# Install D5 Works MCP and optional Skill (USA)

Installation guide: https://usa.works.d5cdn.com/mcp/d5-works-mcp-install.md
Skill package: https://usa.works.d5cdn.com/mcp/d5-works/1.1.3/d5-works-skill.zip
Skill identity/version: d5-works / 1.1.3
Package SHA-256: 4d16bb325f8c953e596206f0635ba021f02b207b8c97282ccb774c21cccf6280
Latest release information: https://usa.works.d5cdn.com/mcp/skill-latest.json
MCP endpoint: https://usa.api.d5render.com/works/mcp
API key page: https://d5works.com/mcp#mcp-api-key

1. Detect the client and confirm USA is the chosen environment. Configure the Streamable HTTP endpoint as d5_works through supported client settings with user authorization. Preserve unrelated configuration. Do not redirect other environments to USA.
2. If authentication is needed and the official API key page is provided, guide the user to sign in or register and create a key there. Have them enter it only in protected client settings. Never ask for the key in chat or store it outside protected credentials. If protected entry is unavailable, explain the blocker.
3. Skill installation and version checks are optional, never prerequisites for normal MCP business. Complete the user's task first when possible. Suggest optional installation/update at most once if useful. If installation is unknown, say 'If you have not installed the Skill'. Current/ahead/unknown versions do not justify downgrades or incompatibility claims.
4. On authorized installation, download the versioned package above rather than the potentially stale fixed ZIP alias. Verify SHA-256, actual d5-works/1.1.3 metadata, safe paths and complete resources. Do not execute downloaded code during setup. Never bypass checksum failures. Preserve the previous installation on failure and use the host's supported installer and loader.
5. Verify connection and actual host loading separately; run a read-only business check only when authorized. Report actual missing tools, business errors, factual limitations and partial client support. No pairing success, compatibility matrix or update is required. Optional check_skill_compatibility supplies release advice only; source failures must not block tasks. Keep reminder state across retries and never replay unknown-outcome writes.
6. Report only observed results and settings changed. A downloaded package does not prove it is loaded. skill-latest.json contains only version and installation_url, which points to this guide; it is not a compatibility matrix or installer.