ type: 'text', text: JSON.stringify(result, null, 2) }],
+      };
+    } catch (err) {
+      return {
+        content: [{ type: 'text', text: `Error installing skill: ${err.message}` }],
+        isError: true,
+      };
+    }
+  }
+);
+
+// ─── Tool: list_installed ─────────────────────────────────────────────────
+
+server.tool(
+  'list_installed',
+  'List all AgentRoot skills currently installed on this machine. Scans tool directories for skills with AgentRoot manifest files.',
+  {},
+  async () => {
+    try {
+      const results = scanInstalled().map(r => ({
+        skill_id: r.skill_id,
+        domain: r.domain,
+        tool: r.tool,
+        installed_at: r.installed_at,
+        verified: r.manifest.verified !== undefined ? r.manifest.verified : null,
+        path: r.path,
+      }));
+
+      if (results.length === 0) {
+        return {
+          content: [{ type: 'text', text: 'No AgentRoot skills installed. Use search_skills to find skills and install_skill to install them.' }],
+        };
+      }
+
+      return {
+        content: [{ type: 'text', text: JSON.stringify(results, null, 2) }],
+      };
+    } catch (err) {
+      return {
+        content: [{ type: 'text', text: `Error listing installed skills: ${err.message}` }],
+        isError: true,
+      };
+    }
+  }
+);
+
+// ─── Start Server ──────────────────────────────────────────────────────────
+
+async function main() {
+  const transport = new StdioServerTransport();
+  await server.connect(transport);
+}
+
+main().catch((err) => {
+  console.error('Fatal error starting AgentRoot MCP server:', err);
+  process.exit(1);
+});

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@agent-root/mcp-server",
+  "version": "0.1.0",
+  "description": "MCP server for AgentRoot — search and install AI agent skills from any MCP-compatible client.",
+  "bin": {
+    "agentroot-mcp-server": "./bin/server.js"
+  },
+  "type": "module",
+  "main": "./bin/server.js",
+  "files": [
+    "bin/"
+  ],
+  "keywords": [
+    "mcp",
+    "model-context-protocol",
+    "ai",
+    "agent",
+    "skills",
+    "claude",
+    "codex",
+    "gemini",
+    "cursor",
+    "agentroot"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/d3-inc/agentroot",
+    "directory": "mcp-server"
+  },
+  "dependencies": {
+    "@agent-root/core": "^0.1.0",
+    "@modelcontextprotocol/sdk": "^1.12.1"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}