One CLI to install MCP servers AND Claude Code skills, sync configs across every AI client, audit security, and bundle entire stacks as one-line profiles.
Install · Quickstart · Commands · Profiles · Security · Contributing
2026 reality: every AI coding agent ships with its own config format. MCP servers in 6 different JSON files. Claude Code skills scattered across ~/.claude/skills/. Plugins managed by a separate command. Smithery is cloud-only. ccpi, antigravity-awesome-skills, and awesome-mcp-servers each solve one slice.
mcpx is the only local-first, terminal-first CLI that unifies MCP servers + Skills + Profiles in one tool.
# Install one MCP server into every client you have
mcpx install github --all
# Install a Claude Code skill (Frontend Design, Shannon, Remotion, etc.)
mcpx skill install frontend-design
mcpx skill install shannon
# Activate an entire stack (MCP servers AND skills) with one command
mcpx profile use design # frontend-design + react + nextjs + excalidraw + remotion
mcpx profile use security # shannon + security-auditor + code-reviewer
mcpx profile use agent # ai-engineer + prompt-engineer + mcp-builder + orchestrator
# Sync your Claude Desktop config to every other tool
mcpx sync --from claude-desktop
# Audit before you trust
mcpx info playwright
mcpx skill info shannon| feature | who else does this? | |
|---|---|---|
| 🧩 | MCP + Skills in one CLI — install both with the same tool | nobody |
| 🎯 | Multi-client install — one command, every editor | nobody |
| 🔁 | Cross-client sync — keep all your clients in lockstep | nobody |
| ⚡ | mcpx run — spawn any MCP server, do the real JSON-RPC handshake, list live tools |
nobody |
| 🎮 | mcpx browse — interactive fuzzy autocomplete picker |
partial |
| 📦 | Aggregated registries — 37 MCP servers + 36 verified skills | Smithery (cloud) |
| 🔒 | Security audit — permissions, dangerous patterns, scoring | nobody |
| 🎨 | Profiles bundle MCP + skills — dev, design, security, docs, spec, … |
nobody |
| 🩺 | doctor — diagnose broken setups across all clients |
nobody |
| 🧱 | init — scaffold new MCP servers (TS or Python) |
partial |
| 📐 | JSON Schemas — CI-validated registry contract, community PRs auto-checked | nobody |
| 💾 | Local-first — no account, no cloud, no telemetry | nobody |
| 🪶 | Tiny — < 5 MB install, < 200 ms cold start | — |
frontend-design · webapp-testing · code-review-and-quality · code-simplification · security-and-hardening · performance-optimization · test-driven-development · spec-driven-development · frontend-ui-engineering · browser-testing-with-devtools · debugging-and-error-recovery · api-and-interface-design · git-workflow-and-versioning · ci-cd-and-automation · documentation-and-adrs · planning-and-task-breakdown · context-engineering · remotion · valyu · antigravity-awesome-skills (1,400+ meta) · awesome-agent-skills (1,000+ meta) · claude-skills-263 · planetscale · shannon · excalidraw · mermaid · mcp-excalidraw · anthropics-docx · anthropics-pdf · anthropics-pptx · anthropics-xlsx · anthropics-canvas-design · anthropics-algorithmic-art · shipping-and-launch · using-agent-skills
Sources: anthropics/skills (official), addyosmani/agent-skills, remotion-dev/skills, valyuAI/skills, planetscale/claude-plugin, unicodeveloper/shannon, coleam00/excalidraw-diagram-skill, mgranberry/mermaid-diagram-skill, VoltAgent/awesome-agent-skills, sickn33/antigravity-awesome-skills, alirezarezvani/claude-skills, yctimlin/mcp_excalidraw.
# npm
npm install -g mcpx
# pnpm
pnpm add -g mcpx
# yarn
yarn global add mcpx
# bun
bun install -g mcpxRequires Node ≥ 18. Most servers also need
npx/uvx/docker— runmcpx doctorto check.
mcpx doctorRuntime checks
┌────────┬───────────────────────────────────┬──────────┐
│ Tool │ Path │ Status │
├────────┼───────────────────────────────────┼──────────┤
│ node │ /usr/local/bin/node │ ok │
│ npx │ /usr/local/bin/npx │ ok │
│ uvx │ /home/me/.local/bin/uvx │ ok │
│ docker │ /usr/bin/docker │ ok │
└────────┴───────────────────────────────────┴──────────┘
Client configs
┌────────────────┬──────────┬─────────┬────────────────────────────┐
│ Client │ Detected │ Servers │ Config │
├────────────────┼──────────┼─────────┼────────────────────────────┤
│ Claude Desktop │ yes │ 3 │ ~/Library/.../claude_... │
│ Claude Code │ yes │ 1 │ ~/.claude.json │
│ Cursor │ yes │ 2 │ ~/.cursor/mcp.json │
│ Windsurf │ no │ 0 │ ~/.codeium/... │
│ VS Code │ yes │ 0 │ ~/.config/Code/.../... │
│ Zed │ no │ 0 │ ~/.config/zed/... │
└────────────────┴──────────┴─────────┴────────────────────────────┘
mcpx search filesystem
mcpx search --category database
mcpx search githubmcpx install github --all
# Or pick clients interactively:
mcpx install postgresmcpx profile use dev # filesystem + git + github + context7 + fetch
mcpx profile use scrape # playwright + puppeteer + firecrawl + fetch
mcpx profile use ops # docker + k8s + aws + cloudflare + sentryAlready perfected Claude Desktop? Mirror it everywhere:
mcpx sync --from claude-desktop --dry # preview
mcpx sync --from claude-desktop # applyFuzzy search the aggregated registry.
mcpx search # popular servers
mcpx search github # match by name/tag
mcpx search --category browser # filter
mcpx search --json | jq . # pipe to jqServer details + full security audit.
mcpx info playwrightInstall into one or many clients.
mcpx install github # interactive picker
mcpx install github --all # all detected clients
mcpx install github -c claude-code -c cursor # specific clients
mcpx install postgres -e POSTGRES_URL=postgres://localhost/x -yShow what's configured per client.
mcpx list
mcpx list -c cursor
mcpx list --jsonmcpx remove github # ask first
mcpx remove github --all -y # nuke from everywhereCopy/merge server configs between clients.
mcpx sync --from claude-desktop --to cursor windsurf
mcpx sync --from cursor --dry # show diff onlymcpx profile list
mcpx profile show dev
mcpx profile use dev
mcpx profile save my-stack -c claude-desktop # snapshot current config
mcpx profile delete my-stackRun the security audit. Without args, audits everything currently installed.
mcpx audit # all installed servers
mcpx audit github # a single registry entry
mcpx audit --jsonScaffold a new MCP server.
mcpx init my-server # interactive
mcpx init my-server -t typescript
mcpx init my-server -t pythonDiagnose everything.
Refresh the registry cache.
Spawns the MCP server, sends a real JSON-RPC initialize request, calls tools/list, prints the tool inventory, then kills the process. Validates that a server actually works — without committing to install it into any client.
$ mcpx run memory
✓ Memory online — 9 tool(s)
create_entities — Create multiple new entities in the knowledge graph
create_relations — Create multiple new relations between entities
add_observations — Add new observations to existing entities
delete_entities — Delete multiple entities and their associated relations
...Useful for: triaging credentials, verifying tool surface before install, checking new servers from PRs, smoke-testing your own MCP server in development.
Interactive fuzzy autocomplete picker. Start typing — narrow down — pick — install.
mcpx browse # MCP servers
mcpx browse --skills # Claude Code skillsManage Claude Code skills. All install actions clone the real upstream repo into ~/.claude/skills/<id>/ (user scope) or ./.claude/skills/<id>/ (project scope) — no fake stubs, no fabricated metadata.
mcpx skill search # popular skills
mcpx skill search diagram # fuzzy
mcpx skill search -c security # filter by category
mcpx skill info shannon # show details + source repo
mcpx skill install shannon # user scope (default)
mcpx skill install frontend-design --project # project scope
mcpx skill list # what's installed (user)
mcpx skill list -s project # what's installed (project)
mcpx skill remove shannon -yInternally git clone --depth 1 runs against the verified repo (with optional subdir for monorepo skill folders like anthropics/skills/skills/frontend-design). A SKILL.md is guaranteed at the destination.
Built-in profiles bundle MCP servers + skills so a single command sets up an entire stack:
| profile | MCP servers | skills |
|---|---|---|
dev |
filesystem, git, github, context7, fetch | code-review-and-quality, test-driven-development, debugging-and-error-recovery |
research |
brave-search, exa, tavily, firecrawl, fetch, memory | valyu, context-engineering |
data |
postgres, sqlite, filesystem, git | planetscale, performance-optimization |
ops |
docker, kubernetes, aws, cloudflare, sentry | ci-cd-and-automation, git-workflow-and-versioning, shipping-and-launch |
scrape |
playwright, puppeteer, firecrawl, fetch | webapp-testing, browser-testing-with-devtools |
design |
filesystem, github | frontend-design, frontend-ui-engineering, excalidraw, mermaid, remotion |
security |
filesystem, github | shannon, security-and-hardening, code-review-and-quality |
docs |
filesystem, github | anthropics-docx, anthropics-pdf, anthropics-pptx, anthropics-xlsx, documentation-and-adrs |
spec |
filesystem, git, github, context7 | spec-driven-development, planning-and-task-breakdown, api-and-interface-design |
Custom profiles are JSON files under ~/.mcpx/profiles/. Save the current state of any client:
mcpx profile save mine -c claude-desktopEvery install runs an audit. Findings have four severities — critical, high, warn, info — and feed into a 0–100 score.
What the audit checks:
shell-exec,filesystem-write,credential-accesspermissions- Raw shell commands in the server spec (
bash,curl,wget, …) - Non-HTTPS remote transports
- Missing license / repository
- Unverified author
- Bonus: official servers get +10, verified +5
The mcpx audit command produces a one-line summary per server. mcpx info <id> shows full findings before you install.
$ mcpx info github
...
Security score: 100/100
[HIGH] credential-access: Server requires API credentials and can access secrets.| client | path | notes |
|---|---|---|
| Claude Desktop | ~/Library/.../claude_desktop_config.json (macOS), %APPDATA%/Claude/claude_desktop_config.json (Windows), ~/.config/Claude/... (Linux) |
|
| Claude Code | ~/.claude.json or ./.mcp.json (project) |
project file preferred when present |
| Cursor | ~/.cursor/mcp.json or ./.cursor/mcp.json |
|
| Windsurf | ~/.codeium/windsurf/mcp_config.json |
|
| VS Code | ./.vscode/mcp.json (project) or user settings.json |
uses native MCP support |
| Zed | ~/.config/zed/settings.json (context_servers key) |
Every write is backed up to <config>.mcpx-bak first. Roll back anytime.
The bundled registry ships with 30+ verified servers — the entire official modelcontextprotocol/servers collection, plus the most-loved community servers (Context7, Exa, Tavily, Firecrawl, Notion, Linear, Stripe, Supabase, Cloudflare, Sentry, AWS, Docker, Kubernetes, Obsidian, …).
It blends multiple upstream sources:
modelcontextprotocol/servers(official reference)- GitHub's MCP Registry
punkpeye/awesome-mcp-servers- Community contributions via PR
Adding a server? Open an issue with the server request template or send a PR against data/registry.bundled.json.
- mcp — the protocol
- x — cross-client, multiplexed, terminal-first
Pronounced em-see-pee-ex. Or just type it; nobody's listening.
| mcpx | Smithery | mcp-get | mcp.so | awesome-mcp-servers | |
|---|---|---|---|---|---|
| Multi-client install | ✅ 6 clients | partial | ❌ | ❌ | ❌ |
| Cross-client sync | ✅ | ❌ | ❌ | ❌ | ❌ |
| Local-first / no account | ✅ | ❌ | ✅ | ❌ | ✅ |
| Security audit | ✅ | partial | ❌ | ❌ | ❌ |
| Profiles | ✅ | ❌ | ❌ | ❌ | ❌ |
| Scaffold new servers | ✅ | ❌ | ❌ | ❌ | ❌ |
Built-in doctor |
✅ | ❌ | ❌ | ❌ | ❌ |
Live MCP handshake (run) |
✅ | ❌ | ❌ | ❌ | ❌ |
| JSON Schema enforced | ✅ | ❌ | ❌ | ❌ | ❌ |
| Catalog size | 37 MCP + 36 skills, curated & verified | 5k+ | small | 17k+ | 200+ |
We're not trying to be the biggest catalog — we're the trusted, terminal-first, multi-client power tool.
We love PRs. See CONTRIBUTING.md. Quick wins:
- 🐛 file bugs with
mcpx doctoroutput - 📦 add servers to the registry
- 🧩 add a new client adapter
- 🎨 improve the TUI
- ⭐ star the repo if
mcpxsaves you 5 minutes — that's the only metric we track
- Interactive TUI mode (
mcpx tui) — lazygit-style browser - OAuth flow helpers for credentialed servers
- HTTP/SSE transport support in install
- Container sandboxing for risky servers (opt-in)
- Plugin system for custom registry sources
- Web UI (
mcpx serve) — manage your stack from localhost - Sign-and-verify with Sigstore
MIT © 2026 Irfan Sadiq Rahat and mcpx contributors