Adding Shared Tools

This page covers platform-managed shared tools.

It does not cover:

  • user-installed marketplace runtimes
  • sandboxes
  • built-in infrastrActure MCP tools

Authoring Model

The preferred source of truth is the registry-backed tool model in PostgreSQL.

src/config/sharedTools.ts still exists as a compatibility layer and fallback for startup/OAuth behavior, but it should not be treated as the final long-term authoring surface.

Decision Checklist

Before adding a shared tool, answer:

  1. Is this really shared, or should it be user-installed?
  2. Should normal users ever receive it through standard sync?
  3. Does it use an org-wide credential?
  4. Does it need OAuth callback handling?
  5. Does it need non-default Docker host config?

If it uses an org-wide credential, default to admin.

Minimum Definition

You need:

FieldWhy
id / namestable identity
imageruntime deployment
port layoutroutable endpoint
tierstandard vs admin
shared-service markerintegration filtering
auth configOAuth or secret handling