Add CodeRifts plugin (API governance MCP server + skill) - #519
Open
zsobpeter-code wants to merge 1 commit into
Open
Add CodeRifts plugin (API governance MCP server + skill)#519zsobpeter-code wants to merge 1 commit into
zsobpeter-code wants to merge 1 commit into
Conversation
* feat(sentry): point to plugin-grok dist repo and bump to latest SHA (xai-org#46) * Add contribution guide and PR template (xai-org#51) Documents the plugin submission process for external contributors: catalog entry + SHA pinning, local validation, requirements checklist, source-legitimacy tips (use your official org, brand-scoped keywords/domains for the plugin CTA), security expectations, what review checks, and common rejection reasons. PR template mirrors the checklist. Manifest references use .grok-plugin/plugin.json (.claude-plugin accepted). * Add Firecrawl plugin (xai-org#30) * Add Firecrawl plugin to the marketplace Adds Firecrawl (web scraping, search, crawl, map, and extraction) as a development-category plugin. - source: url pin to firecrawl/firecrawl-grok-plugin - the bundled hosted Firecrawl MCP server (https://mcp.firecrawl.dev/v2/mcp, type "http", browser-OAuth — no API key to paste) is the primary execution path; the CLI skills are the fallback - keywords scoped to the brand ("firecrawl", "fire crawl") so the plugin CTA doesn't fire on generic scrape/crawl/extract requests - regenerated .grok-plugin/plugin-index.json validate-catalog.py and generate-plugin-index.py --check both pass. * Firecrawl: reflect keyless option in the catalog description Update the description to state the plugin works keyless on eligible networks (1,000 free credits/month, no signup), with an optional free API key for more usage — replacing the prior browser-OAuth wording. Honest about the IP-reputation gate ("eligible networks") rather than promising no key is ever needed. Single-field change; SHA/index untouched. * scripts: support subdir `path` on url marketplace sources (xai-org#60) Catalog tooling only — no plugin entries change. - generate-plugin-index.py: when a url source has a `path`, scan the pinned clone at that subdirectory (via the existing resolve_inside traversal guard) instead of the repo root. - validate-catalog.py: validate that a url source `path`, when present, is a safe relative subdirectory (rejects leading '/', '..', backslashes, empty). Unblocks vendors shipping multiple plugins from one repo under subdirectories (each becomes its own catalog entry: same repo + sha, different path). Runtime support (scan -> install -> load -> update at the subdir) is in xai-org/xai#224389. No-op for existing path-less entries: generate-plugin-index.py --check is clean. * Add axiom plugin to marketplace catalog (xai-org#22) * Add axiom plugin to marketplace catalog * Update .grok-plugin/marketplace.json Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> --------- Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * feat(axiom): bump skills SHA and add MCP to plugin index (xai-org#61) Pins axiomhq/skills@0e98ebae which bundles the hosted Axiom MCP server alongside existing agent skills. * Add figma plugin (MCP server + skills) (xai-org#64) * Add figma plugin to marketplace catalog * Remove code connect from figma plugin keywords * Add pptx and docx default skills (xai-org#72) * Add pptx and docx default skills Add the pptx and docx document-authoring skills to the plugins directory. * fix(pptx,docx): register catalog CTAs and use skills/ layout Move skill content under skills/<name>/, add plugin manifests and READMEs, and register both plugins in marketplace.json with brand-scoped keywords so the inline install CTA can match. Regenerate plugin-index. * Mark vendored OOXML schemas and prebuilt templates in .gitattributes Collapse the third-party OOXML XSD schemas, prebuilt PPTX templates, and the generated taxonomy index in diffs so the ~15K lines of actual tooling and skill docs are reviewable instead of the full ~235K-line import. * Install docx/pptx via default-skills instead of catalog plugins --------- Co-authored-by: Akshey Deokule <akshey@x.ai> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * Add Railway plugin (xai-org#35) * Add railway plugin to marketplace catalog Adds the Railway deployment platform plugin (MCP server + use-railway skill) as a remote source pinned to railway-skills@aa1e055, which makes the repo root resolvable as a Grok plugin. Regenerated the component index. * Update Railway plugin SHA * Use Railway remote MCP * Pin Railway Grok-only MCP update * Pin all-plugin Railway MCP update * Pin CLI-first Railway skill update * Pin merged Railway skills SHA * Update Railway plugin SHA * Add version-gated daily plugin SHA bump automation (xai-org#88) * Add daily plugin SHA bump automation (7am Pacific) Nightly cron at 15:00 UTC (7am PST / 8am PDT) plus workflow_dispatch for manual runs. Opens one PR per stale url pin on bump/<name> and re-dispatches validate-catalog so the required check can land on GITHUB_TOKEN PRs. * Stack daily bump PRs: main <- daily <- per-plugin Open bump/daily-YYYY-MM-DD into main, then a linear stack of bump/YYYY-MM-DD/<plugin> PRs on top so main only lands once per day. * Fan out plugin bump PRs from daily base Each plugin branch is cut from bump/daily-YYYY-MM-DD and targets daily, so bumps review/merge independently without a linear restack. * Drop max_bumps cap from SHA bump automation Catalog is small enough to bump every stale url pin in one run. * Pass workflow_dispatch plugin input via env Avoids shell injection from interpolating ${{ inputs.* }} into run scripts. * Gate daily stack on remote branch; add --force rebuild If bump/daily-YYYY-MM-DD already exists on origin, no-op unless --force (or FORCE_BUMP). Force rebuilds from main and force-pushes daily + plugin branches. Also hard-reset between plugin bumps and re-dispatch validate after partial failures. * Share plugin extract path; gate pin bumps on version change Add plugin_catalog.extract_plugin (manifest version + components) used by index generation and the SHA bump bot. Index now records version; bumps only open when HEAD moved and version at HEAD differs from version at the current pin (pin HEAD at discovery time). * Version gate: skip when HEAD drops version; allow SHA-only bumps If pin has a version and HEAD does not, skip with a clear reason. If neither side has a version, still bump the pin (SHA is identity). * Harden bump job: pycache, base-branch reset, --only validation Ignore __pycache__ in dirty checks and disable bytecode in Actions. Reset to origin/<base> before discovery so dispatch-from-branch matches the stack base. Fail when --only names an unknown catalog plugin. * Run SHA bump workflow on ubuntu-latest-m (xai-org#92) Hosted ubuntu-latest is blocked by the org IP allow list on push; use the allowlisted runner label for the pin-sync job. * chore(plugins): daily pin bumps 2026-07-16 (xai-org#93) * chore(plugins): daily pin bumps 2026-07-16 * chore(plugins): bump vercel 0.42.1 -> 0.45.1 (61f1903 -> 4f86722) (xai-org#94) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump sentry 1.0.0 -> 1.2.0 (2c3b6c7 -> f6b4882) (xai-org#95) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump chrome-devtools 0.22.0 -> 1.6.0 (a1612be -> 77e1d3f) (xai-org#96) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump figma 2.2.68 -> 2.2.81 (bea8bea -> 07316dd) (xai-org#98) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump superpowers 5.1.0 -> 6.1.1 (6fd4507 -> d884ae0) (xai-org#97) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * Add Stripe plugin for Grok Build (xai-org#87) * Add Stripe plugin (Grok provider from stripe/ai) Remote url source with path providers/grok/plugin. Temporary SHA is the open stripe/ai#463 head so catalog generation works; replace with the merge commit SHA after that PR lands. * Keep catalog compact: stripe-only marketplace diff Drop accidental multi-line reformat of existing plugin keywords/domains. * Align Stripe catalog description with plugin.json Same wording as stripe/ai Grok provider review. * Regenerate plugin-index after rebase onto main Include Stripe entry with version from the new extract path so CI --check passes. * Pin Stripe to stripe/ai#463 merge commit Replace the temporary PR-head pin with cfc7296 after the Grok provider landed on stripe/ai main. Regenerate plugin-index at the new pin. * Remove default-skills (docx/pptx) (xai-org#101) Office skills now ship via the GCS subagent bundle, not marketplace auto-install. Drop the stale default-skills trees so this repo does not claim a delivery path that no longer works. * chore(plugins): daily pin bumps 2026-07-17 (xai-org#103) * chore(plugins): daily pin bumps 2026-07-17 * chore(plugins): bump stripe 0.1.0 -> 0.1.1 (cfc7296 -> 61df611) (xai-org#104) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-07-20 (xai-org#121) * chore(plugins): daily pin bumps 2026-07-20 * chore(plugins): bump stripe 0.1.1 -> 0.1.2 (61df611 -> c29cd23) (xai-org#122) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-07-21 (xai-org#127) * chore(plugins): daily pin bumps 2026-07-21 * chore(plugins): bump railway 1.3.5 -> 1.3.6 (2405547 -> 191601b) (xai-org#128) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump stripe 0.1.2 -> 0.2.0 (c29cd23 -> a326771) (xai-org#129) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Add Exa plugin — web search, content extraction, and deep research (xai-org#56) * Add Exa plugin — web search, content extraction, and deep research Adds the Exa plugin (exa-labs/exa-grok-plugin) as a remote source. Exa provides web search, content extraction, and structured research via its hosted MCP server. Skills: exa-search, exa-research, exa-fetch. Supports category filters (company, people, news, papers, financial reports), domain restrictions, date ranges, and highlights. Free plan available. No API key needed — authenticates via OAuth. * chore: update Exa plugin SHA after rework * chore: regenerate plugin index for reworked Exa plugin * fix: scope keywords to brand per reviewer convention * chore: regenerate plugin index after keyword fix * fix: update Exa plugin SHA after MCP endpoint fix The .mcp.json now includes ?tools= parameter to enable web_search_advanced_exa which is off by default. * chore: regenerate plugin index after SHA update * Revert unrelated formatting changes in marketplace.json, keep only the exa entry Co-Authored-By: Tanishq Jaiswal <tanishq.jaiswal97@gmail.com> * Re-pin exa plugin to OAuth rework, update description --------- Co-authored-by: Tanishq <10ishq@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * Add Tavily plugin to marketplace and plugin index (xai-org#106) * Add Tavily plugin to marketplace and plugin index * Introduced Tavily plugin for web search, content extraction, and research capabilities. * Updated marketplace.json to include Tavily with relevant details such as description, category, and keywords. * Enhanced plugin-index.json with Tavily's components and skills, including various research and extraction functionalities. * Version set to 1.0.0 and SHA pinned for stability. * Remove deprecated Tavily skills from plugin index to streamline functionality and improve clarity. * chore(plugins): daily pin bumps 2026-07-23 (xai-org#137) * chore(plugins): daily pin bumps 2026-07-23 * chore(plugins): bump stripe 0.2.0 -> 0.3.0 (a326771 -> 1b71f4b) (xai-org#138) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-07-24 (xai-org#142) * chore(plugins): daily pin bumps 2026-07-24 * chore(plugins): bump superpowers 6.1.1 -> 6.2.0 (d884ae0 -> 3dcbd5c) (xai-org#143) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump stripe 0.3.0 -> 0.3.1 (1b71f4b -> 84c364c) (xai-org#144) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Update exa plugin description and keywords (xai-org#139) * update exa plugin description and keywords * bump exa pin for tutorial command * keep keywords branded only * bump pin, branded keywords in plugin too * Add TinyFish plugin to marketplace and plugin index (xai-org#148) Web search, content extraction, and goal-driven browser automation via TinyFish's hosted MCP server. Remote source pinned to tinyfish-io/tinyfish-web-agent-integrations@89457fb (path: grok). Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * chore(plugins): daily pin bumps 2026-07-29 (xai-org#154) * chore(plugins): daily pin bumps 2026-07-29 * chore(plugins): bump stripe 0.3.1 -> 0.3.2 (84c364c -> 6f686d8) (xai-org#155) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-08-03 (xai-org#178) * chore(plugins): daily pin bumps 2026-08-03 * chore(plugins): bump stripe 0.3.2 -> 0.3.4 (6f686d8 -> 2ecd560) (xai-org#181) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump figma 2.2.81 -> 2.2.87 (07316dd -> ef474d1) (xai-org#180) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump vercel 0.45.1 -> 0.46.0 (4f86722 -> 1e821f3) (xai-org#179) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Add base44 plugin to marketplace catalog (xai-org#39) * Add base44 plugin to marketplace catalog Remote source pinned to base44/skills@aef0fa3. Bundles three skills (base44-cli, base44-sdk, base44-troubleshooter); no MCP server. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * Bump base44 pin to latest upstream main (7b301e2) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * Bump base44 pin to latest upstream main (0d3b72a) Advances the pin from 7b301e2 to 0d3b72a. Regenerated plugin-index.json picks up two additional skills: base44-remote-dev and base44-sandbox. Version is unchanged (1.0.0-beta.1). Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * Add wix plugin to marketplace catalog (xai-org#38) * Add wix plugin to marketplace catalog Remote source pinned to wix/skills@75bb86e. Bundles the Wix MCP server and four skills (wix-app, wix-design-system, wix-headless, wix-manage). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * Bump wix pin to latest upstream main (1ea953a) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * Move wix entry off the end of the catalog array New plugin entries are always appended to the end of marketplace.json, so an entry sitting at the tail conflicts with the next added plugin. Place wix mid-list (after neon) instead. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * Bump wix pin to latest upstream main (dcf56d3) Advances the pin from 1ea953a (v1.12.0) to dcf56d3 (v1.15.1). Regenerated plugin-index.json picks up three additional skills: wix-auth, wix-docs, wix-vibe-headless, plus an updated wix-headless description. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * chore(plugins): daily pin bumps 2026-08-04 (xai-org#184) * chore(plugins): daily pin bumps 2026-08-04 * chore(plugins): bump stripe 0.3.4 -> 0.3.5 (2ecd560 -> 70de14e) (xai-org#186) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump figma 2.2.87 -> 2.2.88 (ef474d1 -> 30b6fe6) (xai-org#185) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * chore(plugins): daily pin bumps 2026-08-05 (xai-org#190) * chore(plugins): daily pin bumps 2026-08-05 * chore(plugins): bump figma 2.2.88 -> 2.2.90 (30b6fe6 -> c80480b) (xai-org#191) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump stripe 0.3.5 -> 0.3.6 (70de14e -> a929698) (xai-org#192) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-08-07 (xai-org#199) * chore(plugins): daily pin bumps 2026-08-07 * chore(plugins): bump sentry 1.2.0 -> 1.3.0 (f6b4882 -> 40618d3) (xai-org#200) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump figma 2.2.90 -> 2.2.91 (c80480b -> 22b2c56) (xai-org#201) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump railway 1.3.6 -> 1.3.7 (191601b -> 5d1e971) (xai-org#202) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump stripe 0.3.6 -> 0.3.7 (a929698 -> 4b7495a) (xai-org#203) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-08-10 (xai-org#221) * chore(plugins): daily pin bumps 2026-08-10 * chore(plugins): bump stripe 0.3.7 -> 0.4.0 (4b7495a -> 89ffbee) (xai-org#225) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump chrome-devtools 1.6.0 -> 1.7.0 (77e1d3f -> 073d4a3) (xai-org#224) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump sentry 1.3.0 -> 1.3.1 (40618d3 -> 88fc111) (xai-org#223) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump vercel 0.46.0 -> 0.47.0 (1e821f3 -> 12d0770) (xai-org#222) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * Add MongoDB Atlas plugin (xai-org#136) * chore(plugins): daily pin bumps 2026-08-11 (xai-org#227) * chore(plugins): daily pin bumps 2026-08-11 * chore(plugins): bump stripe 0.4.0 -> 0.4.1 (89ffbee -> 1953b6c) (xai-org#228) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-08-12 (xai-org#231) * chore(plugins): daily pin bumps 2026-08-12 * chore(plugins): bump sentry 1.3.1 -> 1.3.2 (88fc111 -> 7f9d782) (xai-org#232) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump wix 1.15.1 -> 1.16.0 (dcf56d3 -> 5593a1e) (xai-org#233) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-08-17 (xai-org#274) * chore(plugins): daily pin bumps 2026-08-17 * chore(plugins): bump stripe 0.4.1 -> 0.5.1 (1953b6c -> f4abb44) (xai-org#279) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump figma 2.2.91 -> 2.2.95 (22b2c56 -> 72fcf1f) (xai-org#278) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump wix 1.16.0 -> 1.16.1 (5593a1e -> aaec99a) (xai-org#277) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump superpowers 6.2.0 -> 6.3.0 (3dcbd5c -> b36e082) (xai-org#276) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): bump vercel 0.47.0 -> 0.48.0 (12d0770 -> 11c3258) (xai-org#275) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> * chore(plugins): daily pin bumps 2026-08-18 (xai-org#286) * chore(plugins): daily pin bumps 2026-08-18 * chore(plugins): bump stripe 0.5.1 -> 0.5.2 (f4abb44 -> 96cfe6b) --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * Add netlify plugin (xai-org#17) * Add netlify plugin Netlify platform skills for building and deploying on Netlify: serverless and edge functions, Blobs storage, managed Postgres, Image CDN, forms, identity, caching, AI Gateway, framework adapters, and the Netlify CLI and deploys. Remote url source pinned to netlify/context-and-tools main (922fbacf12579dcba4385934120c9a7a34561970). Regenerated plugin-index.json. * Bump netlify pin to include the Netlify MCP server Re-pin to netlify/context-and-tools main (a7948d8f179047e0a80c398d498143887d774f53), which now ships a root .mcp.json declaring the official Netlify MCP server. Regenerated plugin-index.json: the netlify entry now lists the stdio MCP server alongside its 13 skills. * Re-pin netlify to the hosted HTTP MCP server Bump the pin to netlify/context-and-tools main (ab80a6ed2b6c4933a3f964101c82b45cab847b5b), which switches the bundled netlify MCP server from stdio (npx) to Netlify's hosted streamable-HTTP endpoint. Regenerated plugin-index.json: the netlify MCP server now shows as http. * chore(netlify): bump pin to latest SHA (v1.1.0) and regenerate index Moves netlify/context-and-tools from ab80a6e (v1.0.0) to 43059a3 (v1.1.0). Skills: +netlify-access-control, +netlify-agent-runner, +netlify-mcp-servers, -netlify-cli-and-deploy (13 -> 15). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> Co-authored-by: Cursor <cursoragent@cursor.com> * chore(plugins): daily pin bumps 2026-08-20 (xai-org#303) * chore(plugins): daily pin bumps 2026-08-20 * chore(plugins): bump wix 1.16.1 -> 1.16.3 (aaec99a -> abff056) * chore(plugins): bump figma 2.2.95 -> 2.2.96 (72fcf1f -> 7f6562c) * chore(plugins): bump stripe 0.5.2 -> 0.5.3 (96cfe6b -> e8f9aee) --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * chore(plugins): daily pin bumps 2026-08-21 (xai-org#314) * chore(plugins): daily pin bumps 2026-08-21 * chore(plugins): bump vercel 0.48.0 -> 0.48.1 (11c3258 -> c4a1c4e) * chore(plugins): bump stripe 0.5.3 -> 0.5.4 (e8f9aee -> 453dacd) --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * feat(plugins): add pstack (xai-org#317) List Lauren Tan's pstack plugin from cursor/plugins so Grok Build users can install it from the official marketplace. Remote source, pinned SHA, path pstack. * chore(plugins): daily pin bumps 2026-08-22 (xai-org#321) * chore(plugins): daily pin bumps 2026-08-22 * chore(plugins): bump netlify 1.2.1 -> 1.3.0 (5a62a56 -> 32a261b) --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> * Add CodeRifts API governance plugin (MCP server + skill) * fix(coderifts): correct SKILL.md tool list to the 3 real MCP tools (preflight_change_set, verify_receipt, get_decision_details); remove 8 fabricated tool names, descriptions grounded in live tools/list * chore(coderifts): SKILL.md now comes from the single source — the hand-written file carried none of the 21 canonical rule paragraphs, no policy marker and not the operation-scope rule (a receipt authorizes ONE operation: a merge receipt does not authorize a deploy), which is the rule an A/B measurement showed models need; the description is also now 118 chars, so it survives the catalog's 120-char cap instead of being truncated with an ellipsis * chore: regenerate the plugin index --------- Co-authored-by: Evan Purkhiser <evanpurkhiser@gmail.com> Co-authored-by: Kerem Yilmaz <kyilmaz@x.ai> Co-authored-by: Rakshith Ramprakash <rakshithramprakash@gmail.com> Co-authored-by: Seif Lotfy <seif@axiom.co> Co-authored-by: Stephen Xie <49465499+StephenXie@users.noreply.github.com> Co-authored-by: Akshey Deokule <akshey@x.ai> Co-authored-by: Mahmoud Abdelwahab <m@mahmoudw.com> Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Tanishq <30299564+10ishq@users.noreply.github.com> Co-authored-by: Tanishq <10ishq@users.noreply.github.com> Co-authored-by: Lakshya Agarwal <lakshya.agarwal@tavily.com> Co-authored-by: Zachary Lyon <zachary@lyonfamily.org> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Co-authored-by: Gili Shohat <40733156+gilisho@users.noreply.github.com> Co-authored-by: Nikola Irinchev <irinchev@me.com> Co-authored-by: Sean C Davis <scdavis41@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com> Co-authored-by: Kaylee George <62825936+kayleegeorge@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds the CodeRifts plugin under external_plugins/: MCP server (https://app.coderifts.com/mcp) + the api-governance skill. The skill advertises exactly the 3 tools the live server exposes (preflight_change_set, verify_receipt, get_decision_details), verified against live tools/list. Detects breaking changes in OpenAPI specs and MCP manifests, scores blast radius and agent impact, and returns ALLOW/WARN/REQUIRE_APPROVAL/BLOCK with a signed, offline-verifiable receipt before a tool call or merge. Plugin index regenerated with scripts/generate-plugin-index.py; catalog validator green.