Self-hostedMCP nativeMIT licensed

A skills library for your AI agents

Write a skill once. Version it like code. Serve it to every agent you run — over MCP, CLI, or HTTP. On your own box, under your own keys.

A dark crate with glowing skill cards floating out of it

What's a skill?

A markdown playbook plus any files it needs — the stuff that teaches an agent a workflow it doesn't know. Skillbox stores them, versions them, and hands them to agents on demand, pinned to exact revisions.

# SKILL.md --- name: deploy-my-app description: Build, verify and ship to prod --- 1. Run the test suite. Never skip it. 2. Build with `bun run build`. 3. Deploy via `scripts/ship.sh`, check health.
Five robot agents connected by glowing cables to a central cube

One library, every agent

Claude, Codex, Cursor — anything that speaks MCP. Skillbox ships an HTTP MCP server, a stdio bridge, and a CLI with checksum-verified downloads. Agents search the catalog, load pinned revisions, and report what they actually used.

search_skills recommend_skills load_skill read_skill_file report_skill_use

Versioned like code

Every publish is an immutable revision. Conflict detection stops silent overwrites, restore brings anything back, and agents can propose changes that you review before they land. Nothing shifts under your agents' feet.

A stack of translucent versioned layers with a restore arrow
A cozy mini server with a glowing shield and a plant

Your box, your rules

Docker-only setup that starts completely empty — no seeded accounts, no phoning home. Client keys are shown once and stored as hashes. Provider keys are encrypted with AES-256-GCM. And Skillbox never executes uploaded skill code.

Everything a library needs

Small surface, sharp tools. No accounts, no cloud, no telemetry.

Markdown editor

Skill and file editor with frontmatter, plus native folder import and export.

Immutable revisions

Pinned versions, conflict detection, and one-click restore of anything.

Revocable keys

Per-client keys shown once, stored hashed. Profiles scope exactly what each agent can see and do.

MCP native

HTTP MCP endpoint plus a Node/Bun stdio bridge for clients that need it.

Smart recommendations

Task-aware skill ranking with your own AI key. Falls back to plain search — and says so.

Backups that survive

Protected PostgreSQL and config backups with explicit, deliberate restore tooling.

Self-host it tonight

Docker Compose v2 and Bash. That's the whole requirements list — no host Node, no host Bun. Setup generates unique random credentials into a private .env and refuses to overwrite it.

$ git clone https://github.com/kitze/skillbox.git $ cd skillbox $ bash scripts/skillbox.sh setup $ bash scripts/skillbox.sh start # → http://127.0.0.1:4791