mcp-assistant, which instructs coding agents on how and when to use remote MCP servers, when to search for tools, and how to chain calls inside the CodeMode sandbox.
Installing the Skill
Install the MCP Assistant skill into your local workspace using theskills CLI:
mcp-assistant skill folder in your workspace under .agents/skills/mcp-assistant/.
Updating the Skill
To update the skill to the latest version, run theupdate command:
The mcp-assistant Skill
Core Principle
Keep MCP tools discoverable, not always loaded. Avoid loading every downstream MCP tool directly into the agent context, which can bloat the context window and cause tool-calling confusion. Instead, search for the relevant capability, inspect only the needed schema, then execute the selected tool or workflow through the sandboxed runner.
Available Tools
| Tool | Category | Purpose |
|---|---|---|
search_mcp_tools | Search | Search connected MCP servers for candidate tools using natural language or exact names. |
get_mcp_tool_schema | Read | Inspect the exact parameters and output shape for a selected tool. |
codemode_run | General | Run a TypeScript/JavaScript script inside a secure sandbox to execute tool chains. |
Recommended Workflow
When a task requires external tools or services connected to MCP Assistant, the agent follows this default flow:- Identify the need: Determine if the goal requires an external MCP integration (e.g., GitHub, Notion, Supabase, Slack).
- Search tools: Call
search_mcp_toolswith a goal-oriented query (e.g."find GitHub issues by label"). - Select candidates: Choose the most relevant tools from the search results.
- Inspect schema: Call
get_mcp_tool_schemato retrieve the parameters and constraints for the chosen tools. - Execute: Run the code/script using
codemode_runto execute the tools and transform the output in the sandbox.
Safety & Approvals
Before executing destructive, public, or outbound communication actions, the agent must ask for user confirmation.- Needs Approval: Sending messages (Slack, Gmail, Discord), mutating production database records, closing issues, merging pull requests, or running expensive workflows.
- Safe to run: Read-only queries, searching, listing, and local summarization.

