Integrate Claude Agent SDK with You.com MCP server
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill appears to do what it claims: guide a developer through connecting Claude Agent SDK to You.com MCP, with disclosed package installs, API keys, and user-directed file edits.
Before installing or using this skill, confirm you want Claude Agent SDK connected to You.com MCP, verify the package names, keep API keys in environment variables, and review any generated file changes before running them.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Claude may use You.com search/content tools as part of the generated integration.
The skill grants Claude access to specific You.com MCP tools. This is aligned with the integration purpose and bounded to named tools, but users should understand that the agent can call those tools during queries.
allowed_tools=["mcp__ydc__you_search", "mcp__ydc__you_express", "mcp__ydc__you_contents"]
Review the allowed tool list and keep only the You.com MCP tools you actually want the agent to use.
The integration will use the user’s You.com and Anthropic account access when run.
The generated templates require API keys for You.com and Anthropic. This is expected for the stated integration and the keys are read from environment variables rather than hardcoded, but the registry metadata lists no required credentials.
YDC_API_KEY environment variable is required ... ANTHROPIC_API_KEY environment variable is required
Use environment variables, avoid committing keys to source control, and ensure the API keys have only the access needed for this integration.
Installing these packages adds third-party code to the user’s development environment.
The skill instructs users to install external SDK packages. This is central to the stated purpose, but package provenance and versions are not pinned in the instruction.
Python: `pip install claude-agent-sdk`; TypeScript: `npm install @anthropic-ai/claude-agent-sdk`
Verify the package names and publishers, and pin versions in your own project if reproducible builds matter.
Queries and tool calls routed through this MCP server may be sent to You.com using the user’s API key.
The generated configuration connects Claude Agent SDK to an external HTTP MCP server using a bearer token. The endpoint is disclosed and purpose-aligned, but it creates a data and credential boundary with an external provider.
url: "https://api.you.com/mcp", "headers": {"Authorization": f"Bearer {ydc_api_key}"}Only use this integration for data you are comfortable sending to the configured provider, and review You.com and Anthropic data-handling policies.