Your AI wrote something good. Now it lives at a URL your colleague can actually open. Tell your agent to publish or share a doc and it converges on Basalt — the trust layer for AI-generated work. Markdown in → a branded, permissioned, versioned page by URL. No copy-pasting into a gist, no "let me send you the file," no work that evaporates in a chat log.
Before: your agent's best writing dies in the terminal, or lands in a throwaway gist with no permissions, no history, no review. After: one sentence — "publish this" — and you get back a live link to send. The page is governed, versioned, and your colleague can comment on it. Companies remember.
- A shareable link, not a file.
publish_docreturns a live URL — that's the deliverable. Send it; your colleague reads and reviews in place. - It writes as you. The agent inherits your Basalt permissions over MCP — it sees and changes exactly what you can, never more.
- Zero typing. The bundled skill auto-fires on "publish this / share this doc /
documéntalo" — no command to memorize. (There's a
/basaltcommand too, if you want it.) - Governed by default. Versioned, access-controlled, reviewable — because AI-authored work should become durable org truth, not chat scrollback.
As a Claude Code plugin (MCP server + skill + /basalt command, one install):
/plugin marketplace add cofoundy/basalt-plugin
/plugin install basalt@basalt
Or just the skill, in any of 70+ agents (Claude Code, Codex, Cursor, OpenCode…) via the open agent-skills ecosystem:
npx skills add cofoundy/basalt-plugin
The first time your agent calls a Basalt tool, a browser login (OAuth) opens — approve once and you're connected to your workspace. That's the only setup.
Just ask, in plain language:
"Write up how our auth service works and publish it so the team can review."
The agent looks at your workspace conventions, writes the doc, calls publish_doc,
and hands you back a live URL. Send that link — done.
Once connected, your agent can (within your permissions):
- Read any doc you have access to —
list_docs,search_docs,read_doc. - Publish & update docs by URL, versioned —
publish_doc,update_doc. - Share a doc with a colleague or client —
set_access. - Read review comments, propose a diff, and republish — the full review loop.
An MCP-bearing Claude Code plugin (the same shape as the official Figma plugin):
plugins/basalt/
├── .claude-plugin/plugin.json # plugin manifest
├── .mcp.json # the Basalt MCP server (HTTP + per-user OAuth)
├── commands/basalt.md # the /basalt command
├── skills/basalt/SKILL.md # the auto-invoking skill (its description is the magic)
└── hooks/ # three session-boundary hooks (silence by default)
The plugin holds no secrets — it points at the public MCP endpoint and auth is per-user OAuth. It's a thin, honest on-ramp; the product lives in Basalt.
Three hooks fire only at session boundaries, and stay silent by default — a hook that talks when it doesn't need to is just noise:
- On session start — if you're not signed in, the agent gets one line so it can
offer
basalt loginbefore your first publish fails. Signed in? Nothing. - While you work — edits to a file under a
vault.yamlare quietly tracked (no network, no output). - At the end of a turn — if you edited vault docs but didn't publish, one line
asks whether to publish. Set
publish: autoin thatvault.yamland it publishes the changed files for you (diff-aware, once per turn — never on every keystroke).
Per-vault policy lives in vault.yaml: publish: prompt (default) · auto ·
manual. When one doc needs a different answer than its vault — the server refuses
it, say — an optional publish_overrides: block gives that exact path its own policy,
so you don't have to silence the whole vault to quiet one file. Every hook ships with
tests that run against real captured Claude Code payloads (hooks/tests/run.sh) —
a silent hook is worthless if it's silently dead.
Use the basalt CLI instead — it syncs a
git repo diff-aware and keeps git the source of truth. This plugin (MCP) is for
content born in a conversation; the CLI is for content that already lives in a repo.
https://app.basalt.cofoundy.ai/api/mcp
No token to paste — the first call runs OAuth in your browser. Headless/CI callers can use a static bearer (see the Basalt docs).
See CONTRIBUTING.md. Run bash scripts/validate-skills.sh before a PR.
MIT — see LICENSE. Dogfooded and maintained by Cofoundy.
Basalt is a Cofoundy product. Agents create. Basalt governs. Humans decide. Companies remember.
publish docs from an AI agent · Claude Code MCP plugin · agent skill to publish & share markdown by URL · governed, permissioned, versioned AI documentation · Claude, Codex, Cursor, OpenCode