From GitHub repo to paid AI skill.
Loup gives your Skill Pack a storefront, checkout, buyer access, install tokens, MCP invocation, usage events, and revenue reporting. Your repo stays yours.
loup.app/skills/selr-ai/voice-graded-content-writer
Built on rails real creators trust
The flow
Three steps from manifest to local agent.
One YAML file, one listing, one install token. The buyer runs the skill inside Claude Code or Codex.
Push the manifest
A platform.yaml at the root of your GitHub repo declares pricing, runtime, permissions, repo ownership, and install mode.
Loup sells access
The listing, checkout, subscription, buyer install token, secrets setup, and usage ledger stay attached to the purchase.
Buyer runs the skill
One install command writes SKILL.md and mcp.json from your repo's real files. The local MCP bridge runs the purchased skill inside the buyer's own Claude Code or Codex.
One file. Everything declared.
platform.yaml at the root of your repo. Pricing, runtime class, permissions, install mode, and buyer-secret requirements.
platform.yamlyaml
schema_version: "0.1"slug: voice-graded-content-writername: "Voice-Graded Content Writer"creator: selr-aiversion: "1.0.0"license: MITpricing: model: subscription currency: AUD prices: { AUD: 19, USD: 13, EUR: 12 } interval: month trial_days: 7affiliate: tier_1_pct: 30 tier_2_pct: 5runtime: class: light modes: [local]permissions: outbound_http: allow: [api.openai.com] deny_default: trueWhy this matters
One file declares everything that costs money or trust - pricing, runtime budget, allowed outbound calls, local install mode, and buyer secrets. No hidden config.
Buyer-secret handshake
Required keys (eg. openai_api_key) show up on the install consent screen. The buyer types theirs once, AES-256-GCM encrypted in Supabase Vault. Loup never sees plaintext after decrypting inside the runtime path.
What you actually get.
Six primitives behind every pack, all running in this codebase today.
Manifest
platform.yaml is the contract.
A single file at the root of your GitHub repo. Declares pricing, permissions, runtime, install mode and affiliate intent. We parse, validate, host and bill.
platform.yaml valid
1slug: voice-graded-content-writer
2pricing:
3 model: subscription
4 prices: { AUD: 19 }
5affiliate: { tier_1_pct: 30 }
6runtime:
7 class: light
Runtime
Runs in the buyer's agent.
The installer delivers your repo's real files. Claude Code or Codex runs them on the buyer's own subscription. Sha-verified downloads, one-command updates.
Install token verified
Repo files written
MCP bridge ready
p95 invoke 812ms at 1,000 concurrent
Community
Telegram community feed. Live and two-way.
Bind a group once. Posts, version releases, and unlocks fan out to your buyers; replies bridge back. Slack and WhatsApp adapters are built, provider registration pending.
Telegram
Slack
WhatsApp
Google Chat
Affiliate ledger
30% tier-1, 5% tier-2.
Server-side ledger, lifetime, refund-clawback in window.
Buyer pays$179
Tier-1 ref$53.70
Tier-2 ref$2.68
REST API
Installs, usage, webhooks.
Bearer auth, scoped tokens, HMAC-signed outbound. 33 surfaces, every one rate limited.
GET /v1/installs
Bearer plat_••••
{ "items": [...] }
Security
RLS + default-deny.
Row-level security on every tenant table. Manifest perms default-deny outbound HTTP.
RLS
HMAC
deny-default
Proof
The dashboard is the proof loop.
Every capture below is the real app with seeded demo data, not a mock. MRR, installs, invocations, and errors land on the same screens you will run your pack from.
812ms
p95 invoke latency
at 1,000 concurrent users
33
API surfaces
every endpoint rate limited
2%
take rate from
on the Scale tier
30%
lifetime affiliate
tier-1 referral share
loup.app/dashboard/creator
The creator command center. Revenue, installs, runtime health, and the next action that unblocks growth.
loup.app/dashboard/creator/logs
Runtime logs. Every invoke with tokens, latency, and cost attached.
loup.app/dashboard/buyer
The buyer view. Subscriptions, encrypted secrets, install tokens, affiliate link.
Every Skill Pack lives in your GitHub repo. We host the rail, you host the code. If Loup disappears tomorrow, your kit on your buyer’s laptop still exists. That’s the only honest way to ask someone to build their business on top of you.
See it in action.
Browse what builders have shipped, or scaffold your own from a one-line description.