A canonical JSON Schema + ajv validator describing a connected MCP server's capabilities, scope tier, and rate-limit usage — the data contract the Sales Stack Router skill is built on.
The MCP Capability Manifest Schema is a free JSON Schema (2020-12) plus an ajv validator that describes a connected MCP server's capabilities, scope tier, and rate-limit usage — the canonical data contract the Sales Stack Router skill routes against.
Every real MCP server you connect — Outreach, Salesloft, Apollo, or anything else — needs to be described the same way before any routing logic (like the Sales Stack Router skill) can decide which one to call. This snippet is that canonical data contract: a JSON Schema (2020-12 draft) plus a small ajv validator.
A manifest entry declares a server’s server_id, platform, connection status, an array of capabilities (each dot-namespaced, e.g. contact.enrich, with a required_scope of read/write/destructive), and an optional rate_limit + live usage_this_window.
const { validateManifest } = require('./validate.js');
const result = validateManifest(myManifestEntry);
if (!result.valid) console.error(result.errors);
// { valid: false, errors: [{ index: null, message: "must be equal to one of the allowed values", path: "/status" }] }
Manifests in real usage are usually built from data pulled at runtime (an account’s live connected-app list), not written by hand in code you control. A runtime-validated JSON Schema catches malformed data before it reaches routing logic — a compile-time type can’t do that for data you didn’t generate yourself.
A schema + a thin ajv validator, not a hosted service. Nothing leaves your environment.
| File | Purpose |
|---|---|
schema.json | JSON Schema (2020-12 draft) for one manifest entry |
validate.js | ajv-based validator — accepts a single entry or an array |
examples/valid.json | A schema-conformant example |
examples/invalid.json | Intentionally broken example, used by the test suite to prove rejection actually works |
test.js | 10-test suite |
Verified 2026-08-12: npm audit 0 vulnerabilities (single dependency: ajv, installed in an isolated local package.json), node test.js 10/10 passing, including a dedicated test proving the shipped invalid.json example is actually rejected.
Open an issue on GitHub Issues. Want it wired into your real MCP server connections? Book a scoping call ($175/hr).
MIT
Yes. Free to download and use. MV3 charges $175/hr only if you want help wiring it into your real connected MCP servers.
No. Validation runs entirely in your own environment with zero network calls.
JSON Schema validation with good error messages is a solved problem — reimplementing it would add risk, not remove it. ajv is a single, widely-audited dependency (0 vulnerabilities per npm audit as of 2026-08-12).
The Sales Stack Router skill consumes manifests in exactly this shape. You can also use it standalone to validate any MCP-server inventory data.
Open a GitHub Issue for bugs or questions. For paid help wiring this into your real CRM/sales stack, book a scoping call.
AI Marketing & SEO Automation, All States
AI Content & SEO Infrastructure for B2B companies that want to own their growth channel , not rent it.
(704) 317-2293 Get the Audit →We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
Google Tag Manager simplifies the management of marketing tags on your website without code changes.
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
You can find more information in our Cookie Policy and Privacy Policy.