Unclog — Security skill for Claude Code
Audit MCP servers, skills, and CLAUDE.md bloat eating your Claude Code context window.
How to install Unclog
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open thomaschill/unclog and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Unclog does
Audit MCP servers, skills, and CLAUDE.md bloat eating your Claude Code context window.
Alternatives in Security
- Octoboss Clean Contexts — You are the Octoboss — a cross-tentacle orchestrator 1.4k ★
- Imcodes — The IM for agents 960 ★
- Google MCP Security Servers — Security Operations and Threat Intelligence MCP servers 453 ★
README
unclog
[](https://pypi.org/project/unclog/) [](https://github.com/thomaschill/unclog)
**Every agent, skill, slash command, and MCP server you've installed occupies your Claude Code context window on every turn.** `unclog` scans your install, shows you what's costing tokens, flags MCP servers you haven't called in 30 days, and lets you handpick what to delete — locally, with no telemetry, no accounts, and no network calls.
# install
uv tool install unclog
# run
unclog

What it shows
- Every agent in
~/.claude/agents/, with its token cost. - Every skill in
~/.claude/skills/, with its token cost. - Every slash command in
~/.claude/commands/, with its token cost. - Every MCP server declared in
~/.claude.json(global and per-project), with its invocation count over the last 30 days so you can see which ones are actually pulling their weight. Servers with zero invocations get an[unused]flag. - A baseline — the total tokens loaded before you type a single message.
Why no per-MCP token count?
Modern Claude Code session logs no longer record the tools schema, so unclog cannot recover an exact token cost for each MCP server without spinning up the server and querying it. We've chosen to stay lightweight (no network, no spawning user-configured commands) and show `— tok` honestly rather than guess. **Invocation count is the next-best signal**: a server you haven't called in 30 days is paying schema rent for nothing.
Invocation counts come from walking every session JSONL under `~/.claude/projects/` (parent and subagent files) and tallying `tool_use` blocks per server. Counts are per server *name* — if the same MCP is declared at both global and project scope, both rows show t
Related Skills
Claude Next
One-key handoff for deep Claude Code sessions. Independent fresh-context audit + drift check + forced uncertai
Context Gardening
Audit CLAUDE.md, its linked docs, and .claude/memory/ against the patterns from "A good AGENTS.md is a model u
Context Audit
Audit how much input-token bloat the read-guard removes on this repo
Agentseal
Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply cha
Cross-Pollinate Hex MCP Servers
Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp. Each delta
Claudit Sec
Security audit tool for Claude Desktop and Claude Code on macOS — single-command visibility into MCP servers,
Related Agents
Agent Harness Optimizer
Context window, token budget, and agent harness optimization specialist. Analyzes transcript bloat, tunes prom
Light Security ClaudeSettingsAudit
Audit Claude Code config files (settings.json, settings.local.json, .mcp.json) for unsafe or malicious content
Audit Domain Runner
Execute a single domain audit (one of the 13 audit-domain- skills) in an isolated context window. Spawned by a