Comprehensive reference for building production MCP servers beyond the initial scaffold. Covers the full stack: OAuth 2.1 authentication, tool composition patterns (pipeline vs parallel), resource caching with TTL and LRU eviction, server-initiated user input via elicitation, sampling for agent loops, and interactive UIs through MCP Apps. The security rules alone are worth it: prompt injection defense, zero-trust allowlists, and token validation patterns that prevent the common mistakes. Built against the 2025-11-25 spec under the new Agentic AI Foundation governance. Pair it with Anthropic's mcp-builder for scaffolding, then use this for hardening and advanced features. The decision tree up front saves you from reading all 14 rules when you just need to add caching or debug a transport issue.

skills.sh installs
190
GitHub stars
301
last updated
Aug 21, 2026

Install

$ npx -y skills add yonatangross/orchestkit --skill mcp-patterns --agent claude-code

Installs into .claude/skills of the current project.

Files

MCP Patterns

Patterns for building, composing, and securing Model Context Protocol servers. Based on the 2025-11-25 specification — the latest stable release maintained by the Agentic AI Foundation (Linux Foundation), co-founded by Anthropic, Block, and OpenAI.

Scaffolding a new server? Use Anthropic's mcp-builder skill (from the anthropics/skills marketplace: /plugin marketplace add anthropics/skills) for project setup and evaluation creation. This skill focuses on patterns, security, and advanced features after initial setup.

Deploying to Cloudflare? See the building-mcp-server-on-cloudflare skill for Workers-specific deployment patterns.

Sponsors

Details

Repository
github.com/yonatangross/orchestkit
Categories
Backend & APIs, Security, AI & Agent Building, Debugging
First seen
Jun 3, 2026

More from yonatangross/orchestkit

All 61
1julianobarbosa avatarcloudflare-dnsjulianobarbosa/claude-code-skillsComprehensive guide for managing Cloudflare DNS with Azure integration. Use when configuring Cloudflare as authoritative DNS provider for Azure-hosted applicati186skills.sh installs
2cloudai-x avatardesigning-apiscloudai-x/claude-workflow-v2Designs REST and GraphQL APIs including endpoints, error handling, versioning, and documentation. Use when creating new APIs, designing endpoints, reviewing API184skills.sh installs
3databricks-solutions avatardatabricks-python-sdkdatabricks-solutions/ai-dev-kitDatabricks development guidance including Python SDK, Databricks Connect, CLI, and REST API. Use when working with databricks-sdk, databricks-connect, or Databr183skills.sh installs
4charleswiltgen avataraxiom-storekit-refcharleswiltgen/axiomReference — Complete StoreKit 2 API guide covering Product, Transaction, AppTransaction, RenewalInfo, SubscriptionStatus, StoreKit Views, purchase options, serv181skills.sh installs
5iii-hq avatariii-http-endpointsiii-hq/iiiExposes iii functions as REST API endpoints. Use when building HTTP APIs, webhooks, or inbound request handling where iii owns the route.180skills.sh installs
6sendaifun avatardflowsendaifun/skillsComplete DFlow trading protocol SDK - the single source of truth for integrating DFlow on Solana. Covers spot trading, prediction markets, Swap API, Metadata AP179skills.sh installs