Qumge: Agent Capabilities & Skills
by qumge.com · remote · no sign-in to list tools · v1.2.0 · published by com.qumge
Find, call and pay per call: the capability layer for agents, plus skills. One key or OAuth.
19 tools: 2 do something that can't be undone, 5 change things and 12 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things5Claude Code: ask: see these tools
- Only reads12Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http skills https://qumge.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Infopublish_cap
The description mentions "credentials".
What this check looks forMatched text
description: "...onfig or connection_id to share private credentials across Caps. Read https://qumge.com/en/..."
- Infopublish_cap
The input schema at properties.connection_config.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.connection_config.description: "...epeating the same developer/name reuses credentials when endpoint and authentication agree."
- Infopublish_cap
The input schema at properties.upstream_token.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.upstream_token.description: "...key. Reusable connections retain their credentials. Stored encrypted; sent as Authorizatio..."
- Infopublish_cap
The description is 2,057 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...t check can suspend it). (Older clients may still call this tool as publish_app.)"
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
19 tools
Can't be undone 2Claude Code: ask
publish_capCreate or update a DRAFT Cap on the developer's behalf (requires the developer's Qumge key).4 findings
Why it is in this group
- The name "publish_cap" says "publish": a word for a change that another call does not undo.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...onfig or connection_id to share private credentials across Caps. Read https://qumge.com/en/..."
- Info
The input schema at properties.connection_config.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.connection_config.description: "...epeating the same developer/name reuses credentials when endpoint and authentication agree."
- Info
The input schema at properties.upstream_token.description mentions "credentials".
What this check looks forMatched text
inputSchema.properties.upstream_token.description: "...key. Reusable connections retain their credentials. Stored encrypted; sent as Authorizatio..."
- Info
The description is 2,057 characters long, over the 2,000 this check looks for.
What this check looks forMatched text
description ends: "...t check can suspend it). (Older clients may still call this tool as publish_app.)"
Description, as the server wrote it Create or update a DRAFT Cap on the developer's behalf (requires the developer's Qumge key). Prefer manifest v2: pass manifest_url for the project's public qumge.json, and slug to select a Cap when needed. The file supplies the name, connection, operations and suggested prices; do not repeat name or override file fields. Without manifest_url, give name and either connection_config, connection_id, base_url or mcp_url, plus the priced operations. Every billed operation must deliver one complete result for one clear input (e.g. product URL in → finished video out); helper steps such as job status are free, and a result that needs several calls is wrapped into one endpoint — never sell partial steps. Managed execution reserves a fixed price and charges only after valid complete delivery; queued acceptance is not delivery, and failed or expired orders cost nothing. Reuse existing tasks and durable request_id deduplication; providers need no Qumge-specific buyer, order, ledger or usage-reporting tables. Prefer execution.identity: order with self-contained inputs. Use trusted request_id to isolate tasks and private results. For buyer-owned state, explicitly choose identity: buyer and authorize the trusted buyer_key; a shared service account alone does not isolate buyers. Use connection_config or connection_id to share private credentials across Caps. Read https://qumge.com/en/docs/caps/managed.md for the complete contract. Legacy per-response and advanced usage-based fields remain supported for existing integrations; the signing/usage guide applies to those modes, not managed execution. A new signing secret is returned once when applicable. Legacy non-managed integrations may also return a usage key; managed execution does not use it. Nothing is charged while it is a draft. Confirm manifest prices with the developer. There is no human review: after test_cap passes, submit_cap takes the Cap live immediately, and qumge spot-checks it afterwards (a spot check can suspend it). (Older clients may still call this tool as publish_app.)
request_payoutAsk for a payout of the developer's payable balance (Cap income only — topped-up money cannot be withdrawn).No findings
Why it is in this group
- The name "request_payout" says "request": a word for a change.
- The name "request_payout" also says "payout": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Ask for a payout of the developer's payable balance (Cap income only — topped-up money cannot be withdrawn). Call it once without `confirmed` to get the estimate (amount, channel fee, withholding tax, what actually lands), show that to the user, and only then call again with confirmed: true. Needs the developer's Qumge key.
Changes things 5Claude Code: ask
become_developerOpen a developer account for the user (needs their qumge key).No findings
Why it is in this group
- The description's first verb is "open": a word for a change.
Description, as the server wrote it Open a developer account for the user (needs their qumge key). There is no review and no waiting: it takes effect immediately, and publish_cap works right after. Give a display name and an ISO country code; the country decides tax and payout rails later. Payout details and legal name are only needed when the user actually withdraws money.
call_capCall a Cap on the user's behalf and return its response.No findings
Why it is in this group
- The name "call_cap" says "call": a word for a change.
Description, as the server wrote it Call a Cap on the user's behalf and return its response. Use this when you cannot make the HTTP call yourself: qumge charges the user's qumge balance and forwards the call at the same price as calling it over HTTP through Qumge. Operations and prices come from get_cap. Prefer `operation` + `input`: when the operation declares an input_schema, `input` is validated against it before anything is charged or forwarded. For managed results, pass a stable idempotency_key when retrying; asynchronous calls return a platform job_id and get_cap_job reads cached progress and the final receipt for free. Needs the user's qumge key in the Authorization header. A 5xx from the Cap is free; a 402 means the user's balance or this Cap's monthly limit stopped it. (Older clients may still call this tool as call_app — it still works.)
submit_capTake one of the developer's Caps live.No findings
Why it is in this group
- The name "submit_cap" says "submit": a word for a change.
Description, as the server wrote it Take one of the developer's Caps live. Nothing is reviewed before launch and nobody approves it: when the applicable connection/operation checks and price book pass, with complete billed-operation docs, this publishes the Cap immediately and agents can call it — and be charged — from then on. Run test_cap first (legacy checklist keys remain signature and end_to_end; the price book is recorded when it saves). Passing native connection checks or isolated fixtures does not verify real delivery. Qumge spot-checks docs and support afterwards and can suspend the Cap. Needs the developer's Qumge key. (Older clients may still call this tool as submit_app_review.)
test_capRun the applicable publication checks after publish_cap, before submit_cap.No findings
Why it is in this group
- The description's first verb is "run": a word for a change.
Description, as the server wrote it Run the applicable publication checks after publish_cap, before submit_cap. Managed qumge wrapper operations use authenticated isolated fixture hooks and validate the complete fixture result. Native managed API/MCP operations check HTTP OPTIONS or MCP tools/list for connection/schema evidence without invoking generation. The verification array distinguishes connection, fixture and real_delivery scopes; real delivery is not tested. Legacy integrations may call one free and one billable route, or each published MCP tool, directly with probe inputs; Qumge does not charge for these probes, but the developer may incur provider costs. Signed wrapper/legacy APIs also test /qumge/ping with valid, forged and stale signatures; legacy usage-reporting routes must report probe usage. Missing billed-operation docs block publishing. Needs the developer's Qumge key. (Older clients may still call this tool as test_app.)
verify_domainProve the developer owns the domain of their MCP server or API.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Prove the developer owns the domain of their MCP server or API. Going live does not need it: an unverified Cap is live and charges callers, but the developer's earnings from it stay frozen until this passes — verifying releases them. Call with the service's https url: if the domain (or a parent domain) is already verified it says so; otherwise it returns a one-line file to serve at /.well-known/qumge-verify.txt on that host (or a DNS TXT record with the same line). Put the file into the project so it ships with the next deploy, then call again with check: true. Needs the developer's Qumge key.
Only reads 12Claude Code: allow
cap_statusCheck one of the developer's own capabilities: its status (draft / review / live / suspended) and how far the publishing checklist has got.No findings
Why it is in this group
- The name "cap_status" says "status": a word for reading.
Description, as the server wrote it Check one of the developer's own capabilities: its status (draft / review / live / suspended) and how far the publishing checklist has got. Needs the developer's Qumge key. (Older clients may still call this tool as app_status.)
get_balanceThe user's Qumge balance, plus what each Cap has spent this month against its monthly limit.No findings
Why it is in this group
- The name "get_balance" says "get": a word for reading.
Description, as the server wrote it The user's Qumge balance, plus what each Cap has spent this month against its monthly limit. Call this before a paid call when the user asks whether they can afford it, and after a 402 that says the balance or a limit stopped the call — it returns the top-up link to hand to the user. Needs the user's qumge key.
get_capFetch one Cap's operations, prices and how to call it, by the slug returned from search_caps.No findings
Why it is in this group
- The name "get_cap" says "get": a word for reading.
Description, as the server wrote it Fetch one Cap's operations, prices and how to call it, by the slug returned from search_caps. Call this before using a Cap: it lists each operation (by name), its input and output schema when the developer provided one, which routes are billable, the per-call maximum, when the call settles, and the error codes the caller may see. If the request carries the user's Qumge key, it also reports that user's monthly limit for this Cap. (Older clients may still call this tool as get_app — it still works.)
get_cap_jobRead your managed Cap job's cached progress, complete result and receipt for free.No findings
Why it is in this group
- The name "get_cap_job" says "get": a word for reading.
Description, as the server wrote it Read your managed Cap job's cached progress, complete result and receipt for free. Use the platform job_id returned by call_cap. Ordinary reads do not invoke the provider. Set refresh_result: true to explicitly request free renewal of declared result URLs after success; the optional private provider command does not generate new work or change the receipt. Existing orders remain readable after Cap revocation.
get_earningsWhat a developer has earned and what is payable: the amount still inside the 30-day holdback, the amount sitting in their wallet (income from Caps — the only part that can be withd…No findings
Why it is in this group
- The name "get_earnings" says "get": a word for reading.
Description, as the server wrote it What a developer has earned and what is payable: the amount still inside the 30-day holdback, the amount sitting in their wallet (income from Caps — the only part that can be withdrawn), and what has already been paid out, with the most recent entries. Matured purchase amounts move into the wallet automatically. Needs the developer's Qumge key.
get_skillFetch the full SKILL.md content of one skill, by the slug returned from search_skills.No findings
Why it is in this group
- The name "get_skill" says "get": a word for reading.
Description, as the server wrote it Fetch the full SKILL.md content of one skill, by the slug returned from search_skills. Write the returned markdown to .claude/skills/<name>/SKILL.md (or the equivalent for the user's agent). If the reply says the skill ships more files (REFERENCE.md, scripts/…), call again with include_files: true to get them and write each next to SKILL.md.
list_capsList the developer's own Caps with their status (draft / live / suspended) and slug.No findings
Why it is in this group
- The name "list_caps" says "list": a word for reading.
Description, as the server wrote it List the developer's own Caps with their status (draft / live / suspended) and slug. Use it before publishing to see what already exists, and after to check what went live. Needs the developer's qumge key. (Older clients may still call this tool as list_apps.)
list_categoriesList the skill categories and how many skills are in each.No findings
Why it is in this group
- The name "list_categories" says "list": a word for reading.
Description, as the server wrote it List the skill categories and how many skills are in each. Useful when the user is browsing rather than looking for something specific.
list_modelsList the models this gateway can route to, best first.No findings
Why it is in this group
- The name "list_models" says "list": a word for reading.
Description, as the server wrote it List the models this gateway can route to, best first. Every one is reachable with the same Qumge key — no per-vendor signup. Only tool-calling models are listed: an agent cannot use the others.
list_wantedWhat agents searched for on Qumge and found nothing: the demand side of the store, in the searchers' own words, with how often each was searched in the last 7 and 30 days.No findings
Why it is in this group
- The name "list_wanted" says "list": a word for reading.
Description, as the server wrote it What agents searched for on Qumge and found nothing: the demand side of the store, in the searchers' own words, with how often each was searched in the last 7 and 30 days. Useful before building or publishing a Cap — it tells you what people already want. Only the search text is stored; no user and no IP.
search_capsSearch Qumge's Caps — paid services an agent can call, billed per call from the user's Qumge balance.No findings
Why it is in this group
- The name "search_caps" says "search": a word for reading.
Description, as the server wrote it Search Qumge's Caps — paid services an agent can call, billed per call from the user's Qumge balance. A Cap (short for capability) is one finished job: somebody's API or MCP server with a price list; to you it is a set of operations. Use this when the user wants something done rather than a skill to install: 'make a promo video', 'transcribe this call'. Returns the best few with pricing, measured success rate and latency, and the slug to pass to get_cap. (Older clients may still call this tool as search_apps — it still works.)
search_skillsSearch Qumge's curated catalog of agent skills (SKILL.md files) by what the user wants to accomplish.No findings
Why it is in this group
- The name "search_skills" says "search": a word for reading.
Description, as the server wrote it Search Qumge's curated catalog of agent skills (SKILL.md files) by what the user wants to accomplish. Use this whenever the user asks for a skill, tool, or Cap — e.g. 'find me a skill for social media automation', 'is there a skill for SEO audits'. Returns the best few, ranked by how useful they actually are (an LLM read each one), with a one-line summary and the exact slug to pass to get_skill.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.2.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http skills https://qumge.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__skills__search_skills",
"mcp__skills__get_skill",
"mcp__skills__list_categories",
"mcp__skills__list_models",
"mcp__skills__search_caps",
"mcp__skills__get_cap",
"mcp__skills__get_cap_job",
"mcp__skills__get_balance",
"mcp__skills__list_caps",
"mcp__skills__cap_status",
"mcp__skills__get_earnings",
"mcp__skills__list_wanted"
],
"ask": [
"mcp__skills__call_cap",
"mcp__skills__become_developer",
"mcp__skills__verify_domain",
"mcp__skills__publish_cap",
"mcp__skills__test_cap",
"mcp__skills__submit_cap",
"mcp__skills__request_payout"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as skills. Review it before you use it.