How does this skill prevent the security risks associated with manual MCP integration?

Unlike generic AI prompts that may expose raw database access, this skill uses a manifest-driven approach that enforces security boundaries, ensuring only authorized domain services are exposed as MCP tools.

Which frameworks and AI agents are compatible with bd-mcp-generate-skill?

The skill is optimized for TypeScript and Next.js applications, and is compatible with any AI agent or platform that supports the Model Context Protocol (MCP) standards.

Can this skill automatically expose my entire codebase to an AI agent without my review?

No, the skill enforces a 'human-in-the-loop' workflow where you must review and mark capabilities as 'approved' in the generated manifest before any implementation code is written.

What components are included in the purchase of this skill?

You receive the full suite of automation modes—Analyze, Generate, Test, and Deploy—along with the Python-based probing scripts and manifest validation tools required for the full lifecycle.

How does the skill handle updates when my underlying TypeScript code changes?

The skill includes built-in lifecycle management that handles versioning, deprecation paths, and secure publication to registries, ensuring your MCP servers remain stable as your core app evolves.

Works with the AI Agents you already use

+22 more

+18 agents

bd Mcp Generate Skill

Automate the secure analysis, implementation, and deployment of MCP servers for TypeScript and Next.js apps.

Free

Security scanned

bd-mcp-generate-skill

Example session with this skill installed

Use $mcpify in analyze mode on this Next.js repository to identify potential tools for a customer support agent.

Read your context and instructions
Compiled the bd-mcp-generate-

I have analyzed the repository architecture and identified key service boundaries. The analysis focused on the lib/services directory to find idempotent read operations and authorized write actions suitable for MCP exposure.

MCP Analysis Report: Customer Support Interface

Capability	Mapping	Risk Level	Logic Source	Status
Get Order Status	Tool	Low	`services/orders.ts:findOrder`	`pending_review`
Process Refund	Tool	High	`services/payments.ts:issueRefund`	`disabled_pending_review`
Customer History	Resource	Low	`services/customers.ts:getLogs`	`pending_review`
Update Address	Tool	Medium	`services/customers.ts:updateMeta`	`excluded`

Key Findings

Architecture: Identified Next.js App Router structure. Domain logic is well-isolated in the services layer, allowing for clean MCP wrappers.
2.

Security: The issueRefund operation requires multi-factor authorization in the base application. The generated MCP server must preserve this requirement.
3.

Exclusions: The updateMeta function was excluded as it allows writing to arbitrary JSON fields, which violates the narrow-interface invariant.

Next steps

Review the generated mcp-manifest.yaml in the root directory.
Change the status of desired capabilities from pending_review to approved.
Run $mcpify generate to implement the approved server code.

Connects securely to your tools. The creator never sees your data.

About this skill

Manual MCP integration is prone to security overreach and architectural mess. This skill automates the full Model Context Protocol (MCP) lifecycle, transforming existing TypeScript and Next.js applications into secure, production-ready MCP servers without exposing internal logic or raw database access.

What it does

Capability analysis Scans repositories to map business logic to MCP tools, resources, and prompts while identifying security risks.
Server generation Implements a narrow MCP interface using existing domain services, ensuring logic isn't duplicated.
Security auditing Inspects existing MCP manifests to flag unsafe function exposure or missing authorization boundaries.
Automated testing Validates MCP integrations safely without using production credentials or performing destructive actions.
Release management Handles packaging, containerization, and registry publication for platforms like the official MCP Registry.
Operations support Manages versioning, deprecation, and security incident responses for live MCP servers.

How it works

Analyze mode Run the skill on a repo to generate a mcp-manifest.yaml and a risk assessment report.
Approval phase The user reviews the manifest and marks specific capabilities as approved for implementation.
Implementation Invoke the skill in generate mode to write the TypeScript/Node.js server code based on the manifest.
Lifecycle execution Use test, package, deploy, or publish commands to move the server toward production.

Frameworks & tools

Primarily optimized for TypeScript and Next.js repositories. Uses mcp-manifest.yaml for configuration and includes Python-based scripts for repository probing and manifest validation.

Why this beats prompting it yourself

Prompting often leads to agents exposing raw SQL or internal ORM methods as tools, creating massive security holes. This skill enforces strict invariants, requiring explicit approval for every capability and ensuring all wrappers maintain existing transaction and identity boundaries.

Use cases

Converting a Next.js SaaS backend into a set of tools for AI agents.
Auditing a third-party MCP server for over-permissioned access.
Deploying a validated MCP server to a staging environment with full health checks.
Managing the deprecation and migration path for a public MCP server listing.

Known limitations

Does not support bulk-exposure of arbitrary functions. Requires manual approval in the manifest file before code generation. Deployment and publication require explicit user authorization for each target.

What's included (2 skills)

mcp-generate-skill
Analyze an existing application and guide secure MCP implementation, testing, packaging, deployment, client connection, publication, and operations. Use for MCP server lifecycle work; follow the selected mode and its authorization boundaries.
mcpify
Take an existing application through the full MCP lifecycle: analyze capabilities, generate and test a secure server, package or deploy it, connect clients, publish registry metadata, and operate releases. Use for production-oriented MCP work, especially TypeScript and Next.js repositories; do not use to bulk-expose arbitrary functions or bypass release authorization.

How to use

Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.

Reviews

No reviews yet

Be one of the first to try it. Every listed skill passes our trust checks below.

Security scanned

Passed our 8-point scan before listing

Fresh listing

Recently published to Agensi

Free forever

No account required to browse

Trust & safety

Security scanned

Verified clean 3 days ago

Free to download with an account

Requires

Modelcontextprotocol

Brownsmithdynamics

Manifest MCP

Python

Analysis MCP

Publisher MCP

Listed3 days ago

bd Mcp Generate Skill

bd-mcp-generate-skill