sigrix-mcp
Publish prompt, persona and skill listings to Sigrix from the AI client you already write in — Claude Code, Claude Desktop, Cursor, VS Code, or any MCP client.
A thin server over Sigrix's seller API. It carries no model calls, no validation of its own and no secret beyond your token. Every submission goes through Sigrix's moderation queue; nothing goes live from here.
Install
Nothing to install or run by hand: your MCP client runs uvx sigrix-mcp itself, from the configuration below, whenever it starts the server. You need uv, which provides uvx, and Python 3.11 or newer.
Run by hand in a terminal, it prints one line to stderr saying it is an MCP server waiting for a client, then waits on stdin for a client's JSON-RPC, as every stdio MCP server does. Ctrl+C quits.
pipx install sigrix-mcp is only for keeping a pinned, installed copy. The command in your client's configuration is then sigrix-mcp, with no args, and the Claude Code line ends -- sigrix-mcp.
Get a token
Sign in to Sigrix, open Account → Settings, and create a Seller API token. It is shown once. The token can create, edit and submit your own drafts for review, and nothing else on your account: it cannot approve or publish, and it opens no other page or API. Revoke or regenerate it from the same card at any time; the old token stops working on the next request.
Give it to the server as SIGRIX_SELLER_TOKEN.
Configure your client
Claude Code
claude mcp add sigrix -e SIGRIX_SELLER_TOKEN=sgx_... -- uvx sigrix-mcp
Claude Desktop (claude_desktop_config.json) and Cursor (.cursor/mcp.json)
{
"mcpServers": {
"sigrix": {
"command": "uvx",
"args": ["sigrix-mcp"],
"env": { "SIGRIX_SELLER_TOKEN": "sgx_..." }
}
}
}
VS Code (~/.copilot/mcp-config.json)
The mcpServers block above, unchanged. That user-level file is the portable location VS Code prefers for new servers; with COPILOT_HOME set, it is $COPILOT_HOME/mcp-config.json. Keep the block out of a workspace .mcp.json or .vscode/mcp.json: the token is in it, and a workspace file is easily committed. An older VS Code that does not read the file has its own user mcp.json (MCP: Open User Configuration, now deprecated): put the entry there under servers rather than mcpServers, and add "type": "stdio" to it.
SIGRIX_BASE_URL is optional and defaults to https://sigrix.io.
What it does
Tools:
| Tool | What it is |
|---|---|
list_categories |
The category slugs Sigrix accepts, with a sentence each. |
list_my_listings |
Your listings, any status, newest first. |
get_listing |
One listing, as the web editor loads it. |
create_draft |
A new private draft. |
update_draft |
Fill or change its fields. |
check_draft |
What submit would refuse, in the platform's own words. |
submit_for_review |
Into the moderation queue. |
import_skill_md |
A SKILL.md on disk becomes a draft skill. |
export_skill_md |
A draft skill back as SKILL.md. |
Prompts: draft_prompt_listing, draft_persona_listing, draft_skill_listing — the brief a good listing of each type is written to. Give one an idea and it drafts, checks and asks you before submitting.
The server pins the seller API version it was written against and refuses to run against a platform that serves another one; upgrade when it tells you to.
What it does not do
It does not publish anything. A submitted listing is pending_review until a moderator approves it, and you can keep editing it in the web wizard at the edit_url every tool returns. It does not read your purchases or anyone else's listings, and it never sends your token anywhere but the Authorization header of requests to the base URL you configured.
Where it fits
sigrix-mcp is one of the open-source projects Sigrix publishes, and a seller's way in: a draft goes from your editor through the seller API into the review queue. Every project Sigrix publishes, and a map of how they connect: sigrix.io/open-source.
Development
pip install -e ".[dev]"
ruff check .
ruff format --check .
mypy --strict src/sigrix_mcp
pytest
scripts/sync_schemas.py <base-url> refreshes the API schema the tool descriptions are derived from.
The package ships type information (py.typed), so your own checker uses these annotations rather than inferring around them.
CONTRIBUTING.md has the scope and the review queues, VERSIONING.md says what a version bump means, and SECURITY.md is where a vulnerability goes — not the tracker.
Licence
Apache-2.0. The Sigrix name and logo are not covered by the licence — see NOTICE.
Metadata
Release files for sigrix-mcp 0.2.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| sigrix_mcp-0.2.1.tar.gz | 33.6 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| sigrix_mcp-0.2.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 57.2 kB
Release files / sigrix_mcp-0.2.1.tar.gz
| Download URL | sigrix_mcp-0.2.1.tar.gz |
|---|---|
| Size | 33.6 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
4cdce6b4d8d873ef9f2e8ee464f6f50994bea486b5916d02a0195ae274470cad
|
|
BLAKE2b-256 checksum How to use checksums |
31fe5077ecc6704bfe40858a37514e98f96c5b68fdc3a193f39d7839eba70463
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 3, 2026.
Transparency logRelease files / sigrix_mcp-0.2.1-py3-none-any.whl
| Download URL | sigrix_mcp-0.2.1-py3-none-any.whl |
|---|---|
| Size | 23.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
d2cd942d8c2ad48061ec10116f7f6528cd5d84792b3d6806c6280c48481e5773
|
|
BLAKE2b-256 checksum How to use checksums |
7cbcb5833b595353f9a6d9a5baa918833d5dedefb8e551394727a525d0df0409
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 3, 2026.
Transparency log