plugin.json

{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "getstackrun",
  "version": "1.0.0",
  "description": "Oversee the AI agents you run through STACK: check what they did, revoke their access and verify the audit log.",
  "author": {
    "name": "Tomi Lupsakko",
    "url": "https://getstack.run"
  },
  "homepage": "https://getstack.run",
  "keywords": [
    "ai agents",
    "agent oversight",
    "revocation",
    "audit log",
    "mcp"
  ],
  "extensions": {
    "com.openai": {
      "interface": {
        "displayName": "getstackrun",
        "shortDescription": "Oversee and revoke AI agents",
        "longDescription": "STACK runs between AI agents and the systems they use. Each agent works under a short-lived Passport that states what it may do. STACK checks every call against that Passport, records suspicious behavior, can deny configured actions and writes each decision to a hash-chained audit log.\n\nThis connector brings the oversight side of STACK into the conversation. With it you can:\n- list your agents, their permissions and any that are blocked\n- see active Passports and revoke one, every Passport for an agent, or all of them\n- decide flagged Passport checkouts waiting for review\n- open, complete or revoke Missions and see what an agent did inside one\n- read the audit log, verify its hash chain and export signed records\n- list security events, adjust detector and PII-redaction settings, and scan text for prompt injection\n- manage notification rules, inbound webhooks, drop-offs and fleets\n- check usage\n\nA revocation applies to the agent's next call through STACK and cascades to any Passports it delegated.\n\nThe connector does not call third-party services, connect or display credentials, issue Passports or run paid skills. Those stay in the STACK Console, the CLI and STACK's full MCP endpoint. Sign-in uses OAuth, and a token issued to this connector is refused by the full endpoint.\n\nSTACK's application services run in Stockholm and its database runs in Frankfurt.\n\nRequires a STACK account with at least one registered agent. Setup: https://getstack.run/docs/mcp-setup#directory",
        "developerName": "Tomi Lupsakko",
        "category": "Developer Tools",
        "websiteURL": "https://getstack.run",
        "supportURL": "https://getstack.run/contact",
        "privacyPolicyURL": "https://getstack.run/privacy",
        "termsOfServiceURL": "https://getstack.run/terms",
        "defaultPrompt": [
          "Which of my agents are blocked right now, and why?",
          "Show the flagged checkouts waiting for review and summarize what each agent did.",
          "Verify my audit log's hash chain and list today's security events."
        ],
        "composerIcon": "./assets/icon.png",
        "composerIconDark": "./assets/icon-dark.png",
        "logo": "./assets/logo.png",
        "logoDark": "./assets/logo-dark.png"
      },
      "review": {
        "test_cases": {
          "positive": [
            {
              "description": "See which agents are blocked and why",
              "prompt": "Which of my agents are blocked right now, and why?",
              "tools_triggered": "stack_list_agents",
              "expected_behavior": "Lists the account's agents and names the blocked agent (quarantine-bot) with its recorded block reason."
            },
            {
              "description": "List live Passports",
              "prompt": "List the Passports that are active right now.",
              "tools_triggered": "stack_list_active_passports",
              "expected_behavior": "Lists the active (unexpired, unrevoked) Passports, including those held by review-demo."
            },
            {
              "description": "Revoke an agent's access",
              "prompt": "Revoke every active Passport for the review-demo agent.",
              "tools_triggered": "stack_list_agents, stack_revoke_agent_passports",
              "expected_behavior": "Confirms the revocation. A follow-up list shows no active Passports for review-demo."
            },
            {
              "description": "Block a flagged checkout",
              "prompt": "Show the flagged checkouts waiting for review and block the first one.",
              "tools_triggered": "stack_list_pending_reviews, stack_decide_review",
              "expected_behavior": "Lists the flagged checkout with its flags and records a block; that agent shows as blocked with the reason."
            },
            {
              "description": "Verify the audit log",
              "prompt": "Verify my audit log's hash chain.",
              "tools_triggered": "stack_audit_verify_chain",
              "expected_behavior": "Returns valid: true with the number of entries checked."
            }
          ],
          "negative": [
            {
              "description": "Unrelated question",
              "prompt": "What's the weather in Stockholm tomorrow?"
            },
            {
              "description": "Credential storage is not offered",
              "prompt": "Save my OpenAI API key in STACK."
            },
            {
              "description": "No third-party calls",
              "prompt": "Call the Stripe API and refund order 1042."
            }
          ]
        },
        "commerce": false,
        "demo_recording_url": "https://getstack.run/review/j1a3oF3UnwIxJvvwfcywH7qx/getstackrun-chatgpt-walkthrough.gif"
      },
      "publication": {
        "release_notes": "First release. Oversight tools for AI agents run through STACK: agents, Passports, review decisions, Missions, audit log, detectors, notifications and usage."
      },
      "apps": "./.app.json"
    }
  }
}