From 192af6eaeacd116a5b60a47a836c00cb99c493fc Mon Sep 17 00:00:00 2001
From: Harlan Wilton <harlan@harlanzw.com>
Date: Wed, 7 Oct 2026 12:22:25 +1100
Subject: [PATCH] feat(mcp): prepare ChatGPT and Claude directory listings

Both directories scan the live MCP server before they list it. Each tool
now has a title, and descriptions say what a tool does instead of telling
the model how to behave. Claude rejects a description that sends the
model to fetch instructions from a URL, so the fork hint left get_skill.

The toolkit answered 403 to any request with another site's Origin.
Claude and ChatGPT origins are now allowed; other origins still fail.

OpenAI needs terms of service, a domain challenge, and a plugin package.
Claude has a prefilled custom connector link that works before review.
---
 app/app.vue                                   |   6 ++
 docs/runbooks/agent-app-directories.md        |  81 +++++++++++++++
 integrations/openai-plugin/assets/logo.png    | Bin 0 -> 8207 bytes
 integrations/openai-plugin/mcp.json           |   9 ++
 integrations/openai-plugin/plugin.json        |  96 ++++++++++++++++++
 layers/marketing/app/pages/developers.vue     |  19 +++-
 layers/marketing/app/pages/terms.vue          |  11 ++
 layers/marketing/app/utils/developer-setup.ts |   9 ++
 layers/marketing/app/utils/page-admissions.ts |   1 +
 layers/marketing/content/pages/privacy.md     |  22 +++-
 layers/marketing/content/pages/terms.md       |  68 +++++++++++++
 layers/marketing/nuxt.config.ts               |   2 +-
 layers/mcp/server/mcp/index.ts                |   3 +-
 .../.well-known/openai-apps-challenge.get.ts  |  10 ++
 layers/mcp/shared/mcp-tools.ts                |  40 ++++++--
 nuxt.config.ts                                |   9 ++
 test/unit/developer-setup.test.ts             |  10 +-
 test/unit/mcp-discovery.test.ts               |  12 ++-
 18 files changed, 389 insertions(+), 19 deletions(-)
 create mode 100644 docs/runbooks/agent-app-directories.md
 create mode 100644 integrations/openai-plugin/assets/logo.png
 create mode 100644 integrations/openai-plugin/mcp.json
 create mode 100644 integrations/openai-plugin/plugin.json
 create mode 100644 layers/marketing/app/pages/terms.vue
 create mode 100644 layers/marketing/content/pages/terms.md
 create mode 100644 layers/mcp/server/routes/.well-known/openai-apps-challenge.get.ts

diff --git a/app/app.vue b/app/app.vue
index 1b8019ca..4ff011a5 100644
--- a/app/app.vue
+++ b/app/app.vue
@@ -282,6 +282,12 @@ watch(() => route.fullPath, () => {
           >
             Privacy
           </NuxtLink>
+          <NuxtLink
+            to="/terms"
+            class="font-mono text-xs text-muted underline-offset-2 hover:underline hover:text-default"
+          >
+            Terms
+          </NuxtLink>
           <UButton
             icon="i-lucide-keyboard"
             color="neutral"
diff --git a/docs/runbooks/agent-app-directories.md b/docs/runbooks/agent-app-directories.md
new file mode 100644
index 00000000..b589be8e
--- /dev/null
+++ b/docs/runbooks/agent-app-directories.md
@@ -0,0 +1,81 @@
+# ChatGPT and Claude directory listings
+
+The skilld MCP server at `https://skilld.dev/api/mcp` is listed in two directories.
+Both listings point at the same server, so a server deploy updates both.
+
+| Directory | Portal | Listing source |
+| --- | --- | --- |
+| [ChatGPT](https://chatgpt.com) and Codex plugin directory | [platform.openai.com/plugins](https://platform.openai.com/plugins) | `integrations/openai-plugin/` |
+| Claude Connectors Directory | [claude.ai/directory/manage](https://claude.ai/directory/manage) | the Claude listing fields below |
+
+## What review checks
+
+Both portals scan the tools from the live server. Every tool must keep these properties:
+
+- A `title`, and explicit `readOnlyHint`, `destructiveHint`, and `openWorldHint` values.
+- A description that says what the tool does. It must not tell the model how to behave, call other apps, or fetch instructions from a URL.
+- Output that holds only what the request needs. Do not add request IDs, trace IDs, or debug fields.
+
+`layers/mcp/shared/mcp-tools.ts` holds the tools. The toolkit answers 403 to a request whose `Origin` header is not in `mcp.security.allowedOrigins` in `nuxt.config.ts`.
+
+## Change a tool
+
+1. Deploy the change.
+2. In the [OpenAI](https://openai.com) portal, open the plugin, select **MCPs**, then **Rescan**. OpenAI also scans once a day.
+3. A new tool stays unavailable in ChatGPT until the scan approves it. Keep the old input schema working until then.
+4. Claude syncs tools from the server. If the portal flags a tool, fix it on the server.
+
+## OpenAI plugin
+
+The publisher must be an OpenAI organization owner or hold **Apps Management Write**.
+The organization must complete individual verification for the name in `developerName`.
+A project with EU data residency cannot submit a plugin with an MCP server.
+
+1. Build the ZIP from the package directory:
+
+   ```sh
+   cd integrations/openai-plugin && zip -r "$TMPDIR/skilld-openai-plugin.zip" plugin.json mcp.json assets
+   ```
+
+2. Upload the ZIP. Select **Upload new or existing plugin** and choose the verified developer identity.
+3. Connect the `skilld` MCP server and choose **No authentication**.
+4. The portal shows a domain-verification token. Set it as a Worker secret:
+
+   ```sh
+   pnpm exec wrangler secret put NUXT_OPENAI_APPS_CHALLENGE --config wrangler.jsonc
+   ```
+
+   Then check that `https://skilld.dev/.well-known/openai-apps-challenge` prints the token, and complete the challenge.
+5. Scan the tools and resolve every finding.
+6. In **Review details**, add the demo video URL. The review needs a video of the five positive test cases in ChatGPT.
+7. Submit for review, accept the policy attestations, and publish after approval.
+
+To change the listing text, the test cases, or the icon, edit `plugin.json`, raise `version`, and upload a new ZIP.
+
+## Claude connector
+
+Any paid Claude plan can submit. Use these fields in the portal.
+
+| Field | Value |
+| --- | --- |
+| Server URL | `https://skilld.dev/api/mcp` |
+| Server name | skilld |
+| One-liner | Search curated agent skills, see who wrote each one, and get the command that runs it in your coding agent. |
+| Description | `longDescription` in `integrations/openai-plugin/plugin.json` |
+| Categories | Developer tools |
+| Documentation URL | `https://skilld.dev/developers?setup=mcp&app=claude` |
+| Privacy policy URL | `https://skilld.dev/privacy` |
+| Support contact | `https://github.com/skilld-dev/skilld.dev/issues` |
+| Icon | `public/logo-icon.png` |
+| Slug | `skilld`. The slug is permanent after publication |
+| Use cases | Find agent skills by topic, check provenance before a run, open curated collections, get run and install commands |
+| Requirements | None. Every tool works without an account |
+| Data access | Reads data only |
+| Company | Harlan Wilton, `https://skilld.dev`, `harlan@harlanzw.com` |
+| Authentication | No authentication |
+| Data handling | First-party API. No health data. No sponsored content |
+| Test account | None. Every tool works without sign-in |
+
+Before you submit, add the server in Claude as a custom connector and call each tool once.
+After submission, Anthropic scans the server and lists it as a Community connector.
+Status and reviewer feedback appear in the portal. Escalations go to `mcp-review@anthropic.com`.
diff --git a/integrations/openai-plugin/assets/logo.png b/integrations/openai-plugin/assets/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..b85b7c82a68c866b57002790ab7678a5c12a75aa
GIT binary patch
literal 8207
zcmd^k_d`=z*X~LP5{iJLf}nz;fDITyQ7Orc1yB^MI7*2!il`Jt1*GIyfWd}}ih`0j
zir{Mj2gO231OXjdC`uDTQOY1C1VTys_Bp`&-TN=x`%_N#S?gKPDtn*3*N$=7YCly)
zR|Np3Iy$W14nRhaWS~w#KZC*5V*vVJ9oPT5Gx%Olqw{5V*Za+az^C8Tsnaf3f4us1
z*}V1V=Ibg)7hKptR@YK`qOf3ohR&g1UjFW+b1LY-EDNV9-oi&Iqg95l^GgmJ<#b-y
z60N9dn6NF5T{u6-K<}r6$z4C??XQaE)a_21e|fp(hHqVSYjtMv(AF>Fz+PKc>`qbm
zOl9RomEtC$I7ghoTX+5gqxi0cT+(}Ym0DRL%jlJLLuTD{dBxu&%rm^G)0&X#p_LH1
z>Oy4y-;aHqUq4u5Q*|LSL*QNYxW+aoJw0HF?4d_YUu5H|KmA3UQ=B=pSDUk1IqCNW
zo^D|o8v9ylWbFFkgn%VY4)gqe3terQq2z7lAMscBHr{8r!{Uo%0jqwh_)3(0B_z!8
zsCr>g#rge4bKKl)1nVUmQY-~2T2lf8t>f#HLtFJ^zP<e<6UVjl|76a)<9kSd&+0RS
z0g_#Ui|W`1MniK+SAcg_l&!CMh7vo>C&l2Zim2SJBJAk?mXE)g?7U9Wj2#JD>D>_8
zdSB)%SOh1xS6xu(aT3z!Oq-(?xp)aw>M{4Iur3uzvdA#FG0?muO1w$s>;f`Zj|Qhq
zj46+G!KaXO^1W2mUJBKZVjiBYD=jrnd1q+;8t(9Odjhu{9xkwwFGtur7j2}UY39ia
zyo`G<nHj%`p=sT^Do#x9zxF%={!9p1U1G_)H@JuK7b(5%-{;JVsB|+AGIShG2sIAT
z<$Ywm+?*k^NNKQNr+2zA9=ORLtFSGJi4Ddt^~^<3`!ZbYJAavNb;6JWHzC2uc2~gZ
zzUy8^>L261EWSd(cMa&);<JbK*F+4&2~I3)mCJ&E*5)p68hR5-hIG>{RW@PYYh!W*
zC%z|)SZpUMpo%k^8$yH2zXb+V%}mP*ulA(bRDw>hPzkHp=b;`Z-SY4<c3qJ^_P)uY
z=WcZNr~+5#@@n$N>7WoK1M>*O%h*&UE;o?|PGx^CVC0j`IpN*&{n0DO(hmh~#(o#I
zyT5*9of2-N!JVsDBG#wJ(7IR9-kf5t*6WQyE?SmcP?{B+^i4bM@8?UQvMs#fbXP^N
zGB|CkDrw41Dw^W0L?1iAO0Md8@HIn9V*Hz6bT6Utn_IkC@wYk>qe}x+sxIVTD%$Fy
zofdU_CbY}ICH3(;e?e_bX#TY*b!>FhH!E+uSc))j9?pE{b6oK8gZYIP1#SfmZZ7wl
zVZIYe{Q0N-4>yz-YzFop>#mZ&s=+=v@aC3YW2x-1fYZnLV~4|poaHE0b2SZ{x!1jn
z{bS>wzCQ+gBnsHoy<YSC2S@=!nIrA|UKOAhxye+|CyWF-_R2`?Hq$_r^fT~Qtb|?N
zC!N8Lp=lo<)&Sd=|19P%QeYH`o-5U_3R{Rnf3+-ijh$ot(%7x}FK}RqX~OMdw`>ZW
zVN}g5Z7>Zp<!&G~KVbsT%wm6gocyF@L>4@H@e-L)^ra!`=sIgE(9J9#{J#2x<YPnY
zkEIDC!iyiieJiu@E}wHT9_X>h66#Ji=2bk5Zu{|f4TXEPr(vF7gQyGzX7E#FF{Vx7
ze%0RVIi>(PRhBK)$VvVjv-q6pU?)a=gPJTz9#f$K#l?S1Aiwpc)^Jp3Hq@Rmd9~jg
zC;24gfM6uXeg0m2Ql|eX*~|%<kG!(Y?7CRP3E98DrTPS*YLsSXx}UMcUwpO9c%#4O
z^iS>yC@J@C)Gvz)ZCwOBZ;O_*1rLpf@2g@@-^^8e5Y7ZR)B9~65*v}wp!z|`Xb6;Y
z$p*0VpkU<lV*waIYRR#{9T{GJ4N0P7VwW&w*vY=@BU+UNRJi4nAl798VDBxrjNC@Q
z|5`dz0aCA`N0kDoJwBA#QO{E+gG;25rK*6!II5RM!Y<+>*KiT#|K}et^0(~JAhe_&
z4i??@Ze0pGG?EKO%N8f~>kt1_W)41)>*fxRv<a-h+=I-9#UN|$&1&04l?#_@T#ygl
zO8ba(^pTEG!C<thEw-QvbB@&Z4ErUQj8$lX;#+gL@k*oLUf#2#n5n=`RmR9}OW?*y
zGQ$k8<C>tjXF2SyRRu;hg--gaf_?M=c(@Q$%$;DNk3JXwXMp}4gN0ob{GZ+;P`RcB
zOMfat`ZPqSTbWSlM#Je%;81CY<p7*OR*o&4v@!>Y=}pCEipZdI8%(&VWP_L5z%@q(
zH_isfdZl#q?*|nlUtT+@@&*5ANDyn@j^qkwLkz+-#fkM!TG@?+oEA)~tcMwl?WFWP
z#1YwxQ^#r18<FngX%jYFj8T|;6zMm%0%Binj}#IJ1-d&D+e9TaZ1G2BY+;WA3Q8xQ
zj2mPFM`J+b$F{%>_AA)4-wfCsTx=?#K|{{ooHJpAXNHU?D^1uKj0O|BHklEb16Tx#
zb?0_ih=ATZBcP+CYmdSqlmv|^bi4xOlrjn(<~JRQ9f4;kCOlh&<*q>(d4qf%oR6mx
z<&CX}tdC6x$F(FR=3<9P+9`5X5Y|DI@lG$o$Uiu2%|xuQ0bGC0M6B4$5OBB#k&%Dq
zgNn=MaSfDcmmL#n=bl7vRnMBRVUAN-IfbxMg=+*78b-JyqDdQ{r-7m-bUf0+y^2Fp
z2H;Wb0o)OUM8z)Ese+Cf$puIOK15-0gApex_9dB+e`t)$e?4Rdj917z3O4}d=<-!C
z!9d4@D3SEzh(l0sqn@3#h!x|iW_TY^ifVO8F4PnlMbgh$VDhOnD=6A5VzfM8k3Uj4
za&bQr*@LFXognv6-;vh%+&Qu@SxqxNf4NLV(jXR0c(+_VW;>J7o1W6Fwxv<miSkfG
zu9bMu?T{<^(;zZK`&v12rJh1ps#X0IFCyXgw!+B^IanAmF}TUf*wvTgQUyq=PW6+w
z88pA9(CyLVxWYX{Sc@=oiOENY!E;DiM8@isv7~fD)5U_sGZc{rlJUZzU!l;;abpCZ
z*VDlEpqT+H2iQhrcF|A8?-|-q{TmG4Lm)&vc|l}08CS;RNoOfz7m+gJ(7BZ4GCP!n
zM<{$DEcwICz>|pQU<{<*oTSgwCbLf<Wt5~bIxx%_bCI~aG3+@sDSq-6G@~gz0k5qL
zrU%C99Hl@!0>znarohv`wXc~Gljl7h0)GFmLKg+rjfcl&1&PZW=YMk(Tq{5UA#!1I
z1q>1=`E(!u(Y`b<D^ue4R#fV*>?$jp*^=X0TEI^dHa%@`W2Ft{v&;%<ZOlN9?cAi0
zmeKT)ZtZwxlI_r?{?@MeR@&J>3Unj#h}PE|P5o)H{sUd5(%bLeM2}jz&1PEbmft&L
zHzlv4zqZvmZ->DDUn8j1B%&1XVDK@=I=7C$f>}C{D0>tpednF;WzU>G&r{+Pw!xPI
zdXqt+zt7@yczWvdNBFs6*|g<8>#rSX))N@J?@%If9VT;Ey?Ab4UwB7ZOjD1>(nziX
zEn*XOCmqbU6Y);9f8Qn-cKds%W0lF8Z{<9VW$L0k!1zvti06-Xzr%B_^K*m0@fVrN
zM9KZ5`cg)SC0$O1!n}#tv6+>P5%0U5gXHeF?DhuB9~j5eb~`YUMBzlav1yg(JZpN#
zT;sMX^vWyZj$0bIh<^j~(*%dk%#+{c%~Ri)@}<L98ZntBIN^mYBEMg3`?Bx4M%c;!
z=y&VA8Kggml{Q*!pcg5F5sr-Kjct7-Sm=3uLGue^PFvf#xkhlu1jP|w&9DJ!)*JV%
z?4Pc2ue7giB`;Gt9S4jhgkvr*2B~~YVcK<SrzweBO_VCzX60OQn$Z=KpS0KTG<oet
zFyDn25I!3Y_P5Lb^GXY$tfvQ2;c?l7V~qEe_R?J8huBkNB-%q!Z3QbTD@l?Vyg{1^
z7x&}&$GSrL3pHkr9<-~vouo73Di1L6*tV8L-$w8-57B3KoNCFaY1B!3dlNadI6aJv
zwc@$MC%Mzc1aZnk=5FuB>3S5{fEPEu?C5Y_4b~LdORm<hlLrTnCQ=s11N$%$OC6T3
zz9?f_*9@)++YKQR3jt%W@~b>fzp2fTIlHokni4x@yAg?QJZa_f*0H_(!J*vm@4EXq
zTJ!cv9JBwjBx7Z0RUpjOt`3rScg(=?%7{tCEqp8H-<bi6DJGYI9Y=VQZr3ZbGR+xH
zp`!I2E1R5$pS*-jOFxMyzqnk9J%@~KMN8SZ4@u?H*r*QjO?%*}vScOR`S(LblqhdA
zhHuxUh)MxXFTPh+wHSVA!eF6&-&?OWl%I-f<sRH0A?@<RqYjMUDUfqRM3xQ9M>+fb
z{7iEX=->+xH#xjVA?QMP+5o>YRY&3G2H;uym>F!~a^5u+Wk%h?m$U5M^)lwz!=Qqt
z8-Lv0Q69ZdF1jAPK^XzwDkPyW)~W`7SuU)(pydB{rN=Lu`eg0ra~Gv+k}(frA?B`O
z4kQgn=JeIhPSaTwN>EH9)<L!?2ZVA#aC4D!q*M^yr3E`b5S8L0^x#$nef!bH^y;rJ
zkBwr=gZO{CIwb;oiO(E{nSt|_P|_?YDiQ+vBBowNV6S@=9~sM&jbX(+e{sEQD+?Fi
zMARd;S46gvGqdqJZMmzR6zl2~2W&KmR!2-%L=Kbo1t<GYapG%!I;jl*i6?v-3^$|0
z<#;eT57;Nf$*xb4iV3E}K~3mifzKE_y8bYk!VQ+jr{rqq%G@}z#I6M-FxyP(k2H($
z8TF46%30y7Br>LK{T{cUHI4U(59$;WR1jaiu&(0bOJ~(OD*PiXBz3GNe+qq-A+~}F
z{~1;a;?I@!_lCC4%pc2;%TijNYS_+58*`lC!`|EFCs*|x+nz1vEJA7IjD1PV>tnWR
zwLD3Q(D59KpD;wfRe6t}O>_3_kjA(EN^kq|D;=@lS(HulWZ^^GxNSeSaq*!7G{nb;
zim}3u&NSvszme1Ka@$**&{qHC8~-L&%Iy&Ok)+%<t(JfIb#qV_J(b+lN%X$tHJlJ;
zQbN1*>1e%DFSW+=#{-v#B5o{8Mck%QWelAwg|e{MrD9j1abJjMt@!GF!NqOw|2u6C
z)T0_Y*u+XJMDTuhIYu_Y`OlHWnPDq^HM69M#U8)-lCdVoAaT1i<Opln^Wp|>MX0FS
zEU!=6<5{$HlL2(zvh1+xEB9*RtPO>SLp<6%b(XwBqjlyYG!ddgn07*0v3SHfO_i0?
zTNqqm5=<s$0;7plp3U?X`oCRaGumQ%_KI*+K0t-F%Nu(VhdX{jfNJKtSLMZq(D`h_
z0IPhMe7W!nKVtPVS$*o0g=liF=qvYb;@EXnfpbJ~S_;_@OOfAl1m2o<>1c`As<1}E
z|MCyc3T0SpIDxA_H3hmmdO2uq*y<1%A(Yv)OCSE2!3eh*dxNh(cZWMH`t)tl7U`Qb
zehau*qWHB-+uF29A^%&xHyyy`5s{aoY~~6ZZN}<c(VH-&{RmITJfZCKJNz@uA8jsb
zo%z(!St`!ylfCwrF1-hA6M~v?c@V`d>7m?D6K3RR(^w($LCKFR`YKr+P4m)L^QF;A
zYRn;x=+>ENd*bB&zJZ7^Exc<7N#1u}KEEWV<%(eD=Qew$uB<AKsg>4ACUJKX#el4z
zcodG=+XY0&PT5$VG*&QRFDsE|tpoFwgy~{K@-peETj<MDA{O2qj_<xbdNl96)i>R=
ze}%37&e5?2*38Y!MnkxhI^iNmuX5cvJ8{zRu2a*SOF0b`(28r9po%CFXC*&APEQz3
ziKOube0MSyV~%Hpzh&im`WfMy{+e(y_R@kF^6fG_#|+7jJ~R5M+23aP*ofqTez35Q
zMB>&y$_gj)AgxSE)7&bQiJ61v`-eJ`V$wPlNZdV>L5(=mw@cW<bmL@IX{c@T>`v?*
zTP_~DgueZRBg6Z2mBS=+t*wJ}n_qDF6fi`EU7pREhidG^s3lu9i*!gTH3prSNw++F
zmh}sQdY26pUqF4ev3X4WzHS<c8#NKfh#MytT$`mBRPJf<C3fm#`_ac<va}*AroUuJ
z6OR3fmv)5d&C?XWyIDrxR>(y$_f;N^%Gxf`lw;>geS(+CwuIxGDx3uC^&=ez!*jzP
zE47*J`S?Cf(sTHc(ukzL<C0*iJf)bq!-_=DoFK*;+VpEc&+RwMX#35tC~u$f>}|kZ
z^TsbU@qqo1hoon7v3|q8%SGa@J#zFh*w@*%k^;XID@|+&&1C`FE)wxjNS+RAXklTY
zL9~ZFm^=|>I{MV_zBQ4*voAEk?FQirz8%#@6VJOz<Kz{zdF}E;YZpS~?IL3beag@x
zRFtjXxq?K`ZbQ|05J}yK)O+Kq8WehRWn(U0`w?ts3O#a?4$q3rUO|-IS-a^la~yu~
z7NpWAYFcCPK6JjDnBf}LXq$g$9C8+!oigsnO0<`c>lKxXg?EM(R!#@o8<XVsqN4y&
za2nN4Fo=ySo+h*NC%IsO=s+=<PRvyqQzupojsCr4w%0hin-iQ|KS?HiEr~~(^tE|_
zLT?!tdWO!jB}6E>0TlY#|H9jl+2)ht2IxFBUKH36Is%RJN{{%zPht7l`iwSoV5_{(
zTuWm3woBn5aq^4uYSJ)Yi)6{;gXlDB0J~8t%;({Q&6Oo$QXx8m)4{C-L1YtWzN2@C
z6)q#I7_3IAVVuARu@D;f5q=h(2M9b49TU;v6UEI5KU-fRF%Y6VLVT@=3l8FfGjKul
z5mHQD1jq`0!sQKvd7qLAI_=R}3fydcwi8kbp9;bV4DVG8{z3>EA;A<}uyYDJQs?5P
z(O#1{cq5$m8_;358#g$9FekKo@#FddoX^Qb1YSeN!NrL8dxC`&9jSSd1f({CtR!qR
z(d$j>xa|m}ZL$)#J+_(XE#S7tdk#2`IwF}&upqh;R9xjf;^Sn2tNe>ML!RT<sc2Kd
zwIodYA(c2B8;}tr)RC3KGZcwC>v4(!c&FgF5^@W)k!2lkVsJ51X~VI>6mN-C;~sMN
zB6ZZ9LF#Jj(BMvDFdYr9(!~eABlTJbTs<96XEz=T_=<dB*b<T(5zFs5^U3ZJk~Cj}
zB=g4y5%u)lxVrffH24(H9keX~m4GL>Ka6|Gkf|DuS%~ViSwaj>M}ynp+q<ANB&=nK
zgoVA0#THB?WwZf+9!UY%>G1!>!vQ$9kNP0|D8P~m$udRm2Oa3s0Q#Z?V>|}-cnl8U
z{oWyZLsaZXSD-5<7==B(i>^zWc$utAsK=^nSsGq?^__2MeMZkZba&!%_R!<HhLUps
zhMBkP`-*CSKJ`#yV#0r$$+;9*k{&Giqv|6k|7y=Z=hwc$JMhNyvRt8j;M2>veYX|3
z_9PN}R;kvdBIloLwIOidaCAmX65imha|&h%IzNXOlhVD!qK5kMONPNc=#nAgd+kew
zVv>0}l?uBYR53wXy2So~2EbVFHwkTh+7!%~Or~>ImWHEShHrX*xhilK&H|f{$j#Dr
zo}*T=lyoh49=he*AspzCqu#nInbDB%+t4)IjD*>RjJ7caN9vA}8Rk}Rge7$r(Rh>F
zF!9hT_csB9oh`xdey${4EAh<noqs{}oCKXQ?cRvKT3(2$I<Tey=5bfqf+b05D;h2;
zc6FNp=RahAxEo*Jfx{>yzBt^JnI3Rp{=E)#Wq>X!&ai#+?eSOpw^W4<eR`=Cnx|+w
z8<J2P+xB>qx4b;)GdQ%{>gvGS-Y@oYkHbR{fG#Z?GyiF1{(S@%ZY2Tx>28kL*;F6!
z=S0)MVV2t}n9ic2#-L9^|8v8ltxdDcTwfo8M;+v4_x&`AsKGl>%YDW(pFA^fD=TX=
z$v1iAS2gTo6-tI-nYc_|JR7xpM|<{ZM6b%WMy>xvNAjvrEPF4z9@VvjWfU^K?&}_j
zHJ^t9@xM0#E;r`K%3S|Yq#u|8ko->KEi+qW4Pi?F{;5!VH^hAKlkhlVUxTTwE(-PH
zBMEg4=>FuifybfWT~Tw81dM+U<tbdUckaF9TK9D>eEvVKJe+t(_(IyVsfzSg)$_op
z9Eg{hzG?v-wJH0`?#W7jWvKzCd^oQvaTO<`CND4V$;gq$Rde7oor1cFS2{~+vmH@C
zy6vp@);CJ)0WN=_@+EQTqHIOLbkwi5YPFL8@rZOyZ964<uw3a}0UdPCw#RI7&F;<I
zmOE-}h&rEk3#g!%Q4u@lURFys5TqNxo|LIJ-@SFbreX_iSFOH~9IV@%r2vfOTeKo(
z=lx6?vT3p^s#P!$D3d^EW5RH>?K{t(8S}K1v6&mu{ocirJ|RCfW(s`;jpOUOx}i5n
z7hs!KlDb7{Zb5;TQa)vi4eTcFy0q%UPb)y`HZ5<d?_rVizzccU4pr1}o`Ui@Ttppl
zK>6Ht7$qBBbmlsijJaBTfjuv6X6;cKJ`=17(yunt4&~>>+4XX6E<mkiO<=SB32F1(
zwiBK?%;(*6Z_*$j?%z!MUQ>1<dh;3d?ho|Nn(Xa)#Lrr<K3uS~`MJOqT;8^OTRf<v
z1#SpsBv{B^&zK7xdL^YjZb#y`Q@_n}p3*dfsR$bmCkzhewsVhJWHDPhEAj=d1>H_?
z&+G~{uP%M*D?w2%z>aAhV_R119LoDJJ$9s~@-wXFGt6uMJ~=k{BJ=l)+ju{ZC7e#t
zBE!ZfF+n4~4Rh2jdRiXew_TkTBK#0JjcMEW=#(Aoj@zo7uuAQKnp(oOzu0xtnK=hE
zoz<Ik!JzDCo4#txLBYm>oq7rRf-TGkS7`3pS^9+>SW7=~jAtkP6J7L!<A$y4U;M^6
F_do8EQfdGI

literal 0
HcmV?d00001

diff --git a/integrations/openai-plugin/mcp.json b/integrations/openai-plugin/mcp.json
new file mode 100644
index 00000000..609a84d6
--- /dev/null
+++ b/integrations/openai-plugin/mcp.json
@@ -0,0 +1,9 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json",
+  "mcpServers": {
+    "skilld": {
+      "type": "streamable-http",
+      "url": "https://skilld.dev/api/mcp"
+    }
+  }
+}
diff --git a/integrations/openai-plugin/plugin.json b/integrations/openai-plugin/plugin.json
new file mode 100644
index 00000000..742647c0
--- /dev/null
+++ b/integrations/openai-plugin/plugin.json
@@ -0,0 +1,96 @@
+{
+  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
+  "name": "skilld",
+  "version": "1.0.0",
+  "description": "Search skilld.dev, a curated registry of agent skills, read who wrote each skill, and get the command that runs it.",
+  "author": {
+    "name": "Harlan Wilton",
+    "email": "harlan@harlanzw.com",
+    "url": "https://skilld.dev"
+  },
+  "homepage": "https://skilld.dev/developers?setup=mcp",
+  "repository": "https://github.com/skilld-dev/skilld.dev",
+  "license": "MIT",
+  "keywords": ["agent skills", "SKILL.md", "coding agents", "codex", "developer tools"],
+  "extensions": {
+    "com.openai": {
+      "interface": {
+        "displayName": "skilld",
+        "shortDescription": "Curated agent skills by humans",
+        "longDescription": "skilld searches skilld.dev, a curated registry of agent skills. A skill is a SKILL.md file that a maintainer writes in their own GitHub repository. It teaches a coding agent how to use a library, a framework, or a workflow.\n\nAsk for a skill by topic, such as Tailwind CSS, Nuxt, or database migrations. skilld returns the matching skills with their author, source repository, GitHub star count, and skilld.dev page. For one skill, it shows the exact SKILL.md and commit on GitHub, when the skill last changed, and the full skill text, so you can read a skill before you run it. It also opens curated collections, where a curator explains why each skill is in the set.\n\nEvery skill comes with its commands. npx skilld run gives the skill to a coding agent for one session and writes no files. npx skilld install keeps the skill in a project. skilld runs and installs nothing itself. You run the command in your own terminal or coding agent.\n\nskilld needs no account and reads public registry data only.",
+        "developerName": "Harlan Wilton",
+        "category": "Developer Tools",
+        "capabilities": ["Search agent skills", "Show skill provenance and source", "Open curated collections", "Return run and install commands"],
+        "websiteURL": "https://skilld.dev",
+        "supportURL": "https://github.com/skilld-dev/skilld.dev/issues",
+        "privacyPolicyURL": "https://skilld.dev/privacy",
+        "termsOfServiceURL": "https://skilld.dev/terms",
+        "defaultPrompt": [
+          "Find a skill for Tailwind CSS and give me the run command.",
+          "Who wrote the web-design-guidelines skill, and when did it last change?",
+          "What is in the Agent builder essentials collection on skilld?"
+        ],
+        "brandColor": "#E11D48",
+        "brandColorDark": "#FB7185",
+        "composerIcon": "./assets/logo.png",
+        "logo": "./assets/logo.png"
+      },
+      "review": {
+        "test_cases": {
+          "positive": [
+            {
+              "description": "Search skills by topic",
+              "prompt": "Find a skill for Tailwind CSS.",
+              "tools_triggered": "search_skills",
+              "expected_behavior": "Lists Tailwind CSS skills from skilld.dev. Each result names the skill, its GitHub owner and repository, and its GitHub star count, with a skilld.dev page link and an npx skilld run command."
+            },
+            {
+              "description": "Show who wrote a skill and when it changed",
+              "prompt": "Who wrote the web-design-guidelines skill in vercel-labs/agent-skills, and when did it last change?",
+              "tools_triggered": "get_skill",
+              "expected_behavior": "Names Vercel Labs as the publisher. Links the SKILL.md file on GitHub and gives its commit, the last repository push date, and the last skill change date."
+            },
+            {
+              "description": "Read a skill before running it",
+              "prompt": "Show me the SKILL.md of vercel-labs/agent-skills/web-design-guidelines before I run it.",
+              "tools_triggered": "get_skill",
+              "expected_behavior": "Returns the SKILL.md text with a link to its source file on GitHub, and the npx skilld run command for the skill."
+            },
+            {
+              "description": "Open a curated collection",
+              "prompt": "What is in the agent-building-stack collection by harlan-zw on skilld?",
+              "tools_triggered": "get_collection",
+              "expected_behavior": "Returns the Agent builder essentials collection: its skills, the curator's reason for each skill, and the npx skilld add @harlan-zw/agent-building-stack command that installs the whole collection."
+            },
+            {
+              "description": "Get the run command for one skill",
+              "prompt": "Give me the command to try anthropics/skills/skill-creator without installing it.",
+              "tools_triggered": "install_command",
+              "expected_behavior": "Returns npx skilld run anthropics/skills/skill-creator and says that it writes no files. Offers npx skilld install anthropics/skills/skill-creator to keep the skill. States that the user runs the command, and does not claim that anything ran."
+            }
+          ],
+          "negative": [
+            {
+              "description": "Generate a new skill. skilld indexes skills that maintainers wrote and does not write skills.",
+              "prompt": "Write a new SKILL.md for my React project and publish it on skilld."
+            },
+            {
+              "description": "Change registry data. Every skilld tool is read only.",
+              "prompt": "Delete the tailwind skill from skilld.dev."
+            },
+            {
+              "description": "A request unrelated to agent skills. skilld should not be called.",
+              "prompt": "What is the weather in Sydney today?"
+            }
+          ]
+        },
+        "commerce": false,
+        "commerce_description": "skilld sells nothing and processes no payments."
+      },
+      "publication": {
+        "countries": [],
+        "release_notes": "First release. Search skilld.dev for agent skills, show who wrote each skill and where its source lives, open curated collections, and return run and install commands."
+      }
+    }
+  }
+}
diff --git a/layers/marketing/app/pages/developers.vue b/layers/marketing/app/pages/developers.vue
index 6c8b436d..b29752ef 100644
--- a/layers/marketing/app/pages/developers.vue
+++ b/layers/marketing/app/pages/developers.vue
@@ -6,6 +6,7 @@ import {
   API_OPENAPI_PATH,
   apiSamples,
   apiSnippets,
+  claudeConnectorUrl,
   cursorInstallUrl,
   mcpApps,
   setupModes,
@@ -220,11 +221,19 @@ const uiClass = 'font-medium text-default'
               </template>
 
               <template v-else-if="app === 'claude'">
-                <ol class="list-decimal space-y-2 pl-5">
-                  <li>Open <a href="https://claude.ai/customize/connectors" target="_blank" rel="noopener" :class="uiClass" class="underline underline-offset-2">Customize &gt; Connectors</a> in claude.ai or the Claude desktop app.</li>
-                  <li>Select <strong :class="uiClass">Add custom connector</strong>. Name it skilld and paste the server URL. If Claude asks about authentication, choose <strong :class="uiClass">No sign-in</strong>.</li>
-                  <li>In a chat, open the <strong :class="uiClass">+</strong> menu, select <strong :class="uiClass">Connectors</strong>, and check that skilld is on.</li>
-                </ol>
+                <UButton
+                  :to="claudeConnectorUrl()"
+                  external
+                  label="Add to Claude"
+                  icon="i-lucide-external-link"
+                  class="min-h-11 hover:bg-primary-600 active:bg-primary-700"
+                />
+                <p class="mt-5">
+                  Claude opens the <strong :class="uiClass">Add custom connector</strong> dialog with skilld filled in. Check the name and the server URL, then confirm. In a chat, open the <strong :class="uiClass">+</strong> menu, select <strong :class="uiClass">Connectors</strong>, and check that skilld is on.
+                </p>
+                <p class="mt-4">
+                  Or open <a href="https://claude.ai/customize/connectors" target="_blank" rel="noopener" :class="uiClass" class="underline underline-offset-2">Customize &gt; Connectors</a> in claude.ai or the Claude desktop app. Select <strong :class="uiClass">Add custom connector</strong>, name it skilld, and paste the server URL.
+                </p>
                 <p class="mt-4">
                   Every plan can add a custom connector. The Free plan allows one. On a Team or Enterprise plan, an Owner adds it for the organization first.
                   <a href="https://claude.com/docs/connectors/custom/add-unlisted" target="_blank" rel="noopener" class="underline underline-offset-2 hover:text-default">Read Anthropic's guide</a>.
diff --git a/layers/marketing/app/pages/terms.vue b/layers/marketing/app/pages/terms.vue
new file mode 100644
index 00000000..a75dce2e
--- /dev/null
+++ b/layers/marketing/app/pages/terms.vue
@@ -0,0 +1,11 @@
+<script setup lang="ts">
+const { data } = await useMarketingArticle({
+  collection: 'pages',
+  path: '/terms',
+  canonicalPath: '/terms',
+})
+</script>
+
+<template>
+  <MarketingArticle v-if="data" :page="data" />
+</template>
diff --git a/layers/marketing/app/utils/developer-setup.ts b/layers/marketing/app/utils/developer-setup.ts
index ab48fc42..2a1ef335 100644
--- a/layers/marketing/app/utils/developer-setup.ts
+++ b/layers/marketing/app/utils/developer-setup.ts
@@ -42,6 +42,15 @@ export function cursorInstallUrl(url: string = REGISTRY_MCP_URL): string {
   return `cursor://anysphere.cursor-deeplink/mcp/install?name=${SERVER_NAME}&config=${encodeURIComponent(config)}`
 }
 
+/**
+ * Claude's link opens its Add custom connector dialog with the name and URL
+ * filled in. The user still confirms before Claude adds anything.
+ */
+export function claudeConnectorUrl(url: string = REGISTRY_MCP_URL): string {
+  const query = new URLSearchParams({ modal: 'add-custom-connector', connectorName: SERVER_NAME, connectorUrl: url })
+  return `https://claude.ai/customize/connectors?${query}`
+}
+
 /** VS Code's install link carries the whole server entry as URI-encoded JSON. */
 export function vscodeInstallUrl(url: string = REGISTRY_MCP_URL): string {
   return `vscode:mcp/install?${encodeURIComponent(vscodeServerJson(url))}`
diff --git a/layers/marketing/app/utils/page-admissions.ts b/layers/marketing/app/utils/page-admissions.ts
index 7fa1d897..d491b49b 100644
--- a/layers/marketing/app/utils/page-admissions.ts
+++ b/layers/marketing/app/utils/page-admissions.ts
@@ -45,6 +45,7 @@ export const FREEZE_AUDIT_PATHS: readonly string[] = [
   '/developers',
   '/skillgen',
   '/privacy',
+  '/terms',
   '/learn/private-repositories',
   '/learn/create-agent-skills',
   '/learn/author-project-skills',
diff --git a/layers/marketing/content/pages/privacy.md b/layers/marketing/content/pages/privacy.md
index 14e04fb4..5d1f1f0c 100644
--- a/layers/marketing/content/pages/privacy.md
+++ b/layers/marketing/content/pages/privacy.md
@@ -1,8 +1,8 @@
 ---
 title: Privacy
 description: What skilld.dev stores, why it needs the data, how long it keeps it, and how you delete your account.
-label: Last updated 6 October 2026
-updatedAt: 2026-10-06
+label: Last updated 7 October 2026
+updatedAt: 2026-10-07
 ---
 
 ## In short
@@ -12,6 +12,7 @@ updatedAt: 2026-10-06
 - An account is optional. You sign in with [GitHub](https://github.com) to like Skills, watch Repositories, get email, or connect the skilld CLI.
 - You can delete your account from your dashboard at any time.
 - The skilld CLI sends no telemetry.
+- The MCP server for [ChatGPT](https://chatgpt.com), Claude, and other MCP apps needs no account. It receives only what each tool needs, such as your search text.
 
 ## When you visit
 
@@ -125,6 +126,21 @@ When you sign in with the CLI, skilld stores a record for that token:
 
 If the client sends your operating system and processor type, such as `darwin-arm64`, device sign-in records it. The sign-in page shows it, so you can check which machine asks for access. You can revoke a device in your [dashboard](/me/devices).
 
+## The MCP server
+
+ChatGPT, Claude, and other MCP apps can search skilld.dev through its MCP server at `https://skilld.dev/api/mcp`. The server needs no account and sets no cookie. Every tool is read only.
+
+When your chat app calls a tool, skilld receives what that tool needs:
+
+- `search_skills` receives your search text and a result count.
+- `get_skill` receives the owner, Repository, and name of one Skill.
+- `get_collection` receives a curator login and a collection slug.
+- `install_command` receives one Skill, Repository, or collection reference.
+
+skilld receives no chat history, no files from the chat, and no account details from the chat app. ChatGPT and Claude call the server from OpenAI or Anthropic servers, so skilld sees their IP address, not yours. Apps on your computer, such as Claude Code or Cursor, call it from your network. Rate limits count requests per IP address, and skilld stores no IP address.
+
+Search text goes to Workers AI, as [Search](#when-you-visit-search) describes. Request logs follow the rules under [When you visit](#when-you-visit). OpenAI and Anthropic handle your chat under their own privacy policies.
+
 ## Error reports
 
 skilld uses [Sentry](https://sentry.io) to find and fix errors.
@@ -171,4 +187,4 @@ Skills in your public Repositories stay in the registry, because GitHub is their
 
 ## Contact
 
-Email [harlan@harlanzw.com](mailto:harlan@harlanzw.com) with questions about your data. To report a security problem, use [GitHub private vulnerability reporting](https://github.com/skilld-dev/skilld/security/advisories/new).
+Harlan Wilton runs skilld.dev. Email [harlan@harlanzw.com](mailto:harlan@harlanzw.com) with questions about your data. To report a security problem, use [GitHub private vulnerability reporting](https://github.com/skilld-dev/skilld/security/advisories/new).
diff --git a/layers/marketing/content/pages/terms.md b/layers/marketing/content/pages/terms.md
new file mode 100644
index 00000000..b9908467
--- /dev/null
+++ b/layers/marketing/content/pages/terms.md
@@ -0,0 +1,68 @@
+---
+title: Terms
+description: The terms for skilld.dev, the skilld MCP server, the skilld API, and skilld email.
+label: Last updated 7 October 2026
+updatedAt: 2026-10-07
+---
+
+## In short
+
+- skilld.dev is free. It has no paid plan, no ads, and no paid placement.
+- Each Skill belongs to its author. skilld.dev links every Skill to its source on [GitHub](https://github.com).
+- Read a Skill before you run it. skilld does not check that a Skill is safe.
+- skilld.dev comes with no warranty.
+
+## Who runs skilld
+
+Harlan Wilton runs skilld.dev. These terms cover skilld.dev, the skilld MCP server at `https://skilld.dev/api/mcp`, the skilld API, and the email that skilld sends. If you use any of them, you accept these terms.
+
+The skilld CLI is open source under the [MIT License](https://github.com/skilld-dev/skilld/blob/main/LICENSE). That license covers the CLI code.
+
+## Skills and their authors
+
+- Each Skill stays in its author's GitHub Repository. The author owns it, and the license in that Repository applies to it.
+- skilld.dev shows the text of a Skill as its author wrote it, with a link to the source file.
+- Search summaries and tags on skilld.dev are machine-generated. skilld labels them as generated.
+- If you own a Repository and want its Skills removed from skilld.dev, [open an issue](https://github.com/skilld-dev/skilld.dev/issues) or email the address below.
+
+## Running a Skill
+
+A Skill gives instructions to your Agent. Your Agent can then run commands, change files, or fetch content.
+
+- Read a Skill before you run or install it. Every Skill page links the exact `SKILL.md`.
+- Trust labels on skilld.dev say where a Skill comes from. They do not say that a Skill is safe.
+- You are responsible for what your Agent does when it follows a Skill.
+
+## The MCP server and the API
+
+The MCP server lets [ChatGPT](https://chatgpt.com), Claude, and other MCP apps search the registry. It returns search results and commands as text. It runs nothing and installs nothing.
+
+The skilld API serves the same registry to scripts and to the skilld CLI. Account operations need a skilld token.
+
+skilld can change, limit, or stop the MCP server or the API. Both have rate limits. If a client sends too many requests, it gets an error until the limit resets.
+
+## Your account
+
+- You sign in with GitHub, so GitHub's terms also apply to your account.
+- Collections are public. You are responsible for the names and descriptions you give them.
+- You can delete your account at any time from your [dashboard](/me). The [privacy page](/privacy) lists what that deletes.
+- skilld can suspend an account that breaks these terms.
+
+## What you must not do
+
+- Do not send requests at a rate that harms the service, or try to get around a rate limit.
+- Do not try to get access to another person's account or data.
+- Do not use skilld to spread malware, spam, or content that is illegal where you live.
+- Do not use skilld to make a person or an organization look like the author of a Skill they did not write.
+
+## No warranty
+
+skilld provides skilld.dev, the MCP server, and the API "as is", with no warranty of any kind. To the extent the law allows, Harlan Wilton is not liable for any loss that comes from your use of skilld, of a Skill, or of a command that skilld prints. If the law where you live does not allow these limits, they apply as far as that law allows.
+
+## Changes to these terms
+
+skilld can change these terms. The date at the top shows the last change. If you keep using skilld after a change, you accept the new terms.
+
+## Contact
+
+Email [harlan@harlanzw.com](mailto:harlan@harlanzw.com) with questions about these terms. For help with skilld.dev or the MCP server, [open an issue](https://github.com/skilld-dev/skilld.dev/issues).
diff --git a/layers/marketing/nuxt.config.ts b/layers/marketing/nuxt.config.ts
index f5c07df2..c9c2ba0f 100644
--- a/layers/marketing/nuxt.config.ts
+++ b/layers/marketing/nuxt.config.ts
@@ -1,6 +1,6 @@
 // Marketing layer: SEO content. Owns /skills (marketing index), /skills/guide,
 // /skills/trending, /skills/official, /skills/stats, /frameworks/*,
-// /accessibility, /privacy, /compare/*.
+// /accessibility, /privacy, /terms, /compare/*.
 // See docs/adr/0001-url-pillars-and-layers.md
 export default defineNuxtConfig({
   modules: ['@harlan-zw/comark-content'],
diff --git a/layers/mcp/server/mcp/index.ts b/layers/mcp/server/mcp/index.ts
index 2f87c52b..1b711813 100644
--- a/layers/mcp/server/mcp/index.ts
+++ b/layers/mcp/server/mcp/index.ts
@@ -7,7 +7,7 @@ const MAX_MCP_BODY_BYTES = 64 * 1024
 
 export default defineMcpHandler({
   description: 'Search skilld.dev for agent skills and curated collections.',
-  instructions: 'Start with search_skills, inspect provenance with get_skill, then return an install command for the user to approve and run.',
+  instructions: 'Search first, inspect provenance before recommending a skill, then return the run command for the user to approve and run. Offer the install command only when the user wants the skill in every session. This server never runs or installs anything.',
   tools: (event) => {
     const deps: McpToolDeps = {
       fetchApi: (input: string, options: RequestInit) => {
@@ -18,6 +18,7 @@ export default defineMcpHandler({
     }
     return mcpTools.map(tool => defineMcpTool({
       name: tool.name,
+      title: tool.title,
       description: tool.description,
       inputSchema: tool.inputSchema,
       annotations: tool.annotations,
diff --git a/layers/mcp/server/routes/.well-known/openai-apps-challenge.get.ts b/layers/mcp/server/routes/.well-known/openai-apps-challenge.get.ts
new file mode 100644
index 00000000..9c29cdad
--- /dev/null
+++ b/layers/mcp/server/routes/.well-known/openai-apps-challenge.get.ts
@@ -0,0 +1,10 @@
+// The OpenAI plugin portal proves that we own skilld.dev before it connects
+// the MCP server. It reads this URL and expects the exact token as plain text.
+export default defineEventHandler((event) => {
+  const token = useRuntimeConfig(event).openaiAppsChallenge
+  if (!token)
+    throw createError({ statusCode: 404, statusMessage: 'No OpenAI domain challenge is set' })
+  setHeader(event, 'content-type', 'text/plain; charset=utf-8')
+  setHeader(event, 'cache-control', 'no-store')
+  return token
+})
diff --git a/layers/mcp/shared/mcp-tools.ts b/layers/mcp/shared/mcp-tools.ts
index c7d95b8f..2f525c2e 100644
--- a/layers/mcp/shared/mcp-tools.ts
+++ b/layers/mcp/shared/mcp-tools.ts
@@ -1,4 +1,5 @@
-import type { FetchImplementation, Result, SkilldFailure } from 'skilld-sdk'
+import type { FetchImplementation, OperationOutput, Result, SkilldFailure } from 'skilld-sdk'
+import type { skillsV1 } from 'skilld-sdk/contract'
 import { createSkilldClient } from 'skilld-sdk'
 import { z } from 'zod'
 import {
@@ -8,6 +9,8 @@ import {
 } from './mcp-install-command'
 
 const MAX_RESULT_CHARS = 48_000
+/** Skill pages live on the public site, whatever API origin the tools call. */
+const SITE_ORIGIN = 'https://skilld.dev'
 /**
  * One spelling for every place an agent reads the accepted refs: the tool
  * description, the input schema, and the unrecognized-ref failure.
@@ -50,6 +53,8 @@ export interface McpToolAnnotations {
 
 export interface McpTool {
   name: string
+  /** Human-readable name. Claude and ChatGPT show it in the tool list and the approval prompt. */
+  title: string
   description: string
   inputSchema: Record<string, z.ZodType>
   annotations: McpToolAnnotations
@@ -101,6 +106,25 @@ function presentResult(
   return fail(`${operation} failed. Try again later.`)
 }
 
+/**
+ * The search answer names each Skill by its source only. Every result also
+ * links its Skill page, so provenance is one click away (VISION principle 1).
+ * The long path answers 301 to the canonical page of a one-Skill repository.
+ */
+function withSkillLinks(answer: OperationOutput<typeof skillsV1.operations.search>): Record<string, unknown> {
+  return {
+    ...answer,
+    items: answer.items.map((item) => {
+      const { owner, repository, selector } = item.source
+      return {
+        ...item,
+        pageUrl: `${SITE_ORIGIN}/gh/${owner}/${repository}/${selector.name}`,
+        runCommand: skillRunCommand(owner, repository, selector.name),
+      }
+    }),
+  }
+}
+
 // --- tools ---
 
 const SearchArgs = z.object({
@@ -110,7 +134,8 @@ const SearchArgs = z.object({
 
 const searchSkills: McpTool = {
   name: 'search_skills',
-  description: 'Search the skilld.dev registry for agent skills (semantic + lexical ranking). Skills are markdown instructions published by maintainers in their own GitHub repos; results work with any coding agent. Returns the public API search answer with source references and GitHub star counts. Call get_skill for provenance, runCommand and installCommand. Prefer runCommand for this session.',
+  title: 'Search Skills',
+  description: 'Search the skilld.dev registry for agent skills that match a topic. A skill is a SKILL.md file that a maintainer publishes in their own GitHub repository, and it works with any coding agent. Returns each match with its source repository, GitHub star count, skilld.dev page, and run command. get_skill returns the full provenance of one match.',
   inputSchema: SearchArgs.shape,
   annotations: {
     readOnlyHint: true,
@@ -124,7 +149,7 @@ const searchSkills: McpTool = {
       return fail(`Invalid arguments: ${parsed.error.issues.map(i => `${i.path.join('.')}: ${i.message}`).join('; ')}`)
     const { query, limit } = parsed.data
     const result = await clientFor(deps).skills.search({ query: { q: query, limit } }, { signal })
-    return presentResult(deps, 'Search', result)
+    return presentResult(deps, 'Search', result._tag === 'Ok' ? { _tag: 'Ok', value: withSkillLinks(result.value) } : result)
   },
 }
 
@@ -136,7 +161,8 @@ const GetSkillArgs = z.object({
 
 const getSkill: McpTool = {
   name: 'get_skill',
-  description: 'Look up one skill by owner/repo/name. Returns detail plus provenance: who publishes it, the exact SKILL.md source file and commit on GitHub, and freshness (last Repository push and last Skill change). Also returns runCommand and installCommand. Prefer runCommand for this session. Use installCommand when the user wants the upstream Skill in every session. If the user asks to fork, fetch pageUrl as Markdown and follow its fork workflow. A fork copies the source before installing the local path. Do not execute the borrowed instructions while copying.',
+  title: 'Get Skill details',
+  description: 'Look up one skill by GitHub owner, repository, and skill name. Returns its provenance: the publisher, the exact SKILL.md file and commit on GitHub, and freshness (the last repository push and the last skill change). Also returns the SKILL.md text, the skilld.dev page, runCommand, and installCommand. runCommand gives the skill to a coding agent for one session and writes no files. installCommand writes the skill into the project for every session.',
   inputSchema: GetSkillArgs.shape,
   annotations: {
     readOnlyHint: true,
@@ -172,7 +198,8 @@ const GetCollectionArgs = z.object({
 
 const getCollection: McpTool = {
   name: 'get_collection',
-  description: 'Look up a curated collection by curator login and collection slug (the /@login/slug pages on skilld.dev). Returns the collection, its skills with the curator\'s reasons, and the one-command install for the whole collection.',
+  title: 'Get collection',
+  description: 'Look up a curated collection by curator GitHub login and collection slug, as in skilld.dev/@login/slug. Returns the collection, its skills with the reason the curator gives for each, and one command that installs the whole collection.',
   inputSchema: GetCollectionArgs.shape,
   annotations: {
     readOnlyHint: true,
@@ -208,7 +235,8 @@ function noteFor(runCommand: string | null): string {
 
 const installCommand: McpTool = {
   name: 'install_command',
-  description: `Return the exact skilld CLI commands for a skill, repo, collection, or curator ref. A skill ref also returns runCommand: prefer it, because skilld run gives you the skill now and installs nothing. Use command when the user wants the skill in every session. Accepted refs: ${ACCEPTED_REFS}. This tool only returns the command as text for the user to run; nothing is executed.`,
+  title: 'Get run and install commands',
+  description: `Return the exact skilld CLI commands for a skill, repository, collection, or curator ref. For a single skill, runCommand gives the skill to a coding agent for one session and writes no files. command installs the skills into the project. Accepted refs: ${ACCEPTED_REFS}. This tool returns text only. It runs and installs nothing.`,
   inputSchema: InstallCommandArgs.shape,
   annotations: {
     readOnlyHint: true,
diff --git a/nuxt.config.ts b/nuxt.config.ts
index 6e1d5d49..a22db4f4 100644
--- a/nuxt.config.ts
+++ b/nuxt.config.ts
@@ -366,6 +366,11 @@ export default defineNuxtConfig({
     instructions: 'Search first, inspect provenance before recommending a skill, then return the run command for the user to approve and run. Offer the install command only when the user wants the skill in every session. This server never runs or installs anything.',
     sessions: false,
     browserRedirect: '/',
+    // The toolkit rejects a request whose Origin header is another site. Server-side
+    // clients send none. The Claude and ChatGPT web apps may, so they are listed.
+    security: {
+      allowedOrigins: ['https://skilld.dev', 'https://claude.ai', 'https://claude.com', 'https://chatgpt.com', 'https://chat.openai.com'],
+    },
   },
 
   app: {
@@ -419,6 +424,10 @@ export default defineNuxtConfig({
     // Shared with the skill-harness Worker as SKILLGEN_SITE_TOKEN. It reads Skillgen opt-ins.
     skillgenToken: '',
     publicSiteUrl: 'https://skilld.dev',
+    // The OpenAI plugin portal's domain-verification token. Set the Worker
+    // secret NUXT_OPENAI_APPS_CHALLENGE. /.well-known/openai-apps-challenge
+    // serves it, and answers 404 while it is empty.
+    openaiAppsChallenge: '',
     // Task search, the search box's opt-in model answer. Set the Worker
     // variable NUXT_TASK_SEARCH_ENABLED=false to switch it off without a
     // deploy. The budget is micro-dollars per UTC day across every visitor:
diff --git a/test/unit/developer-setup.test.ts b/test/unit/developer-setup.test.ts
index 8efae524..2181f27c 100644
--- a/test/unit/developer-setup.test.ts
+++ b/test/unit/developer-setup.test.ts
@@ -3,9 +3,17 @@ import type { ApiSampleCall } from '../../layers/marketing/app/utils/developer-s
 import { createSkilldClient } from 'skilld-sdk'
 import { skilldV1Protocol } from 'skilld-sdk/contract'
 import { describe, expect, it } from 'vitest'
-import { apiSampleCalls, curlCall, cursorInstallUrl, vscodeInstallUrl } from '../../layers/marketing/app/utils/developer-setup'
+import { apiSampleCalls, claudeConnectorUrl, curlCall, cursorInstallUrl, vscodeInstallUrl } from '../../layers/marketing/app/utils/developer-setup'
 
 describe('mCP install links', () => {
+  it('opens Claude\'s custom connector dialog with the skilld name and the server URL', () => {
+    const link = new URL(claudeConnectorUrl('https://example.test/api/mcp?x=1'))
+    expect(`${link.origin}${link.pathname}`).toBe('https://claude.ai/customize/connectors')
+    expect(link.searchParams.get('modal')).toBe('add-custom-connector')
+    expect(link.searchParams.get('connectorName')).toBe('skilld')
+    expect(link.searchParams.get('connectorUrl')).toBe('https://example.test/api/mcp?x=1')
+  })
+
   it('gives Cursor the server URL as base64 JSON under the skilld name', () => {
     const link = new URL(cursorInstallUrl('https://example.test/api/mcp?x=1'))
     expect(`${link.protocol}//${link.host}${link.pathname}`).toBe('cursor://anysphere.cursor-deeplink/mcp/install')
diff --git a/test/unit/mcp-discovery.test.ts b/test/unit/mcp-discovery.test.ts
index 8e82c414..3f294bc3 100644
--- a/test/unit/mcp-discovery.test.ts
+++ b/test/unit/mcp-discovery.test.ts
@@ -34,8 +34,16 @@ describe('mCP public SDK discovery', () => {
 
     const result = await runTool('search_skills', { query: 'tailwind', limit: 1 }, deps(fetchApi), signal)
 
-    expect(result.structuredContent).toEqual(response)
-    expect(JSON.parse(result.content[0]!.text)).toEqual(response)
+    const linked = {
+      ...response,
+      items: response.items.map(item => ({
+        ...item,
+        pageUrl: `https://skilld.dev/gh/${item.source.owner}/${item.source.repository}/${item.source.selector.name}`,
+        runCommand: `npx skilld run ${item.source.owner}/${item.source.repository}/${item.source.selector.name}`,
+      })),
+    }
+    expect(result.structuredContent).toEqual(linked)
+    expect(JSON.parse(result.content[0]!.text)).toEqual(linked)
     const [input, options] = fetchApi.mock.calls[0]!
     const url = new URL(input)
     expect(url.pathname).toBe('/api/v1/skills')