Skip to content

Refocus mpak positioning on MCPB bundles (skills purge, stage 1) #124

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mgoldsborough wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Refocus mpak positioning on MCPB bundles (skills purge, stage 1) #124

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
95eee58
docs: refocus mpak positioning on MCPB bundles, drop skills framing
mgoldsborough Jun 20, 2026
40b2d21
docs: keep CLI search + seed steps accurate to current code
mgoldsborough Jun 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion CLAUDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# mpak

mpak is an open-source MCP bundle registry: search, download, publish, and scan MCPB bundles and skills.
mpak is an open-source MCP bundle registry: search, download, publish, and scan MCPB bundles. It does one thing: package MCP servers as portable, security-scanned MCPB bundles. (Agent Skills are out of scope; skill packaging and distribution live in the `skills.sh` / `npx skills` ecosystem.)

## Monorepo Structure

Expand Down
22 changes: 5 additions & 17 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,12 +33,6 @@ my-server.mcpb

`manifest.json` is the required entry point. It declares the package name, version, server type (`node`, `python`, or `binary`), platform-specific run commands, and the tools/prompts/resources the server exposes. The schema is defined in `packages/schemas`.

### Skills

Skills are the knowledge counterpart to bundles. While bundles give an AI agent the ability to *do* things (call APIs, run commands), skills give it the ability to *think* about things (domain expertise, workflow instructions).

A skill is a markdown file (`SKILL.md`) with YAML frontmatter that declares metadata (name, description, category, trigger phrases). Skills can be packaged as `.skill` files (also ZIP archives) and distributed through the registry.

### Trust levels

Every bundle receives a trust score from the MTF scanner. The score has two parts: a level (L1 through L4) and a numeric score (0 to 100) representing how many controls passed within that level. See the full framework at [mpaktrust.org](https://mpaktrust.org).
Expand Down Expand Up @@ -161,13 +155,13 @@ scanner (standalone Python project, not in pnpm workspaces)

### `packages/schemas`

Zod schemas and inferred TypeScript types for the MCPB manifest format, API responses, trust scores, skills, and validation helpers. This is the source of truth for data shapes across the entire stack.
Zod schemas and inferred TypeScript types for the MCPB manifest format, API responses, trust scores, and validation helpers. This is the source of truth for data shapes across the entire stack.

**Key exports:** `BundleSchema`, `SkillSchema`, `MpakJsonSchema`, `SearchParamsSchema`, validation functions.
**Key exports:** `BundleSchema`, `MpakJsonSchema`, `SearchParamsSchema`, validation functions.

### `packages/sdk-typescript`

TypeScript SDK for interacting with a mpak registry. Wraps the HTTP API with typed methods for searching, downloading, and inspecting bundles and skills.
TypeScript SDK for interacting with a mpak registry. Wraps the HTTP API with typed methods for searching, downloading, and inspecting bundles.

```typescript
import { MpakClient } from "@nimblebrain/mpak-sdk";
Expand All @@ -188,11 +182,6 @@ The `mpak` command-line tool. Built with [Commander.js](https://github.com/tj/co
| `mpak bundle show <name>` | Show bundle details and trust score |
| `mpak bundle pull <name>` | Download a bundle |
| `mpak bundle run <name>` | Download and run an MCP server |
| `mpak skill search <query>` | Search skills |
| `mpak skill show <name>` | Show skill details |
| `mpak skill install <name>` | Install a skill to `~/.claude/skills/` |
| `mpak skill validate <path>` | Validate a skill directory |
| `mpak skill pack <path>` | Create a `.skill` bundle |
| `mpak config set <pkg> <key=value>` | Set config for a package |
| `mpak config get <pkg>` | Show config for a package |

Expand All @@ -205,7 +194,6 @@ The registry API server. Fastify with Prisma ORM on PostgreSQL. Handles bundle s
**API surface:**

- `/v1/bundles/*` - Native mpak API for bundle operations
- `/v1/skills/*` - Native mpak API for skill operations
- `/v0.1/servers` - MCP Registry spec compatibility (so MCP clients can discover bundles through the standard protocol)
- `/app/*` - Routes used by the web UI (auth, admin, package claiming, scan results)
- `/health` - Health check
Expand All @@ -217,7 +205,7 @@ The registry API server. Fastify with Prisma ORM on PostgreSQL. Handles bundle s

### `apps/web`

React SPA for browsing the registry. Built with Vite, Tailwind CSS 4, React Router, and TanStack Query. Includes trust score visualization, bundle details, skill browsing, and an admin panel.
React SPA for browsing the registry. Built with Vite, Tailwind CSS 4, React Router, and TanStack Query. Includes trust score visualization, bundle details, and an admin panel.

### `apps/scanner`

Expand All @@ -237,7 +225,7 @@ Produces a trust score from L1 (Basic) to L4 (Attested) based on which controls

### `apps/docs`

Documentation site. Covers CLI usage, bundle format, skills, integrations (VS Code, Claude Desktop, Cursor, Claude Code), and security controls.
Documentation site. Covers CLI usage, bundle format, integrations (VS Code, Claude Desktop, Cursor, Claude Code), and security controls.

## Development setup

Expand Down
1 change: 0 additions & 1 deletion package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,6 @@
"mcpb",
"model-context-protocol",
"package-manager",
"agent-skills",
"registry"
],
"license": "Apache-2.0",
Expand Down
Loading