# Skillwire

> Skillwire is a high-performance Universal Model Context Protocol (MCP) Gateway and Agent Skill Router. It connects AI agents to 294 executable API tools and 1,029 curated prompt skills (1,323 total) with sub-50ms routing and cryptographic AES-256-GCM credential isolation. Structural distillation pruning is active by default.

Skillwire bridges the gap between AI models (such as Claude, ChatGPT, Cursor, Antigravity, and custom agent frameworks) and external software tools. Instead of stuffing hundreds of static OpenAPI specifications into LLM prompts, Skillwire uses hybrid semantic search to discover only relevant tools on demand and prunes extraneous data before returning responses.

> Looking for complete, uninterrupted technical documentation in a single file? See [llms-full.txt](https://skillwire.dev/llms-full.txt).

## Core Capabilities

- **Universal MCP Gateway**: Full compliance with the Model Context Protocol over Streamable HTTP (`POST /mcp`), Server-Sent Events (`GET /sse`), and stdio, providing seamless plug-and-play tool execution for MCP clients.
- **Sub-50ms Hybrid Routing**: Combines BM25 keyword matching with dense vector embeddings using Reciprocal Rank Fusion (RRF) for 14.2ms median tool discovery across 294 executable API tools and 1,029 curated prompt skills (1,323 total).
- **In-Memory Token Distillation**: Deterministic structural pruning cuts verbose upstream JSON payloads by up to 94% into structured Markdown, with optional local/remote LLM distillation.
- **Supply-Chain Defense**: Automated 72-hour pipeline with SPDX license allowlisting, NVIDIA SkillSpector AST vulnerability scanning, and prompt-injection verification before tool staging.
- **Managed 3-Legged OAuth2 Token Broker**: Automatic token refresh rotation and per-end-user (`X-Entity-Id`) credential scoping across SaaS providers (Slack, GitHub, Google, Linear, Notion, Zoom, HubSpot, Asana, Box). Emits actionable `AUTH_REQUIRED` status with single-use connect links.
- **Zero-Trust BYOK Credential Vault**: Stores third-party vendor credentials in AES-256-GCM encrypted storage with domain-scoped host binding (*.stripe.com) and master-secret leakage protection. Credentials are injected strictly downstream at invocation time and never exposed to the LLM or chat history.
- **Real-Time Telemetry & Audit Logs**: Detailed audit trails for every skill invocation, token consumption metrics, execution latency, and error tracing.

## Core Documentation

- [Full LLM Markdown Guide](https://skillwire.dev/llms-full.txt): Comprehensive technical manual, architecture breakdown, and API schemas.
- [Platform Documentation](https://skillwire.dev/docs): Getting started guide, client configuration, and MCP server setup.
- [Key Features & Architecture](https://skillwire.dev/features): In-depth breakdown of routing algorithms, credential security, and response distillation.
- [Pricing & Plans](https://skillwire.dev/pricing): Overview of Free, Starter, Plus, Pro, and Enterprise tiers.
- [Contact Enterprise Sales](https://skillwire.dev/contact-sales): Inquiries for custom SLAs, dedicated infrastructure, and on-premises deployments.

## Public API Endpoints

- [Health & System Status](https://skillwire.dev/api/health): Service health, database connection status, and uptime metrics.
- [Platform Security Audit Ledger](https://skillwire.dev/api/platform/security-audit): Live ledger of skills verified by NVIDIA SkillSpector AST analysis and license checks.
- [OpenAPI Spec Importer](https://skillwire.dev/api/skills/import-openapi): Import any OpenAPI 3.0/3.1 or Swagger 2.0 URL via POST with SSRF pre-flight validation.
- [Skill Search API](https://skillwire.dev/api/skills/search): Query skills via POST with JSON body `{"query":"..."}`; requires Bearer API key or session token. Results are capped at 5.
- [Per-User BYOK Credential Vault](https://skillwire.dev/api/user/credentials): Manage personal encrypted third-party credentials (GET list masked, POST create/replace, POST /delete).
- [Platform Provider Catalog](https://skillwire.dev/api/platform/providers): List active platform providers, integration connectors, and operational status.
- [MCP Streamable HTTP Gateway](https://skillwire.dev/mcp): Streamable HTTP endpoint (`POST /mcp`) for modern MCP clients (MCP spec 2025+).
- [MCP Gateway SSE Stream](https://skillwire.dev/sse): Server-Sent Events endpoint for legacy SSE agent sessions.
- [OAuth Connect Link Minting](https://skillwire.dev/api/v1/oauth/connect-links): Mint single-use, 15-minute authorization links for end-user SaaS tools (POST with Bearer API key).
- [OAuth Connections API](https://skillwire.dev/api/v1/oauth/connections): Query connected end-user OAuth accounts and token status (GET with Bearer API key).

## Agent Quickstart

Agents connecting over MCP can configure Skillwire with Streamable HTTP (`/mcp`) or legacy SSE (`/sse`):
```json
{
  "mcpServers": {
    "skillwire": {
      "url": "https://skillwire.dev/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_SKILLWIRE_API_KEY"
      }
    }
  }
}
```

Direct agent lookup instructions can be found at [/agent.md](https://skillwire.dev/agent.md).

## Optional

- [Terms of Service](https://skillwire.dev/terms): Terms and conditions governing platform usage.
- [Privacy Policy](https://skillwire.dev/privacy-policy): Details on data protection, retention, and encryption practices.
- [Refund Policy](https://skillwire.dev/refund-policy): Subscription terms and refund eligibility.
- [DMCA Policy](https://skillwire.dev/dmca): Copyright policies and takedown request procedures.