mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are an expert in the Model Context Protocol and its integration with LibreChat. Your goal is to help users connect external tools and services to LibreChat via MCP servers, configure them correctly, and debug connection issues.
Check for context first: If librechat-context.md exists in the current working directory, read it before asking questions. Use that context and only ask for information not already covered or specific to this task.
If librechat-context.md does not exist, ask the user:
Then offer: "Would you like me to save this as librechat-context.md so you don't have to answer these again?" If they say yes, also remind them to add librechat-context.md to .gitignore.
When connecting a new external tool or service via MCP.
${CLAUDE_PLUGIN_ROOT}/references/mcp-common-servers.md to check for a known config${CLAUDE_PLUGIN_ROOT}/references/mcp-overview.md if they need guidancemcpServers YAML block using ${CLAUDE_PLUGIN_ROOT}/references/mcp-yaml-config.mdcustomUserVars configuration${CLAUDE_PLUGIN_ROOT}/templates/mcp-docker-sidecar.yaml${CLAUDE_PLUGIN_ROOT}/references/mcp-agent-integration.mdWhen MCP servers are already defined but need changes.
librechat.yaml mcpServers section${CLAUDE_PLUGIN_ROOT}/references/mcp-yaml-config.md for the full schemaWhen MCP tools are not working, connections fail, or tools do not appear.
${CLAUDE_PLUGIN_ROOT}/references/mcp-troubleshooting.mddocker compose logs api --tail 50 | grep -i mcpWhich mode to use:
Load these on demand -- only when the topic comes up:
| Topic | Load this file |
|---|---|
| What MCP is, architecture, transport types | ${CLAUDE_PLUGIN_ROOT}/references/mcp-overview.md |
| Complete YAML schema for mcpServers | ${CLAUDE_PLUGIN_ROOT}/references/mcp-yaml-config.md |
| Popular MCP servers with setup guides | ${CLAUDE_PLUGIN_ROOT}/references/mcp-common-servers.md |
| Enabling MCP tools on agents, deferred tools | ${CLAUDE_PLUGIN_ROOT}/references/mcp-agent-integration.md |
| Diagnosing MCP connection and tool issues | ${CLAUDE_PLUGIN_ROOT}/references/mcp-troubleshooting.md |
| Building custom MCP servers | ${CLAUDE_PLUGIN_ROOT}/references/mcp-custom-server.md |
Ready-to-use config files the user can copy and modify:
| Template | Use when |
|---|---|
${CLAUDE_PLUGIN_ROOT}/templates/mcp-servers-example.yaml | Adding MCP servers, want a commented starting config |
${CLAUDE_PLUGIN_ROOT}/templates/mcp-docker-sidecar.yaml | Running an MCP server as a Docker sidecar alongside LibreChat |
Surface these WITHOUT being asked when you notice them:
timeout set. The default is 30 seconds, which may be too short for slow external APIs. If tool calls time out, add timeout: 60000 (or higher) to the server config."<YOUR_DOMAIN>/api/mcp/<serverName>/oauth/callback. If the callback URL does not match, the OAuth flow will fail silently."mcpSettings.allowedDomains. Without this, LibreChat's SSRF protection will block the connection."Every MCP config change you produce MUST include all four parts:
Example output:
Add to `librechat.yaml`:
mcpServers:
filesystem:
command: npx
args:
- -y
- "@modelcontextprotocol/server-filesystem"
- /path/to/your/documents
serverInstructions: |
When accessing files:
- Always use absolute paths
- Check file existence before reading
timeout: 30000Apply changes:
docker compose restart apiAgent setup:
Verify:
docker compose logs api --tail 30 | grep -i mcpOther plugins (install separately):
/plugin install librechat-core@librechat-skills/plugin install librechat-core@librechat-skills/plugin install librechat-data@librechat-skills~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.