MCP Server Building

VerifiedSafe

Build MCP servers covering tool design, resource patterns, security, and best practices for the Model Context Protocol.

Sby Skills Guide Bot
DevelopmentIntermediate
107/23/2026
Claude Code
#mcp#model-context-protocol#server-building#tool-design#best-practices

Recommended for

Our review

Provides principles and best practices for building MCP (Model Context Protocol) servers, covering tool design, resource patterns, error handling, and security.

Strengths

  • Clear and organized structure
  • Practical and actionable design principles
  • Emphasis on input validation and error handling
  • Multimodal support (text, images, files)

Limitations

  • Lacks step-by-step tutorial for beginners
  • Limited depth on deployment
  • Assumes familiarity with TypeScript and MCP concepts
When to use it

When you need to create a custom MCP server to connect AI agents with external tools and data sources.

When not to use it

If you are looking for a ready-made MCP server or a full production deployment guide.

Security analysis

Safe
Quality score90/100

The skill is a purely informational guide on MCP server building principles. It contains no executable instructions, no destructive or data exfiltrating actions, and no obfuscated payloads. It only describes best practices for tool design, security, and architecture.

No concerns found

Examples

Create MCP server template
Create a new MCP server project with a tool for fetching weather data and a resource for user profiles. Include input validation and clear error messages.
Design resource schema
Design an MCP resource pattern for a collection of documents with parameterized URIs and dynamic data generation.
Error handling best practices
What are the best practices for error handling in MCP tools? Provide examples of validation errors, not found errors, and server errors.

name: mcp-builder description: MCP (Model Context Protocol) server building principles. Tool design, resource patterns, best practices. allowed-tools: Read, Write, Edit, Glob, Grep

MCP Builder

ultrathink

"Сисадмин но дзюцу!!!" — When the MCP server magically works on first try. "Человечек сориентирует." — MCP tools are sub-routines you wire up for the model.

Principles for building MCP servers.


1. MCP Overview

What is MCP?

Model Context Protocol - standard for connecting AI systems with external tools and data sources.

Core Concepts

| Concept | Purpose | |---------|---------| | Tools | Functions AI can call | | Resources | Data AI can read | | Prompts | Pre-defined prompt templates |


2. Server Architecture

Project Structure

my-mcp-server/
├── src/
│   └── index.ts      # Main entry
├── package.json
└── tsconfig.json

Transport Types

| Type | Use | |------|-----| | Stdio | Local, CLI-based | | SSE | Web-based, streaming | | WebSocket | Real-time, bidirectional |


3. Tool Design Principles

Good Tool Design

| Principle | Description | |-----------|-------------| | Clear name | Action-oriented (get_weather, create_user) | | Single purpose | One thing well | | Validated input | Schema with types and descriptions | | Structured output | Predictable response format |

Input Schema Design

| Field | Required? | |-------|-----------| | Type | Yes - object | | Properties | Define each param | | Required | List mandatory params | | Description | Human-readable |


4. Resource Patterns

Resource Types

| Type | Use | |------|-----| | Static | Fixed data (config, docs) | | Dynamic | Generated on request | | Template | URI with parameters |

URI Patterns

| Pattern | Example | |---------|---------| | Fixed | docs://readme | | Parameterized | users://{userId} | | Collection | files://project/* |


5. Error Handling

Error Types

| Situation | Response | |-----------|----------| | Invalid params | Validation error message | | Not found | Clear "not found" | | Server error | Generic error, log details |

Best Practices

  • Return structured errors
  • Don't expose internal details
  • Log for debugging
  • Provide actionable messages

6. Multimodal Handling

Supported Types

| Type | Encoding | |------|----------| | Text | Plain text | | Images | Base64 + MIME type | | Files | Base64 + MIME type |


7. Security Principles

Input Validation

  • Validate all tool inputs
  • Sanitize user-provided data
  • Limit resource access

API Keys

  • Use environment variables
  • Don't log secrets
  • Validate permissions

8. Configuration

Claude Desktop Config

| Field | Purpose | |-------|---------| | command | Executable to run | | args | Command arguments | | env | Environment variables |


9. Testing

Test Categories

| Type | Focus | |------|-------| | Unit | Tool logic | | Integration | Full server | | Contract | Schema validation |


10. Best Practices Checklist

  • [ ] Clear, action-oriented tool names
  • [ ] Complete input schemas with descriptions
  • [ ] Structured JSON output
  • [ ] Error handling for all cases
  • [ ] Input validation
  • [ ] Environment-based configuration
  • [ ] Logging for debugging

Remember: MCP tools should be simple, focused, and well-documented. The AI relies on descriptions to use them correctly.

Related skills