​
Agent-readable onboarding

Point your coding agent at one URL. It can install the provider CLI, check status, recover a broken setup, update or uninstall, and connect apps to api.malibu.tech.
The skill is the agent-facing runbook. Humans can still use the Malibu app or the headless installer.

https://get.malibu.tech/skill.md

Agent skill · install, status, recover, update, uninstall, buyer SDK

​
What to tell your agent

Paste this:
The skill covers:
  • Install the provider CLI on Apple Silicon (macOS 14+), after inspecting https://get.malibu.tech/install.sh
  • Status and recovery — version, connection, and a broken local setup
  • Update to the current signed release
  • Uninstall via the published uninstaller (inspect, dry-run, then remove)
  • Buyer SDK — point any OpenAI-compatible client at https://api.malibu.tech/v1
Discovery index: https://get.malibu.tech/.well-known/skills/index.json. Each entry lists the skill URL and the SHA-256 of its content, so an agent can check that the file it fetched is the published one. Short aliases: https://malibu.tech/skill.md and https://malibu.tech/.well-known/skills/index.json redirect to the URLs above. For site-level discovery, https://malibu.tech/llms.txt links the skill, these docs, and the litepaper. The skill only runs read-only diagnostics on its own. It asks before any mutating step (update, uninstall, credential changes), and it never prints tokens, API keys, or raw logs into the chat.

​
Invite still required

Fresh provider registration is invite-gated. The skill can install the CLI; it cannot skip admission. You still need a valid malibu.tech/j#/… invite to register a new Mac. Already-running providers update without a new invite.

​
Buyer path

If you only need the API, the skill’s buyer section is enough: GitHub OAuth for a key, then the OpenAI SDK against api.malibu.tech/v1. Full patterns: Using Malibu with the OpenAI SDK. Building a coding agent on top of Malibu? Use a Qwen-family model for multi-turn tool loops. See Tool calling for supported models, and validate every tool call before it runs (Buyer-side validation).