{ "$comment": "Auto-generated manifest describing how an SHC MCP server exposes the operator skill-pack as MCP resources (resources/list + resources/read). Do not edit by hand.", "pack": "shc-operator-pack-universal", "version": "2.4.15", "flagship_mcp": { "endpoint": "https://mcp.sovereignhybridcompute.com/", "note": "The hosted flagship MCP server (Streamable HTTP). Connect any MCP client and authenticate with a Bearer operate key ('Authorization: Bearer shc_live_...'); for user-api v2.4.15 it reports 177 SHC user-api operations in serverInfo.catalog.tool_count; default tools/list returns 30 curated tools. Every spend and every destructive tool is gated behind a server-issued confirmation_id (re-call with the confirmation_id after the human approves). The curated everyday subset is annotated x-shc-core; start with getAccount. Nothing to install." }, "protocol_note": "Implements MCP resources/list + resources/read. Each resource is static markdown/JSON served over HTTPS; an MCP client lists shc-skill://pack/index and reads shc-skill://skill/. The hosted flagship MCP server (the SHC user-api as tools) is a SEPARATE endpoint -- see flagship_mcp above.", "initialize_instructions_addendum": "This server also exposes the SHC operator skill-pack as resources (resources/list). Read shc-skill://pack/router first (the lean routing table); pick the skill whose trigger matches and read its body. ALWAYS run get-access first to get permission to the user's SHC account. Hold to the operator discipline (shc-skill://pack/discipline) on every step: verify before claiming, never spend without explicit human confirmation, check upstream sources before running a recipe.", "resources": [ { "uri": "shc-skill://pack/router", "name": "SHC operator skills -- router (lean default)", "description": "The compact routing table: start_here + each skill's trigger + fetch URL. Read THIS first, pick the skill whose trigger matches, then read its body. Start with get-access.", "mimeType": "application/json", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/router.json", "default": true }, { "uri": "shc-skill://pack/index", "name": "SHC operator skill index (full metadata)", "description": "Full per-skill metadata. Heavier than pack/router; prefer pack/router as the entrypoint.", "mimeType": "application/json", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/index.json" }, { "uri": "shc-skill://pack/discipline", "name": "SHC operator discipline (the 5 imperatives)", "description": "The operating creed every skill embeds: verify-don't-trust, spending-is-the-human's-call, check-the-source, smallest-key, fail-loud.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/discipline.md" }, { "uri": "shc-skill://skill/get-access", "name": "get-access", "description": "The FIRST skill -- run before any other. Creates the user's SHC account via one anonymous API call (no website) and returns an operate-scoped key. Never prints or asks for a password. -- Use when: Run this FIRST, before anything else, the moment the user asks you to do anything with SHC (a server, a Bitcoin store, a cloud). ALSO run it any time an SHC call returns 401 or says \"unauthorized\" or \"authentication required\" -- that means you do not have a key yet.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/get-access/get-access.md", "annotations": { "operator": true, "client_side": true, "danger": "low", "provides": [ "shc_access_key", "user_api_key_operate" ], "requires": [] } }, { "uri": "shc-skill://skill/shc-deploy-app", "name": "shc-deploy-app", "description": "Deploy a self-hosted app onto a fresh SHC VPS end to end via the verified-deploy loop (check the app's docs, install once, prove it with a live healthcheck). The agent does every step over SSH. -- Use when: The user asks their agent to \"deploy X on my server\", \"set up a self-hosted X\", \"make me a Bitcoin payment store\", \"give me my own private cloud\", or names any app in the recipe library. Use this whenever the goal is to stand up a real service on an SHC VPS the agent has SSH to.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/shc-deploy-app/shc-deploy-app.md", "annotations": { "operator": true, "client_side": false, "danger": "low", "provides": [ "deployed_app" ], "requires": [ "ssh_root_or_sudo", "public_dns_a_record", "vps_ready" ] } }, { "uri": "shc-skill://skill/nostr-operate-lane", "name": "nostr-operate-lane", "description": "A customer authorizes YOU (a specific AI agent) to operate ONE of their SHC VMs by signing a Nostr grant. You exchange that grant for a short-TTL, service-scoped, cannot-spend operate Bearer and use it against that one VM only. No password, no website, no broad key. -- Use when: Use when a customer wants to hand YOU operation of ONE specific VM service over Nostr (NIP-07/NIP-46 keys), instead of giving you an account-wide API key. Trigger: the customer offers a signed kind:30078 operate grant, OR you need to act on a single VM the customer owns and they would rather sign a scoped grant than share a key. ALSO re-run this any time your operate Bearer returns 401 (expired/used-up) -- mint a fresh one; the grant is re-usable until it expires.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/nostr-operate-lane/nostr-operate-lane.md", "annotations": { "operator": true, "client_side": true, "danger": "low", "provides": [ "user_api_key_operate" ], "requires": [] } }, { "uri": "shc-skill://skill/shc-pay", "name": "shc-pay", "description": "Present an SHC account-credit top-up as a no-dependency scannable QR plus copy/paste fallbacks, and confirm payment only after a real balance re-read. Never auto-pays. Runs in the agent's own shell. -- Use when: The user wants to add prepaid credit to their SHC account (\"put $25 on my account so my servers keep running\"), OR a deploy/order step reports it needs funds. Use after someone has called POST /account/credit and you hold the returned JSON; this skill turns that JSON into a friendly \"here is how to pay\".", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/shc-pay/shc-pay.md", "annotations": { "operator": true, "client_side": true, "danger": "low", "provides": [ "payment_qr" ], "requires": [ "user_api_key_operate" ] } }, { "uri": "shc-skill://skill/wait-until-ready", "name": "wait-until-ready", "description": "Block until a fresh SHC VPS is operable -- confirm the server is up and the agent's SSH + sudo work before any deploy touches it. The first thing every VPS-side operator skill depends on. -- Use when: Right after ordering/provisioning a VPS, before running any deploy (shc-deploy-app), point-a-domain, harden-ssh, or nightly-backup. Use it as the gate: call it, walk away, proceed only once the VPS is ready.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/wait-until-ready/wait-until-ready.md", "annotations": { "operator": true, "client_side": false, "danger": "low", "provides": [ "vps_ready" ], "requires": [ "user_api_key_operate" ] } }, { "uri": "shc-skill://skill/point-a-domain", "name": "point-a-domain", "description": "Make a domain or subdomain resolve to the VPS public IP (A/AAAA), then verify it globally, so automatic TLS (Let's Encrypt) can validate. Prerequisite for any HTTPS service the agent deploys. -- Use when: Before deploying any app that serves HTTPS (BTCPay, Nextcloud, anything with a web UI). The user picked a hostname; this makes it point at their VPS and confirms it resolves before the deploy's TLS step runs.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/point-a-domain/point-a-domain.md", "annotations": { "operator": true, "client_side": false, "danger": "low", "provides": [ "public_dns_a_record" ], "requires": [ "vps_ready" ] } }, { "uri": "shc-skill://skill/harden-ssh", "name": "harden-ssh", "description": "Lock down a fresh SHC VPS -- key-only SSH, unattended security upgrades, and a default-deny firewall opening only the ports the services need. Verifies it can still reconnect before committing (no lockout). Idempotent. -- Use when: After a deploy (so you know which ports the app needs), or any time the user asks to \"secure / lock down / harden my server\". Safe to re-run.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/harden-ssh/harden-ssh.md", "annotations": { "operator": true, "client_side": false, "danger": "medium", "provides": [ "hardened_host" ], "requires": [ "ssh_root_or_sudo", "vps_ready" ] } }, { "uri": "shc-skill://skill/nightly-backup", "name": "nightly-backup", "description": "Install a nightly encrypted backup of a deployed app's data + database to a destination the user controls, with a mandatory verify-restore drill so \"your data is safe\" is a verified claim, not a hope. -- Use when: After deploying an app the user cares about (BTCPay store, Nextcloud), or any time the user asks to \"back up my server / set up backups\". Pairs with shc-deploy-app.", "mimeType": "text/markdown", "served_from": "https://blesta.sovereignhybridcompute.com/agent-skills/skills/nightly-backup/nightly-backup.md", "annotations": { "operator": true, "client_side": false, "danger": "low", "provides": [ "nightly_backup" ], "requires": [ "ssh_root_or_sudo", "vps_ready" ] } } ], "operation_count": 177, "tool_count": 177, "contractFingerprint": "e8f7ccc12336fb4925893ce3582b03782b182638dc460d952d046a36c1c20e14", "x-shc-release": { "version": "2.4.15", "op_fingerprint": "183a4a0282542d671d799f08044f6717182932f9fa1ef5205dfca45a030cefaa", "op_count": 177, "contractFingerprint": "e8f7ccc12336fb4925893ce3582b03782b182638dc460d952d046a36c1c20e14" } }