Index live · v1.7.0 · OCT 6 2026

shadcn/ui

Official
byshadcn

shadcn's official MCP server, bundled into the shadcn CLI itself (`npx shadcn@latest mcp init --client claude`). Lets AI agents interact with the shadcn component registry — search for components, add them to your project, manage themes, and pull from private or third-party registries. Same source repo as the CLI (shadcn-ui/ui, 115k stars) and ships in the same release cycle.

stdioTypeScript
Bundled in shadcn CLI

Configuration

npx shadcn@latest mcp init --client claude

Run in a terminal. Copied verbatim from the upstream README.

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

6/7
6 of 7 automated checks passed
Audited Aug 7, 2026
SECURITY.md published
Mitigates: Coordinated disclosure path
Evidence
Commit in last 90 days
Mitigates: Maintainer abandonmentLast push 0 day(s) ago
≥2 active contributors
Mitigates: Bus-factor of one10 contributors with ≥2 commits
Evidence
CI pipeline configured
Mitigates: Code health regression
Evidence
Dependency lockfile committed
Mitigates: Dependency confusionpnpm-lock.yaml
Evidence
Software Bill of Materials (SBOM)
Mitigates: Audit trailNo SBOM file present
License declared
Mitigates: Legal ambiguityMIT

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelOfficial
Transportstdio
API KeyNot required
LanguageTypeScript
CategoryDeveloper Tools
Sourceshadcn-ui/ui
Websiteui.shadcn.com

Author

s

shadcn

Official

Tags

shadcnui-componentsregistrydesign-systemtailwindradix

Used in this workflow

Build a Complete Auth Flow with Better Auth + shadcn + Resend

Email/password, magic links, email verification, and protected routes for Next.js 16 — under an hour, with the 2026 gotchas already handled.

5 skills · 2 MCP

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.