MilindGaharwar

MCP Approve — Security skill for Claude Code

Security community

Run the Zero-Trust Validation Protocol to audit and approve an MCP package for installation.

How to install MCP Approve

Installs to ~/.claude/skills/milindgaharwar-fettle-mcp-approve/SKILL.md

Terminal

mkdir -p ~/.claude/skills/milindgaharwar-fettle-mcp-approve && curl -fsSL https://raw.githubusercontent.com/MilindGaharwar/fettle/HEAD/commands/mcp-approve.md -o ~/.claude/skills/milindgaharwar-fettle-mcp-approve/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What MCP Approve does

name: mcp-approve description: Run the Zero-Trust Validation Protocol to audit and approve an MCP package for installation argument-hint: "@" user-invocable: true allowed-tools: Bash, Read, Write, Grep, Glob, Agent

Run the full 5-phase MCP Zero-Trust Validation Protocol to audit a package, then — with human approval — add it to the root-owned allowlist ledger.

Procedure

Parse arguments. Extract package name and exact version from $ARGUMENTS (e.g., `@playwri

Alternatives in Security

Security Threat Model — Generate repo-specific threat models identifying trust boundaries 14.6k ★
Synk Skill Security Scanner — Agent Trust Hub 1.9k ★
MCP Security Checklist (SlowMist) — Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening 819 ★