Capability Center
Capability Center
Capability Center is the canonical, read-only view of what Holaryn can discover,
load, and invoke in the current session. Open Settings → Capability Center.
The page combines installed tools, skills, plugins, connectors, commands,
provider tools, workflows, and hosted capabilities without replacing their
specialized settings pages.
The page answers four separate questions in order:
- Catalog: what is installed, its canonical identity, version, provenance,
declared access, consequences, compatibility, and health. - Source and account: whether the owning source is enabled, connected,
signed in, and authorized for the selected account. - Policy and model: whether organization, profile, project, session,
provider, and model rules allow the capability. Deny always wins. - Runtime and approval: whether the exact schema is loaded, the capability
is currently invokable, and approval is still required.
Catalog presence, a signature, publisher verification, popularity, review, or a
sandbox does not prove a capability is safe and grants no authority. Capability
Center shows those facts so you can make a decision; invocation still rechecks
the live source, account, policy, model, runtime, approval, and argument bounds.
States and reasons
Each result shows visible text for its effective states: installed, enabled,
connected, signed-in, authorized, discoverable, loaded, invokable,
approval-required, degraded, unavailable, revoked, or blocked.
Blocked and unavailable results remain visible when safe to disclose, with the
exact non-secret reason and next safe action. A missing account or permission
never becomes authorized merely because the capability appears in search.
Use Inspect to review source identity, trust, health, consequences, account
state, model compatibility, approval posture, declared permissions, OAuth
scopes, and credential slot names. Holaryn never returns credential values,
tokens, account subjects, or principal identifiers in this surface.
Loading an input schema is an explicit inspection action. The schema is bounded,
validated, hash-checked against the catalog revision, and displayed as source
data—not instructions. Loading it does not approve or invoke the capability.
Filters and source actions
Search by name, task, namespace, or source. Filters cover namespace, source,
category, account state, trust, consequence, health, model compatibility, and
permission state. Pagination uses a stable catalog cursor so a stale revision
cannot be mistaken for current authority.
Source-owned actions appear only when the current principal is authorized.
Ordinary configuration links return to MCP, Connected Apps, Plugins, Skills, or
the other owning surface. Consequential actions require confirmation and show
permission, OAuth-scope, and credential-slot differences before the source
rechecks authorization. Capability Center itself cannot mint authority.
Command line and API
The singular command group exposes the same safe projection:
holaryn capability list
holaryn capability search accessibility
holaryn capability show <capability-id>
holaryn capability explain <capability-id>
holaryn capability health
holaryn capability session
holaryn capability load-schema <capability-id> --catalog-revision <revision>
holaryn capability action <capability-id> <action-id> --catalog-revision <revision> --confirm
Use --json for scripts, --endpoint for a non-default local host, and
--auth-token-env to name the environment variable holding the host token. Tokens
are sent in the authorization header and are never printed.
Authenticated integrations can use /api/capability-fabric/v2/capabilities,
/session-view, /health, per-capability authorization explanations, bounded
schema loading, and source-authorized actions. The contract_version is 2.0;
2.x clients ignore unknown response fields, while unsupported major versions
fail explicitly.
Private-preview fallback
Capability Fabric 2.0 is additive during the v0.12.4 private preview. If the
preview is off or cannot initialize, Settings keeps the existing tool
availability projection and all specialized source settings. No source is
enabled, disabled, connected, updated, or revoked by fallback. Turn the preview
off to return to v0.12.3 behavior without deleting source configuration.
Related pages: