Feature Request: Official Verified Marketplace for Skills, MCP Servers, and Custom Agents

Summary

Claude Code's extensibility model (skills, MCP servers, custom agents) currently has no centralized, verified distribution channel. Users must source extensions from scattered GitHub repos, blog posts, and social media — with no vetting, code signing, or trust guarantees. This creates a significant security gap and discoverability problem.

The Problem

Today, extending Claude Code requires:

• Manually finding repos via search or word-of-mouth
• No way to verify publisher identity or code integrity
• No security review or malware scanning
• No standardized update/patch mechanism
• No quality or compatibility guarantees

This leaves users vulnerable to malicious or poorly maintained extensions — exactly the kind of supply chain risk that a trusted marketplace solves.

Proposed Solution

An official Anthropic-hosted marketplace for Claude Code extensions (skills, MCP servers, custom agents) with:

• Verified publishers — identity verification, reputation scores
• Security review — automated scanning and/or manual review before listing
• Code signing — cryptographic provenance so users know what they're installing
• Discoverability — searchable catalog with categories, ratings, and reviews
• Automatic updates — security patches and version management
• Standards enforcement — consistent APIs, documentation requirements, compatibility metadata

Precedent

VS Code Extension Marketplace is the strongest correlated example. It transformed VS Code from a text editor into a platform by giving extension authors a trusted channel and giving users confidence in what they install. It includes verified publishers, install counts, ratings, and automated compatibility checks. This is arguably the model to follow.

Apple App Store also demonstrates the value of curated distribution — trust, discoverability, and quality standards — ideally without the 30% revenue tax that has drawn regulatory scrutiny. A marketplace can provide trust and curation without extractive economics.

Why This Matters Now

The Claude Code extension ecosystem is growing fast (MCP servers, custom agents, skills). The longer it grows without a trusted distribution channel, the harder it becomes to retrofit trust — and the more likely users are to encounter malicious extensions sourced from unvetted locations. Early investment in a marketplace prevents the security debt from compounding.

Additional Context

• The community-maintained MCP servers list is a helpful stopgap but is not a substitute for a proper marketplace with automated trust infrastructure.
• Integration with claude mcp add and skill installation commands would make adoption seamless.