contro-skills

Contro Skills

Contro skills for AI coding assistants. Provides guided Contro Agentic Card setup, MCP connection help, Budget and Mandate guidance, payment approval handling, reveal safety, 3DS guidance, and denial troubleshooting.

Available Skills

Skill	Description
contro-agentic-card	Set up Contro Agentic Card from scratch, connect an AI agent through Contro MCP, and safely handle Budget-backed payment Mandates.

Prerequisites

• A Contro account.
• Contro Mobile or passkey-backed Contro web for trusted setup and approval.
• A supported AI assistant such as Codex desktop, Codex CLI, Claude Desktop, Claude Code, Cursor, OpenClaw, OpenCode, Hermes Agent, or another MCP-compatible client.

Security warning: never expose Contro Agent bearer tokens, reveal URLs, card details, OTPs, provider credentials, or checkout cookies in chat messages, logs, screenshots, or git commits. Pairing instructions are chat-safe because they contain only a short-lived Pairing code.

Installation

Recommended

npx skills add contro-com/contro-skills

Works with skill-compatible assistants that can install from GitHub repositories.

Codex Desktop

Tell Codex:

Fetch and follow instructions from https://raw.githubusercontent.com/contro-com/contro-skills/refs/heads/main/.codex/INSTALL.md

Then start a new thread and ask:

Use $contro-agentic-card to help me set up Contro Agentic Card from scratch.

Codex CLI

Tell Codex:

Fetch and follow instructions from https://raw.githubusercontent.com/contro-com/contro-skills/refs/heads/main/.codex/INSTALL.md

Claude Desktop

If Skills are enabled for your Claude account, download this repository and import skills/contro-agentic-card as a Claude Skill. If Claude asks for an upload, zip that folder first.

After import, ask Claude:

Use the Contro Agentic Card skill to help me connect my agent to Contro.

Claude Code

Run in Claude Code:

/plugin marketplace add contro-com/contro-skills
/plugin install contro-skills

OpenClaw

Tell OpenClaw:

Fetch and follow instructions from https://raw.githubusercontent.com/contro-com/contro-skills/refs/heads/main/.openclaw/INSTALL.md

Hermes Agent

Tell Hermes Agent:

Fetch and follow instructions from https://raw.githubusercontent.com/contro-com/contro-skills/refs/heads/main/.hermes-agent/INSTALL.md

Cursor

Install with the recommended command above, or use Cursor's skill/plugin install flow for:

https://github.com/contro-com/contro-skills.git

Skill Workflows

Setup from scratch:

contro-agentic-card -> Contro sign-in -> passkey or 2FA -> Wallet KYC/card readiness -> Agent setup -> Budget setup -> MCP connection

Connect an agent:

contro-agentic-card -> create Agent -> assign Budget -> copy Pairing instruction -> redeem Pairing code -> add returned Contro MCP config to agent host -> verify list_budgets

Payment request:

contro-agentic-card -> gather merchant/amount/currency/cart -> list_budgets -> request_payment -> wait for approval or release -> checkout -> get_payment

Troubleshooting:

contro-agentic-card -> inspect safe reason -> fix Contro blocker -> retry only when the same purchase intent is still valid

MCP Server

Contro Agentic Card uses a Contro MCP server configured through Pairing. Contro Mobile or web shows a one-line Pairing instruction such as Connect Contro with pairing code: AB2C-45AD in production, or Connect Contro using this {pairingUrl}/{pairingCode} outside production.

The agent redeems the Pairing code and receives host-oriented MCP configuration. Do not paste real Agent bearer tokens into public examples. Use placeholders in docs:

{
  "mcpServers": {
    "contro": {
      "url": "{MCP_URL_RETURNED_BY_PAIRING_REDEMPTION}",
      "headers": {
        "Authorization": "Bearer {AGENT_BEARER_TOKEN_RETURNED_TO_HOST_CONFIG}"
      }
    }
  }
}

Safety Notice

Contro Agentic Card lets an AI agent request bounded payment authority. It does not give the agent the user's primary card.

A released Mandate means Contro released bounded credential authority for checkout. It does not mean the merchant payment has completed.

Agents must not work around Contro approval, Budget limits, merchant controls, 3DS, provider declines, or card-network rules.

License

MIT