CLAUDE.mdA

CLAUDE.md from stacklok/toolhive-catalog is a CLAUDE.md file: the standing instructions Claude Code reads in that repo.

Install it, pinned
mdr add stacklok/toolhive-catalog/CLAUDE.md@git:20260415.a3ea4ca

Pins git:20260415.a3ea4ca in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 14 of 14 checks passed
Kind
CLAUDE.md file
Repository
stacklok/toolhive-catalog
Path
CLAUDE.md
Versions recorded
3
Latest version
git:20260415.a3ea4ca, committed Apr 15, 2026
First version recorded
Mar 4, 2026
Size
1,471 bytes
Repository stars
23
License
Apache-2.0

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# toolhive-catalog

Curated registry of MCP (Model Context Protocol) servers and skills for ToolHive.

## Skills

- `/add-mcp-server` — use when adding a new server entry to the catalog
- `/mcp-review` — use when reviewing a PR that adds or updates a server entry

## Key commands

Uses [Taskfile](https://taskfile.dev), not Make:

```sh
task catalog:validate   # validate all server.json files
task catalog:build      # build the catalog output
task test               # run Go tests
task lint               # run linters
```

## Registry structure

Each server lives at `registries/toolhive/servers/<name>/` containing:
- `server.json` — server definition (see `docs/adding-entries-llm.md` for full schema)
- `icon.svg` — server icon

Each skill lives at `registries/toolhive/skills/<name>/` containing:
- `skill.json` — skill definition (uses `Skill` type from toolhive-core)
- `icon.svg` — skill icon
- `skill/` — subfolder with installable content (SKILL.md, scripts/, references/, assets/)
  - The `packages[].subfolder` in skill.json points here so only skill content is installed, not registry metadata

## Non-obvious gotchas
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add stacklok/toolhive-catalog/CLAUDE.md@sha256:cca1dedb9611bdea

The line at the top of this page pins the label git:20260415.a3ea4ca, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_rvx2ljzcoutkvpym.svg)](https://markdownregistry.com/a/art_rvx2ljzcoutkvpym)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 3 versions of this file, between Mar 4, 2026 and Apr 15, 2026, about one every 21 days.

versioncommittedcommitsizeaudit
git:20260415.a3ea4ca latest2026-04-15 a3ea4ca 1,471 BA view · diff
git:20260310.8c8e1ea2026-03-10 8c8e1ea 1,359 BA view · diff
git:20260304.a3300062026-03-04 a330006 1,079 BA view

Audit of the latest version

A  14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Size between 200 bytes and 200 KB (1471 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

stacklok/toolhive-catalog · 23 stars · license Apache-2.0 · pushed 2026-10-19 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_rvx2ljzcoutkvpym
GET https://markdownregistry.com/api/v1/resolve?ref=stacklok/toolhive-catalog/CLAUDE.md
GET https://markdownregistry.com/api/v1/blob/cca1dedb9611bdead4bbea9c8baf9efb1f6bb04ac16bb8cc4313e729ab90edc8

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: what a CLAUDE.md file is · keeping AGENTS.md and CLAUDE.md in sync · which agent file does what.

More from stacklok/toolhive-catalog

add-mcp-server SKILL.md skill
stacklok/toolhive-catalog · .claude/skills/add-mcp-server/SKILL.md · Add new MCP server entries to the ToolHive registry. Creates server.json and icon.svg files with correct schema, _meta…
git:20260630.d62bac1 · audit A · 23 stars
catalog-audit SKILL.md skill
stacklok/toolhive-catalog · .claude/skills/catalog-audit/SKILL.md · Audit existing ToolHive catalog server entries for drift: whether the pinned image still exists, the upstream repo is…
git:20260627.8872a7a · audit A · 23 stars
mcp-review SKILL.md skill
stacklok/toolhive-catalog · .claude/skills/mcp-review/SKILL.md · Review MCP server specifications and updates for compliance, security, and quality. Use when evaluating server.json…
git:20260630.d62bac1 · audit A · 23 stars
skill-review SKILL.md skill
stacklok/toolhive-catalog · .claude/skills/skill-review/SKILL.md · Review skill submissions and updates for compliance, security, and quality. Use when evaluating skill.json files…
git:20260603.8ac39de · audit A · 23 stars
ci-agent-hardening SKILL.md skill
stacklok/toolhive-catalog · registries/toolhive/skills/ci-agent-hardening/skill/SKILL.md · Audit and harden GitHub Actions workflows against prompt injection, pull_request_target exploits (Pwn Requests)…
v0.1.0 · audit A · 23 stars
code-review SKILL.md skill
stacklok/toolhive-catalog · registries/toolhive/skills/code-review/skill/SKILL.md · Reviews pull requests by analyzing code changes, checking for common issues, and providing structured feedback with…
v0.1.0 · audit A · 23 stars
skill-creator SKILL.md skill
stacklok/toolhive-catalog · registries/toolhive/skills/skill-creator/skill/SKILL.md · Guide for creating effective skills. Use when users want to create a new skill, update an existing skill, build a slash…
v0.1.0 · audit A · 23 stars

Every file in stacklok/toolhive-catalog

Other files named CLAUDE.md

CLAUDE.md CLAUDE.md file
affaan-m/ecc · CLAUDE.md
git:20260528.04c68e4 · audit A · 284,510 stars
CLAUDE.md CLAUDE.md file
firecrawl/firecrawl · CLAUDE.md
git:20261008.5a75dca · audit A · 193,096 stars
CLAUDE.md CLAUDE.md file
garrytan/gstack · CLAUDE.md
git:20261011.5d64745 · audit A · 136,966 stars
CLAUDE.md CLAUDE.md file
juliusbrussee/caveman · CLAUDE.md
git:20261010.505ac30 · audit B · 113,780 stars
CLAUDE.md CLAUDE.md file
addyosmani/agent-skills · CLAUDE.md
git:20260720.8fd2081 · audit A · 109,013 stars
CLAUDE.md CLAUDE.md file
nexu-io/open-design · CLAUDE.md
git:20260430.9b57c22 · audit B · 102,533 stars
CLAUDE.md CLAUDE.md file
thedotmack/claude-mem · CLAUDE.md
git:20261013.84bbb53 · audit A · 102,153 stars
CLAUDE.md CLAUDE.md file
egonex-ai/understand-anything · CLAUDE.md
git:20260710.6677c67 · audit B · 87,696 stars

Browse by kind, by grade A, or by owner.