Install
$ agentstack add skill-meteora-pro-devboy-tools-tools-catalog ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
tools-catalog
Answer the question "what tools does the current devboy-tools installation expose, and how do I invoke them?". Useful as the first step of any exploration — other skills invoke tools through devboy tools call, and that assumes the agent knows the tool names and argument shapes.
When to use
- First contact with a devboy setup — the agent wants to know what's available before writing a multi-tool recipe.
- Before writing a new skill — confirm the tool names and argument shapes you plan to use actually exist in the active configuration.
- To confirm that a configured provider's tools really show up (e.g. after
setuporrepair).
Procedure
1. Enumerate
devboy tools list
Output is a flat list of tool names with enabled/disabled status — devboy tools list does not print descriptions or categories itself. Tools from providers that are not configured for the active context are filtered out, so an empty or short list almost always means "no provider is wired up yet" rather than "devboy is broken".
2. Inspect one tool's schema
devboy tools call does not take --help; the schema is not served as a flag. The only way to see a tool's full JSON Schema (required fields, enums, provider-specific cf_* custom-field extensions) is to ask the MCP server directly:
devboy mcp <<< '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | \
jq '.result.tools[] | select(.name=="get_issues")'
The MCP server exits after serving one request on stdin, so no background process remains.
3. Invoke a tool
Synchronous call via the CLI:
# POSIX shells
devboy tools call get_issues '{"state": "open", "limit": 20}'
# Windows cmd.exe / PowerShell
devboy tools call get_issues "{\"state\": \"open\", \"limit\": 20}"
The default JSON payload is {}. For tools that take no arguments, omit it entirely:
devboy tools call list_contexts
4. Filter to a category
If you only care about issue-tracker tools, filter the list:
devboy tools list | grep -E "issue|comment"
(There is no built-in --category filter on tools list today — that is a follow-up.)
5. Disable unused tools
Skills that only need a handful of tools can disable the rest to shrink the prompt that an MCP client sees. This is optional — most skills leave the defaults alone.
devboy tools disable some_unused_tool another_one
devboy tools list # confirm
devboy tools reset # undo
Key concepts worth narrating to the agent
- Tools are provider-scoped. A given install only exposes the tools for the providers that are configured.
tools-catalogtherefore gives a snapshot, not a universal list. - Categories are coarse.
ToolCategoryhas six members (GitRepository,IssueTracker,Epics,Releases,MeetingNotes,Messenger). A tool from an uncovered category is hidden by the executor. - Enrichment happens at
tools/listtime. Each provider gets a chance to add provider-specific parameters to the schema (custom fields, enum values drawn from real project metadata). The schema you see intools/listis already enriched — the agent does not need to flatten or merge anything. - Prefer
devboy tools callover MCP when a skill only needs one tool. It avoids paying the fulltools/listcontext tax the MCP transport imposes.
Success criteria
- The agent can name the tools that apply to the current configuration without guessing.
- For any tool the agent plans to call next, the argument shape matches the real schema.
- The agent knows whether a tool is shipped but disabled versus not available at all (different problems, different fixes).
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: meteora-pro
- Source: meteora-pro/devboy-tools
- License: Apache-2.0
- Homepage: https://meteora-pro.github.io/devboy-tools/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.