Open-source registry catalog of MCP servers from Stacklok. Demonstrates twin catalog streams — servers for executable components and skills for reusable…
Yes — Apache-2.0-licensed.
It is free to use.
ToolHive's catalog is a working example of a registry that maintains **twin catalog streams**: servers for executable MCP components and skills for reusable prompt workflows.
Each registered skill pairs a skill.json config with an adjacent SKILL.md payload. The config declares ownership namespace, semantic version, license, and an **allowedTools** array listing the exact tool names the skill may invoke. Restricting tool access inside the skill definition prevents agent privilege escalation and keeps execution bounded within declared parameters.
This registry borrows the twin-stream idea: tool entries describe executables, while a bundled Agent Skill (consume-registry) describes how to *use* the registry itself, with a bounded allowedTools.