Penbox agent plugin

Drive Penbox from an AI agent. One MCP server and five skills, for Claude Code, claude.ai, Codex and any MCP client.

Penbox collects documents and information from your clients. With this plugin an agent can build case templates and form templates, create and follow cases, chase what is still missing, and reach the rest of the public API.

Full guide: https://docs.penbox.io/install

Install

Claude Code

claude plugin marketplace add penbox-io/penbox-plugin && claude plugin install penbox@penbox

Then open a new session. A plugin installed mid-conversation stays invisible to the thread that installed it.

The same two steps work as slash commands inside a session:

/plugin marketplace add penbox-io/penbox-plugin
/plugin install penbox@penbox

claude.ai and Claude Desktop

Open the connectors browser and pick Penbox. If it is not listed yet, add a custom connector with this URL:

https://connect.penbox.io/mcp

Organization admin

To make the plugin available to everyone in your Claude organization: Organization settings > Plugins > add from GitHub > penbox-io/penbox-plugin.

Codex

curl -sL https://connect.penbox.io/plugin.zip -o penbox-plugin.zip
unzip -q penbox-plugin.zip -d ~/penbox-plugin
codex plugin marketplace add ~/penbox-plugin
codex plugin install penbox

Codex asks to approve the filesystem write on install, and again the first time a tool runs. codex exec cannot answer those prompts, so make the first call interactively.

Tools only, no skills

Any MCP client can use the server on its own. For Claude Code:

claude mcp add penbox --transport http https://connect.penbox.io/mcp

Sign-in

Sign-in is OAuth on first use. No token lives in this plugin.

You need a Penbox workspace first. An account without one makes list_workspaces answer zero. That looks like a broken install, but it is not one.

Skills

The server already serves the reference material through its get_skill tool. The skills here teach the order of operations. They never copy what get_skill returns.

About this repository

Everything here is public by construction: skills, assets and manifests. There is no secret in this repository, and there never will be one. The MCP server holds the logic, this plugin only tells the agent how to use it.

The repository is generated from the Penbox monorepo on every release. Each release is tagged v<version> and listed in CHANGELOG.md.

Three agents read three different manifests:

Codex rejects $schema inside .mcp.json, which is why that copy is emitted without it.

Licence

Licensed under Apache-2.0. "Penbox" and the Penbox logo are trademarks of Penbox and are not covered by this licence. The Penbox MCP server is a hosted service governed by the Penbox terms of service.