Skip to main content

sigrix-mcp

sigrix-mcp

PyPI Python CI Licence

Publish prompt, persona, skill, MCP server and assistant listings to Sigrix from the AI client you already write in — Claude Code, Claude Desktop, Cursor, VS Code, or any MCP client.

A thin server over Sigrix's seller API. It carries no model calls, no validation of its own and no secret beyond your token. Every submission goes through Sigrix's moderation queue; nothing goes live from here.

Install

Nothing to install or run by hand: your MCP client runs uvx sigrix-mcp itself, from the configuration below, whenever it starts the server. You need uv, which provides uvx, and Python 3.11 or newer.

Run by hand in a terminal, it prints one line to stderr saying it is an MCP server waiting for a client, then waits on stdin for a client's JSON-RPC, as every stdio MCP server does. Ctrl+C quits.

pipx install sigrix-mcp is only for keeping a pinned, installed copy. The command in your client's configuration is then sigrix-mcp, with no args, and the Claude Code line ends -- sigrix-mcp.

Get a token

Sign in to Sigrix, open Account → Settings, and create a Seller API token. It is shown once. The token can create, edit and submit your own drafts for review, and nothing else on your account: it cannot approve or publish, and it opens no other page or API. Revoke or regenerate it from the same card at any time; the old token stops working on the next request.

Give it to the server as SIGRIX_SELLER_TOKEN.

Configure your client

Claude Code

claude mcp add sigrix -e SIGRIX_SELLER_TOKEN=sgx_... -- uvx sigrix-mcp

Claude Desktop (claude_desktop_config.json) and Cursor (~/.cursor/mcp.json)

{
  "mcpServers": {
    "sigrix": {
      "command": "uvx",
      "args": ["sigrix-mcp"],
      "env": { "SIGRIX_SELLER_TOKEN": "sgx_..." }
    }
  }
}

That is Cursor's user-level file. Keep the block out of a workspace .cursor/mcp.json: the token is in it, and a workspace file is easily committed.

VS Code (~/.copilot/mcp-config.json)

{
  "mcpServers": {
    "sigrix": {
      "type": "stdio",
      "command": "uvx",
      "args": ["sigrix-mcp"],
      "env": { "SIGRIX_SELLER_TOKEN": "sgx_..." },
      "tools": ["*"]
    }
  }
}

That user-level file is the portable location VS Code prefers for new servers, and GitHub Copilot CLI's own; with COPILOT_HOME set, it is $COPILOT_HOME/mcp-config.json. The block is the one above with two keys added for Copilot: its reference requires tools on a local server, and "type": "stdio" is the type it recommends for a configuration VS Code also reads. Keep the block out of a workspace .mcp.json or .vscode/mcp.json: the token is in it, and a workspace file is easily committed. An older VS Code that does not read the file has its own user mcp.json (MCP: Open User Configuration, now deprecated): put the entry there under servers rather than mcpServers, and leave out tools.

SIGRIX_BASE_URL is optional and defaults to https://sigrix.io.

What it does

Tools:

Tool What it is
list_categories The category slugs Sigrix accepts, with a sentence each.
list_my_listings Your listings, any status, newest first.
get_listing One listing, as the web editor loads it.
create_draft A new private draft.
update_draft Fill or change its fields.
check_draft What submit would refuse, in the platform's own words.
submit_for_review Into the moderation queue.
import_skill_md A SKILL.md on disk becomes a draft skill.
export_skill_md A draft skill back as SKILL.md.

Prompts: draft_prompt_listing, draft_persona_listing, draft_skill_listing, draft_mcp_server_listing, draft_assistant_listing — the brief a good listing of each type is written to. Give one an idea and it drafts, checks and asks you before submitting.

Every tool that takes an item_type takes one of prompt, persona, skill, mcp_server and assistant: the types Sigrix lets every seller list. Crews, agents and workforces are built in Sigrix's own editors, which record the test run each needs before review.

The server pins the seller API version it was written against and refuses to run against a platform that serves another one; upgrade when it tells you to.

What it does not do

It does not publish anything. A submitted listing is pending_review until a moderator approves it, and you can keep editing it in the web wizard at the edit_url every tool returns. It does not read your purchases or anyone else's listings, and it never sends your token anywhere but the Authorization header of requests to the base URL you configured.

It uploads no file but a SKILL.md. A paid MCP server is one Sigrix delivers, so its package goes up from the listing's web form (or your CI), and each document an assistant asks its buyer for needs a sample, uploaded in its web wizard; check_draft says when either is what is left.

Where it fits

sigrix-mcp is one of the open-source projects Sigrix publishes, and a seller's way in: a draft goes from your editor through the seller API into the review queue. Every project Sigrix publishes, and a map of how they connect: sigrix.io/open-source.

Development

pip install -e ".[dev]"
ruff check .
ruff format --check .
mypy --strict src/sigrix_mcp
pytest

scripts/sync_schemas.py <base-url> refreshes the API schema the tool descriptions are derived from.

The package ships type information (py.typed), so your own checker uses these annotations rather than inferring around them.

CONTRIBUTING.md has the scope and the review queues, VERSIONING.md says what a version bump means, and SECURITY.md is where a vulnerability goes — not the tracker.

Licence

Apache-2.0. The Sigrix name and logo are not covered by the licence — see NOTICE.

Metadata

Release files for sigrix-mcp 0.3.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for sigrix-mcp 0.3.0
File Size Uploaded Provenance
sigrix_mcp-0.3.0.tar.gz 42.2 kB With provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for sigrix-mcp 0.3.0
File Interpreter ABI Platform
sigrix_mcp-0.3.0-py3-none-any.whl Python 3 none any Details

Total release size: 68.9 kB

Release files / sigrix_mcp-0.3.0.tar.gz

Download URL sigrix_mcp-0.3.0.tar.gz
Size 42.2 kB
Tags Source
SHA-256 checksum
How to use checksums
42fe447bc0b46f7644b9317c23b9dae519b2e798a3d62a8007d82a02b83eb3a6
BLAKE2b-256 checksum
How to use checksums
2c6db55f3b386b45d08567cf77c532963a3f1f3514fea336a24a8da3ffceda52
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 25, 2026.

Transparency log

Release files / sigrix_mcp-0.3.0-py3-none-any.whl

Download URL sigrix_mcp-0.3.0-py3-none-any.whl
Size 26.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
53c6db2a185253d33b616a29fc985c6ebfd55a677eb88593eed9fe5b4875cc8f
BLAKE2b-256 checksum
How to use checksums
b90132073998613a2a252f347dfee834b2486017ca3ddb5a7ea167ac0fb10b00
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 25, 2026.

Transparency log

Security for sigrix-mcp 0.3.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for sigrix_mcp-0.3.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Oct 25, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page