List installed skills

Lists the skills in force for work in this repository — name, the one line that says when to reach for one, the file it lives in and the rung it came from. Five origins are merged, nearest winning a name, so a skill listed here is the one that will actually load; the ones a nearer rung shadows are simply absent. The bodies are never here: progressive disclosure means a catalogue carries names, and expandSkill is what reads one. Notices carries whatever the loaders complained about while reading — a package skill something nearer displaces, a file with no description — for a client to show once.

GET /v1/skills

List installed skills

cURL

curl --request GET \
  --url https://api.example.com/v1/skills \
  --header 'Authorization: Bearer <token>'

200

{
  "items": [
    {
      "name": "pdf",
      "description": "Fill in and sign PDF forms."
    }
  ],
  "limit": 25
}

Authorizations

Authorization · string · header · required

Enforced on every transport, with no exempt operation. A person's request — over the default local unix socket exactly as over a TCP listener — must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011. The socket's file permissions are transport and are not an authorisation.

Query Parameters

repository · string

Absolute path of the repository to resolve skills and command files for. A repository's own .claude and .narya directories are read only when it is named here AND it has been trusted; with no repository named, the answer carries the user's own files and the installed packages' only. It also decides where a command's shell blocks run; a hosted home runs none. On a hosted home it resolves under the home's workspace, and a path outside it is refused 422.

Maximum string length: 4096

sessionId · string<uuid>

The conversation to resolve skills and command files for, in place of a repository: its own repository, or, for one whose code lives in an environment, the repository that environment cloned, read inside it. An environment that cloned nothing contributes no repository rung, and neither does this host's checkout. A listing never starts a stopped container: it answers without the clone's rung and says so in notices. Naming both sessionId and repository is refused 400; a conversation the caller may not read is refused as reading it is. A listing serves names rather than the conversation, so its disclosure audit does not record it.

cursor · string

Opaque pagination cursor from a previous page's nextCursor or prevCursor.

Maximum string length: 1024

limit · integer · default: 25

Maximum items per page.

Required range: 1 <= x <= 100

Response

200

application/json

One page of installed skills.

One page of installed skills, plus whatever the loaders complained about while reading them.

items · object[] · required

Show child attributes

limit · integer · required

Required range: x >= 1

nextCursor · string

notices · string[]

Standing facts about the SKILL files on this machine's disk — a package skill something nearer displaces, a file with no description — in the words a person reads. Scoped to this listing: what the command loaders complained about arrives with listCommands, so a caller walking both receives each complaint once. They repeat on every request because they are conditions rather than events; a client that shows them keeps its own memory of what it has already said.