Create an agent plugin
Creates a tenant agent plugin for a component, MCP server, or skill provider using the normalized plugin definition contract.
Authorizations
Bearer JWT token or API Key (sk-*).
Body
Stable plugin id used by the agent runtime.
1Operator-facing plugin name.
1Component id executed when this tool plugin runs. Required for tools plugins and forbidden for MCP server plugins.
1Plugin execution provider kind.
tools, mcp_server, skill, package Optional plugin description.
Canonical English capability metadata used for tool selection. Operator-facing content may remain localized.
Optional plugin category used for search, grouping, and operator organization.
Optional resource metadata. Values may use any JSON type. Maximum 16 KiB and 64 top-level keys. Top-level keys starting with "__" are reserved for backend use.
Optional upstream identifier used to track the source plugin when this registry entry is a tenant-local clone.
Execution mode expected for the plugin provider.
sync, background Optional fixed component version for tools plugins. Forbidden for MCP server plugins.
x >= 0Multiple governed tool contracts backed by the same component implementation. Forbidden for MCP server and skill plugins.
Remote MCP server configuration. Required for MCP server plugins and forbidden for tools plugins.
Per-tool MCP governance and loading configuration used for MCP server plugins. Forbidden for tools plugins.
Markdown skill configuration. Required for skill plugins and forbidden for tools or MCP plugins.
Markdown package manifest. Required for package plugins and forbidden for tools, MCP, and skill plugins.
Provider source recorded for discovery, auditability, and telemetry.
tenant_plugin, community_plugin Strict structured input schema exposed to discovery and runtime validation for tools plugins. Forbidden for MCP server plugins. Must be an object schema with additionalProperties=false and descriptions on every declared property.
Structured output schema expected from the provider for tools plugins. Forbidden for MCP server plugins.
Approval contract enforced before execution.
Declared mutation intent used for governance and approval safety.
read, write, destructive, external Declared reversibility of the plugin side effects.
reversible, operator_reversible, irreversible, unknown Primary runtime scope impacted when the plugin executes.
assistant_thread, agent, tenant, external Concise side-effect declaration recorded in approval, evidence, and audit surfaces.
Normalized side-effect categories used for governance and operator review.
Maximum runtime in milliseconds.
x >= 100030000
Maximum serialized result size in bytes.
x >= 512Whether the plugin should be surfaced as summary-only discovery context for agents and assistant threads before explicit attachment.
Whether the plugin may be attached and used by agents or assistants at runtime.

