Kong AI Marketplace

Portable Kong skills plus kong-konnect MCP configuration for Cursor, Claude Code, and shared skill installers.

This repo is the contributor-facing source of truth for the packaged skills and install metadata. End users normally consume these assets through marketplace catalogs, plugin bundles, or shared-skill installers rather than by reading this repo directly.

Tech Preview

This repository is currently in tech preview. It is actively maintained and updated as the shipped skills, install surfaces, and packaging workflows evolve.

Public issues are welcome during tech preview. Pull requests are currently limited to Kong employees while the preview is in progress.

The repo now uses a plugin-first layout. Root marketplace manifests advertise installable plugin packages, and the first shipped package is plugins/kong-konnect/.

Getting Started

• Installation docs: docs/install/README.md
• Available skills: docs/skills.md
• Contributing: CONTRIBUTING.md
• Developer guide: docs/developer.md
• Release process: docs/release.md
• Testing guide: docs/testing.md
• Security policy: SECURITY.md
• Repo structure: docs/structure.md

Contributing

Contributor bootstrap and maintenance guidance lives in CONTRIBUTING.md.

Recommended local validation path for contributors:

mise trust
mise install
mise run preflight
mise run deps
mise run hooks:install
mise run lint

The repo hooks are an opt-in local guardrail. GitHub Actions remains the enforcement path on pull requests and pushes to main.

Install Targets

Authentication

The kong-konnect MCP server uses OAuth by default at https://global.mcp.konghq.com/. Supported interactive clients register automatically and open a browser login when you first connect or use the server. No token needs to be pasted. Skill-only installs do not require MCP authentication.

For CI and headless clients, including the Copilot cloud agent, use a Konnect personal access token (kpat_) or system account token (spat_) in an Authorization: Bearer header. See the separate headless configuration example.

MCP Server

The shipped MCP configuration uses HTTP and the global URL without an authorization header, allowing clients to use OAuth. The server supports OAuth 2.1 with PKCE and dynamic client registration. Regional URLs for us, eu, au, and in are also available for region pinning; see the installation guide.

Follow the client instructions for Claude Code, Cursor, or Claude.ai, Claude Desktop, and Codex CLI. Existing users should read Migrating from the old server to remove duplicate entries before reconnecting.

Skill Install Notes

• Install the whole repo with npx skills add kong/ai-marketplace.
• Install one skill with npx skills add kong/ai-marketplace --skill gateway-plugin-datakit.
• Update one installed skill with npx skills update -g -y gateway-plugin-datakit or gh skill update gateway-plugin-datakit.
• Prefer native plugin update flows in supported host tools over custom startup hooks.
• Be careful with any automatic update path: it can pull newer skill instructions automatically and may introduce supply-chain or security risk.
• For gh skill, preview before install with gh skill preview kong/ai-marketplace gateway-plugin-datakit.