Skills · last verified 2026-10-24

upstash/context7 — install for Claude Code

github.com/upstash/context7 · MCP server · up-to-date library docs on demand

What it does

Up-to-date library documentation served on demand through MCP: instead of the agent guessing at APIs from its training data, it fetches current docs for the library in use.

Network-dependent by design — every lookup goes to the Context7 service, so this page's install path and trust review both account for the hosted dependency.

Install

Generic (single command; chooses CLI+Skills or MCP mode — verified against the repo README's Installation section):

npx ctx7 setup

MCP manual config (hosted): server URL https://mcp.context7.com/mcp, with your API key passed in the Authorization: Bearer YOUR_API_KEY header.

Note: setup signs you in and creates an API key for you; a free key is recommended for higher rate limits. Context7 also notes its library docs are community-contributed and it cannot guarantee their accuracy.

Verified against github.com/upstash/context7 (README, Installation), 2026-10-24. A raw stdio MCP JSON config is NOT documented in the README — no such block is given here; only the two paths above are verified.

Trust score: 5/10

• Skill-file review (2/3): a docs-retrieval tool with a stated job — but every query's content flows through a vendor-hosted service, and the skill's behavior changes with whatever the service returns.
• Install behavior (1/3): npx ctx7 setup downloads and runs the setup CLI — install executes code — and the manual path asks for an API key, a credential-bearing config.
• Prompt-injection surface (2/4): retrieved documentation becomes prompt content; a poisoned or compromised docs source would steer the agent mid-task. The vendor hosts the retrieval path, so the surface is rented, not owned.

How the score works: skill-file review, install behavior, and prompt-injection surface, each scored against what the skill asks for beyond its stated job. This is a public-code review as of 2026-10-24 — a signal, not a certification. Full methodology: skills index.

Also in this series

• obra/superpowers — install for Claude CodeTrust 6/10 · 2026-10-24
• mattpocock/skills — install for CursorTrust 6/10 · 2026-10-24
• thedotmack/claude-mem — install for Claude CodeTrust 5/10 · 2026-10-24
• Leonxlnx/taste-skill — install for Claude CodeTrust 6/10 · 2026-10-24