mcp-server-review SKILL.md skillA
mcp-server-review from pnp/copilot-prompts is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pnp/copilot-prompts/mcp-server-review@git:20260824.1420325Pins git:20260824.1420325 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pnp/copilot-prompts
- Path
samples/skills/mcp-server-review/SKILL.md- Versions recorded
- 2
- Latest version
- git:20260824.1420325, committed Aug 24, 2026
- First version recorded
- Aug 15, 2026
- Size
- 12,545 bytes
- Repository stars
- 895
- License
- MIT
Review a Model Context Protocol (MCP) server implementation against the 2026-07-28 protocol revision, which removed the initialize handshake and Mcp-Session-Id and made the protocol stateless. Use when the user asks to review, audit, upgrade or migrate an MCP server, asks whether their MCP server is spec compliant, asks which protocol revision their server implements, or reports that an MCP client cannot connect to their server.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Review an MCP Server Against the 2026-07-28 Revision Protocol revision `2026-07-28` is the largest change to the Model Context Protocol since it launched. Server code written before it still compiles, still passes its own tests, and still looks correct in review. It simply speaks a shape that modern clients no longer send. This skill finds that gap. It reviews an MCP server implementation against the current revision, reports what is obsolete, what is missing, and what is a security requirement rather than a nicety, and it distinguishes between a genuine finding and something it could not determine from the code available. ## Before Starting **Critical**: Always ask the user for the following information before proceeding: 1. **Server code** - the repository, folder, or files implementing the MCP server 2. **Target revision** - the protocol revision the server intends to implement. Defaults to `2026-07-28` if not specified 3. **Transport** - Streamable HTTP or stdio. Defaults to Streamable HTTP if not specified, since the header rules below apply only to it …
Read the whole file at its exact version.
How to install
mdr add pnp/copilot-prompts/mcp-server-review@sha256:2f7e4fc7cfe4b247The line at the top of this page pins the label git:20260824.1420325, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_rqgtw4ktajguxhbw)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 2 versions of this file, between Aug 15, 2026 and Aug 24, 2026, about one every 9 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260824.1420325 latest | 2026-08-24 | 1420325 | 12,545 B | A | view · diff |
| git:20260815.0249e84 | 2026-08-15 | 0249e84 | 11,148 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12545 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pnp/copilot-prompts · 895 stars · license MIT · pushed 2026-10-18 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_rqgtw4ktajguxhbw GET https://markdownregistry.com/api/v1/resolve?ref=pnp/copilot-prompts/mcp-server-review GET https://markdownregistry.com/api/v1/blob/2f7e4fc7cfe4b247bba44e66ffab2d360e18cb113607d690fb6b7441fed2dd1d
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.