Skip to content
Choregos
What agents know how to do

Skills

A skill is a folder: a SKILL.md that says when to use it, and the files it brings. An agent's version names the skills it carries; the runner lays them where its backend reads them, and checks each one against its digest. A skill grants nothing — allowed-tools is refused.

How agents, skills, connectors and clients fit together
Agent
does the work of a workflow step: instructions, a model, the skills it carries and the tools it may call. An internal agent runs in Choregos, under a budget; an external agent is an AI client registered here, whose calls carry its name and limits.
Skill
know-how an agent carries — a SKILL.md and its files. A skill grants no right.
Connector
an installed instance of a system Choregos reaches OUT to: a directory, a device fleet, an MCP server. Each operation is allowed, needs an approval, or is forbidden. A catalogue lists what the platform offers (MCP servers, connector types); installing one from it makes a connector. A project's delivery tools — tracker, repository, CI, deployment — are set in the project's settings.
Client
an AI assistant that reaches IN to Choregos through its MCP door — Claude Code, Cursor, ChatGPT — with its human's access token: their rights, never more, fewer once registered as an external agent. It never decides.
  1. A client or a tracker opens a work item
  2. Its workflow hands each step to an agent
  3. The agent calls connectors under the policy
  4. A person approves what the policy asks

A supplier's agent that you call over MCP is a connector (an MCP server), not an agent of your registry.

Library

Reading the library…

Import from a repository

A public repository on github.com or gitlab.com. The preview resolves the branch to its commit; the import pins that commit, so the skill cannot change under its agents.

Import a skill

A zip of the folder (at most 256 files, 5 MiB). The same name publishes its next version. Each version is assessed: a script, an executable file, an outbound URL, a credential or an MCP reference makes it high risk, and it waits for a second administrator before an agent may carry it.