ClawHub

Mapbox MCP Devkit Patterns

v1.1.0

Integration patterns for Mapbox MCP DevKit Server in AI coding assistants. Covers setup, style management, token management, validation workflows, and docume...

⭐ 1· 72·0 current·0 all-time
by@mapbox
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name and description match the content: the skill documents MCP DevKit setup, style and token management, validation, and workflows. It does not request unrelated credentials or binaries and all suggested tools and config edits are coherent with Mapbox/MCP DevKit usage.
✓
Instruction Scope
SKILL.md and reference files instruct the agent and user how to configure MCP servers (hosted or self-hosted), use specific DevKit tools, validate data, and save style JSON to files. They reference editing user-level MCP config files and optionally using MAPBOX_ACCESS_TOKEN for self-hosting — actions that are expected for this integration and are scoped to development workflows. The instructions do not ask the agent to collect or exfiltrate unrelated system data or credentials.
✓
Install Mechanism
There is no install spec and no code shipped with the skill (instruction-only). That minimizes risk — the skill only contains documentation and runtime patterns and does not perform downloads or write files itself.
✓
Credentials
The skill declares no required environment variables or credentials. The docs mention using a Mapbox access token (MAPBOX_ACCESS_TOKEN) for self-hosting and recommend storing tokens in environment variables — which is appropriate and proportionate for Mapbox DevKit functionality. No unrelated secrets or multiple unrelated credentials are requested.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It is user-invocable and instruction-only; it does not modify other skills or system-wide settings beyond suggesting edits to user MCP config files (which is appropriate for configuring MCP clients).
Assessment
This skill is documentation and recommended patterns for integrating Mapbox MCP DevKit — it does not itself include code or request credentials. Before using: verify the MCP server URL (https://mcp-devkit.mapbox.com/mcp) is an official Mapbox endpoint you trust; prefer the hosted server and OAuth if you don't want to manage tokens; if self-hosting follow the repo at https://github.com/mapbox/mcp-devkit-server and only provide a MAPBOX_ACCESS_TOKEN with minimal scopes needed for development. Never commit access tokens to source control, use URL/domain restrictions and least-privilege token scopes, and avoid using DevKit for production runtime operations as the docs advise.

Like a lobster shell, security has layers — review code before you run it.

latestvk9780mazrjzypg2xmfvzz6531983z40d

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments