Install Kong Skills

Plugin install

The repository packages all Kong Konnect skills and the hosted MCP server for Codex and ChatGPT. This is a repo marketplace install; public directory approval and publication are separate and are not claimed here.

From a checkout containing the Codex package:

codex plugin marketplace add .
codex plugin marketplace list
codex plugin add kong-konnect@ai-marketplace

After this change is available on the public default branch, the remote form is:

codex plugin marketplace add Kong/ai-marketplace

The CLI install command enables the plugin. Complete its MCP OAuth prompt when connecting and start a new session. Alternatively, restart the ChatGPT desktop app, open the Plugins Directory, choose Kong AI Marketplace, and install Kong Konnect. Complete the OAuth browser login when prompted, then start a new chat and check that the Kong skills and kong-konnect MCP tools are available. Client availability varies; see OpenAI’s package and marketplace guide.

The repository marketplace is .agents/plugins/marketplace.json. It points to the package containing plugins/kong-konnect/.codex-plugin/plugin.json, which loads the skill directory and plugins/kong-konnect/.mcp.json. This generated Codex companion has the same content as the shared plugins/kong-konnect/mcp.json. The MCP configuration uses https://global.mcp.konghq.com/ without headers or tokens; the client manages OAuth and dynamic client registration.

MCP only

To connect the server without installing the plugin or its skills:

codex mcp add kong-konnect --url https://global.mcp.konghq.com/
codex mcp login kong-konnect

Use either the plugin connection or the manual connection. Remove an existing manual entry with codex mcp remove kong-konnect before using the plugin. See migration and headless authentication for legacy entries and separate PAT/SPAT configuration for CI. Never add credentials to the package.

Skills only

npx skills add kong/ai-marketplace --agent codex

This installs skills without MCP wiring or OAuth. See shared installers for preview, update, and single-skill options.

Local plugin install

For local verification, install the plugin package from Kong AI Marketplace under Cursor’s local plugin directory:

1. Create ~/.cursor/plugins/local/kong-konnect/.
2. Copy the contents of plugins/kong-konnect/ into that path so Cursor sees .cursor-plugin/plugin.json at the plugin root.
3. Restart Cursor or run Developer: Reload Window.
4. Confirm kong-konnect appears under installed plugins.

Use a real copied directory for local testing. A symlinked local plugin directory does not load reliably, while a copied directory does.

Once Kong AI Marketplace is listed in a Cursor marketplace, the same package shape can also be installed through Cursor’s plugin UI or /add-plugin. The local path above remains the contributor smoke-test flow.

What gets installed

• The kong-konnect plugin package from plugins/kong-konnect/
• The shared skills from plugins/kong-konnect/skills/
• The kong-konnect MCP server entry from plugins/kong-konnect/mcp.json

Cursor uses the plugin manifest in plugins/kong-konnect/.cursor-plugin/plugin.json and the marketplace catalog in .cursor-plugin/marketplace.json.

Skills without the plugin wrapper

Install all skills:

npx skills add kong/ai-marketplace

Install only one skill:

npx skills add kong/ai-marketplace --skill gateway-plugin-datakit

Skill-only installs do not require MCP authentication.

If you installed via gh skill, you can also update one installed skill with gh skill update gateway-plugin-datakit.

MCP authentication

Cursor loads the plugin’s mcp.json, which uses the global URL without a bearer header. Cursor documents OAuth for remote servers in mcp.json; the plugin-bundled entry has not been tested by Kong as of 2026-09-18. On first use, follow the connection prompt and complete the browser login.

From a checkout of this repository, the local install steps above can be run as:

mkdir -p ~/.cursor/plugins/local/kong-konnect
cp -R plugins/kong-konnect/. ~/.cursor/plugins/local/kong-konnect/

Restart Cursor or run Developer: Reload Window, then connect the server. For MCP alone, copy the shipped MCP entry into your Cursor MCP settings instead of installing the plugin.

For CI or headless use, see the separate PAT/SPAT configuration. Before switching an existing installation, follow the migration steps.

Kong AI Marketplace provides Kiro Powers for AWS.

Install

1. Browse powers at https://kiro.dev/powers.
2. Select a power and click Install.
3. Kiro IDE opens and lets you confirm installation.

From GitHub

1. Open the Powers panel and choose Add power from GitHub.
2. Enter the following repository URL: https://github.com/kong/ai-marketplace
3. Click Install.

Notes

• If a power includes MCP integrations, Kiro registers them in ~/.kiro/settings/mcp.json under the Powers section.

• To install from GitHub:

   gh skill install kong/ai-marketplace

  Copied!

  Install one skill:

   gh skill install kong/ai-marketplace gateway-plugin-datakit

  Copied!

MCP authentication

Tested with Kiro CLI 2.23.1 on 2026-09-23 using fresh browser OAuth with PKCE and explicit oauthScopes, without a token. Search, schema discovery, reads, and a disposable control-plane create/read/delete test passed on the CLI surface. Token refresh and the Kiro IDE one-click install route were not tested.

Add this entry to ~/.kiro/settings/mcp.json, preserving any existing servers:

{
  "mcpServers": {
    "kong-konnect": {
      "url": "https://global.mcp.konghq.com/",
      "oauthScopes": [
        "konnect:read",
        "konnect:write",
        "offline_access",
        "openid"
      ]
    }
  }
}

Explicit oauthScopes are required for this Kiro CLI setup: without them, Kiro omits the scope parameter and Kong Identity rejects authorization with “The scope of your request is missing”.

For CI or headless integrations, use a separate hand-written configuration with a PAT or SPAT bearer token. See the migration steps before replacing an old stdio or PAT-configured entry.

For tools without a first-class plugin or extension wrapper in Kong AI Marketplace, use the shared skills plus the MCP config.

Skills

npx skills and gh skill are both supported install paths for the shared skills in Kong AI Marketplace.

npx skills

Install all skills:

npx skills add kong/ai-marketplace

Install a single skill:

npx skills add kong/ai-marketplace --skill gateway-plugin-datakit

Update all globally installed skills:

npx skills update -g -y

Update one installed skill:

npx skills update -g -y gateway-plugin-datakit

--skill applies to npx skills add. The update command takes skill names positionally.

gh skill

gh skill is available in GitHub CLI v2.90.0+ and is currently in public preview.

Preview a skill before installing it:

gh skill preview kong/ai-marketplace gateway-plugin-datakit

gh skill install kong/ai-marketplace

To install a single skill directly, use:

gh skill install kong/ai-marketplace gateway-plugin-datakit

If gh skill does not pick the right host automatically, pass --agent.

Pin an install to a reviewed tag or SHA when you need reproducibility:

gh skill install kong/ai-marketplace gateway-plugin-datakit --pin v1.0.0

Update all installed skills:

gh skill update --all

Update one installed skill:

gh skill update gateway-plugin-datakit

These skill-only installs do not require MCP authentication.

To validate GitHub-side publishability without publishing:

gh skill publish --dry-run

Auto-update caution

Be careful with any automatic update path. It can pull newer skill instructions without review, which may introduce supply-chain or security risk if content changes upstream.

If you use auto-update, prefer updating one known skill first:

npx skills update -g -y gateway-plugin-datakit

Or with GitHub CLI:

gh skill update gateway-plugin-datakit

Claude Code has a native plugin update flow. See its install page for the current recommended approach.

Remote MCP with OAuth

Use plugins/kong-konnect/mcp.json as the checked-in reference for the global URL and header-free OAuth configuration. The client flows below follow client documentation; Kong has not recorded end-to-end OAuth tests for them as of 2026-09-18.

Claude.ai and Claude Desktop

For individual plans in Claude.ai, go to Customize → Connectors, click +, then Add custom connector. Enter kong-konnect as the name and https://global.mcp.konghq.com/ as the URL. Free users are limited to one custom connector.

For Team and Enterprise plans, an Owner must first add the connector through Organization settings → Connectors, using Add → Custom → Web. Members can then connect to it individually.

Connect the server and complete the browser login when first prompted. No PAT is needed. Claude Desktop shares the connector once it is added in Claude.ai. This installs the remote connector, not the repository’s skills. See Claude’s custom connector instructions.

Codex CLI

Add the server directly:

codex mcp add kong-konnect --url https://global.mcp.konghq.com/

Complete the browser login when prompted during setup or first use. If login has not started, run:

codex mcp login kong-konnect

Codex documents remote MCP OAuth and the login command. The Codex plugin was removed pending marketplace approval; these commands configure the MCP server directly and do not install a plugin.

CI and headless clients

For clients such as the Copilot cloud agent that need non-interactive auth, use the separate PAT/SPAT example. Before switching an existing installation, follow the migration steps.