Scan configured external Skill roots

POST
/v1/external-skills/scan

Replace the current host-local Registry projection without copying or rewriting package content. Refresh discovery of configured external Skills when the user requests discovery or import. Scanning does not install, import, approve, or execute a Skill. Inspect the returned availability and resolve an exact fingerprint before any authorized import.

Authorization

BearerAuth
AuthorizationBearer <token>

Bearer credential resolved to an opaque authenticated Principal by the Server deployment.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X POST "https://example.com/v1/external-skills/scan" \  -H "Content-Type: application/json" \  -d '{    "scope_id": "string"  }'
{  "registrations": [    {      "external_skill_id": "string",      "provider": "codex",      "agent_kind": "codex",      "host_id": "string",      "installation_scope": "user",      "locator": "string",      "fingerprint": "string",      "name": "string",      "description": "string"    }  ],  "skipped": 0}

Record an exact remote Skill delivery Receipt POST

Update latest observed state only after credential, generation, Artifact, operation, and digest validation.

List external Skills visible on this host POST

Return live local resolutions; unavailable registrations are omitted unless explicitly requested. Inventory discovered external Skills when requested. This is not Memory search or a list of currently loaded host Skills. An available external package is not installed or approved; inspect its identity and fingerprint before a separate authorized import.