Skyelight MCP server
online · 100% uptimeio.github.plastrlab/skyelight-mcp·v1.0.0·1 starsGive your AI assistant feedback pinned to the exact element, with its code, so it can fix and reply.
1 stars76 downloads/wk
Reviews
Write oneNobody has reviewed Skyelight yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Skyelight tools (18, 3 write)
write = sends, deletes, buys or postsassignFreeHand an item to a person, who is notified the way an assignment in the app notifies them. Pass null as the assignee to unassign it. Only owners, admins and collaborators can assign; a resolved item has to be reopened first.
create_itemwrite actionFreeOpen a new thread on a page, as the person whose connection you are using. Only available on a person's own connection — an agent reporting what it found or changed uses post_update on the thread it was working, so the answer lands where the question was asked.
decision_logFreeThe decisions a project made in its threads, quoted: every thread resolved or deferred after a discussion, with the conversation, plus types people corrected and where outcomes keep recurring. Also returns the project's existing rules, so you can tell what is new. Use it to write a decision log, or to find rules worth keeping with save_rule.
find_by_sourceFreeFeedback by the code that rendered it, from the file and line the Skyelight build plugin stamps on each element. Pass a file (a path or just its name) or a component to see every thread about it before you edit it; pass neither to get the hot spots, every stamped file ranked by outstanding feedback.
find_similarFreeHas this already been reported? Pass the text you are about to report (and the page, if you know it) before create_item, or an itemId to find what an existing thread duplicates. Returns likely matches with why each matched: shared words, same page, same element, same source file. If two are the same problem, merge_items folds one into the other.
get_itemFreeEverything needed to work one item: the whole thread in order, the page and URL it is on, the anchor identifying the element the person pointed at, and the pictures — what the page looked like when it was pinned, plus anything people attached — returned as images you can look at rather than links you cannot.
list_itemsFreeList feedback items (bugs, ideas, comments) people left on a Skyelight project. Returns a summary of the project plus matching items. Start here to see what is outstanding. An item's hand-off (investigate, plan, fix) is set by the team and binding: on investigate or plan, reply on the thread and change no code.
list_membersFreeThe people in a workspace: name, email, role and id. Call it when you are asked to tell, ask or hand something to someone by name, then pass their name or id to assign, or in mentions on create_item or post_update.
list_projectsFreeProjects you can reach, newest activity first, across every workspace unless one is named. Start here when no project is bound — `list_items` needs a project id and this is where one comes from.
list_workspacesFreeWorkspaces you can reach, with the role you hold in each, and who you are. Use when you do not know what exists yet, to find which workspace a project belongs to, or to learn your own user id.
merge_itemsFreeFold duplicate items into one, the way merging works in the app: the duplicates leave the list and count as extra reports on the item they were merged into. Use it only when find_similar and the threads themselves show they are the same problem. Owners, admins and collaborators can merge.
post_updatewrite actionFreeReport back on an item: what you found, what you changed, a link to the PR. Posts as a reply on the thread the feedback was left on, so the person who reported it sees the answer where they asked. Use this when you finish work on an item, and when you get stuck.
project_reviewFreeEverything needed to write an accurate project review or hand-off document: the shape of the work, every resolved thread and how it ended, what was deferred and why, what is still open, and the longest conversations quoted in full, which is where decisions were made. Every entry carries its item id, so each claim in your document can be traced back to its thread. Quote; do not invent outcomes the threads do not state.
publish_review_linkwrite actionFreeShare something with Skyelight for review, and get a link people can pin feedback on. Two ways: - code: one file Skyelight hosts at its own link with the review badge on it. A whole HTML page, or one React component with an export default (Tailwind classes and npm imports work; local imports such as @/components do not). For Claude prototypes, v0 snippets and single pages. Publishing again with the same prototypeId, or the same name in the same project, makes a new version at the same link. - url: an app already deployed (a Lovable, v0, Bolt or Vercel project: anything with more than one file). Adds its address to the project's Review Links and returns a script tag to add to the app's <head> (index.html, or the root layout); add it and redeploy. Owners and admins. Returns the share link and the project link; give both to the person. A hosted link is public to anyone who has it.
save_ruleFreeKeep a rule the team agreed on ("sentence case in every button", "the brand gray stays, do not raise contrast bugs on it") in the project's context, under Rules learned. The classifier reads that context, and every agent reads it through decision_log, so it shapes future threads. Cite the threads it came from. Workspace owners and admins only; confirm with the person before saving.
search_itemsFreeFind items whose thread mentions some text. Searches replies as well as the original message, so an item someone already diagnosed in a reply still turns up.
set_statusFreeMove an item to open, deferred or resolved. Use it to close the loop after you have fixed something and said so — post_update first, so the person who reported it reads what changed, then set_status. "deferred" is for work that is real but not now.
whats_newFreeWhat changed on a project since you last looked: new threads, new replies grouped by thread, what was resolved or deferred, and what was assigned to you or mentioned you. Call it at the start of a session. Without `since` it reads from your bookmark and moves it forward; with `since` it reads that window and leaves the bookmark alone.
Public scan report
scanner v0.1.10 · 2026-10-24 · same rubric, same numbers if you re-run it
- Code scan22 source files scanned25/25
- Live reliabilityremote reachable in 2045ms17/20
- Tool poisoning18 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Skyelight compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- Tools
- 18
- the typical server has 7
- Tools that change things
- 17%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote server answers 100%
- Response time
- 1,144 ms
- faster than 9% of 30,031 servers
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 76
- more than 56% of 12,191 servers with a package
What its tools let an agent do: 11 read · 2 create · 3 change · 2 send or post
Install Skyelight in Claude Code, Cursor or VS Code
claude mcp add --transport http skyelight-mcp https://app.skyelight.ai/mcp
What the publisher says
From the Skyelight repository's README, as published. We do not edit it. Read it on GitHub
@skyelight/mcp
<!-- A full URL, not a relative path, so the npm page shows it too. The image lives in the public repo (assets/), not in the npm package. -->
npm · source · docs
An MCP server that lets a coding agent read the feedback people left on your running app — the thread, the page, and the element they were pointing at — and report back on it when the work is done.
Full guide: skyelight.ai/docs/mcp. The REST API behind the local server is documented at skyelight.ai/docs/api.
Two ways to connect, with the same eighteen tools either way:
HTTP and you sign in once in the browser. Nothing is pasted and no key is stored on disk.
- Remote, with OAuth — the default. Your agent talks to Skyelight over
machine and carries a personal token. For clients or machines where the browser sign-in is not an option.
- Local, with a token — this package runs as a stdio server on your
Every plan includes every tool, Free included, for owners, admins and collaborators. On Free, your agent gets 25 agent threads a month; Pro and above have no limit. A reviewer reads and comments in the web app but does not get agent tools.
The short way
npx @skyelight/mcp initFinds your coding agents, registers Skyelight's remote server with them, and leaves the sign-in to OAuth — the first time the agent connects it opens a browser and you approve it there. It shows what it will change and waits; --yes skips that once you have read it.
It knows Claude Code, Cursor, Grok, Codex and Windsurf. With several installed it asks which; --client cursor or --client all answers in advance. npx @skyelight/mcp remove takes the entry out again. Point at another deployment with SKYELIGHT_URL=https://…; the deployment tells the installer its own MCP URL and OAuth client over /mcp/install-config, so this package holds no environment-specific constants.
The same setup, with a snippet per client, is in the Skyelight web app under account settings → Coding Agents.
As a Claude Code plugin
/plugin marketplace add plastrlab/skyelight-mcp
/plugin install skyelight@skyelightThe plugin connects Claude Code to Skyelight's remote server (sign-in is OAuth, as above) and adds a skill for working through feedback and two commands: /skyelight:whats-new and /skyelight:fix-feedback. Its files are .claude-plugin/marketplace.json and plugin/ in this repository.
With a token
Get a personal access token. In the Skyelight web app, go to account settings → API Keys → create one. It is shown once, belongs to the organization you create it in, and can be given an expiry.
Then add the server to your client:
{
"mcpServers": {
"skyelight": {
"command": "npx",
"args": ["-y", "@skyelight/mcp"],
"env": {
"SKYELIGHT_API_URL": "https://app.skyelight.ai",
"SKYELIGHT_API_TOKEN": "sky_..."
}
}
}
}Claude Code users can skip the file:
claude mcp add skyelight \
--env SKYELIGHT_API_URL=https://app.skyelight.ai \
--env SKYELIGHT_API_TOKEN=sky_... \
-- npx -y @skyelight/mcpSKYELIGHTAPIURL is https://app.skyelight.ai, the same host as the MCP URL on the Coding Agents page (https://app.skyelight.ai/mcp), without /mcp. A deployment's .convex.site host also works.
Credentials
Checked in order, so an existing setup keeps working:
- SKYELIGHTAPITOKEN / SKYELIGHTAPIURL in the environment
- .env.local, then .env, in the working directory
- ~/.skyelight/credentials — {"apiUrl": "...", "token": "sky_..."}
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Skyelight: common questions
- Is Skyelight MCP server safe?
- Mostly: it is graded B (82/100). Read the Skyelight safety report
- How do I install Skyelight?
- It runs remotely at app.skyelight.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Skyelight need an API key?
- Yes. The registry entry asks for
SKYELIGHT_API_TOKEN. - Is Skyelight maintained?
- The last commit was 12 days ago (2026-10-23). The latest release is v1.0.0.
- Is Skyelight up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- How does Skyelight compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); tools 18 (the typical server has 7); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.