colibri-daemon — agent supervisor, skills catalog, Glasspane state machinecolibri-tui — live ratatui dashboard (agent states, spawn/kill, sessions)colibri-mcp — MCP bridge for Zed, Claude Code, Cursor, and other MCP clientspi coding agent harness (npm global)
+ MCP client examples are installed under
+ /usr/local/share/clawdie-iso/mcp-examples/.
+
diff --git a/live/operator-session/mcp-examples/README.md b/live/operator-session/mcp-examples/README.md
new file mode 100644
index 00000000..a02c8e54
--- /dev/null
+++ b/live/operator-session/mcp-examples/README.md
@@ -0,0 +1,94 @@
+# Colibri MCP client examples
+
+The live USB includes `/usr/local/bin/colibri-mcp`, an MCP server that exposes
+Colibri status, glasspane snapshots, task lists, and skills to MCP-capable
+editors/assistants.
+
+Default posture is read-only. Colibri write tools are available only when the
+MCP server process is launched with `COLIBRI_MCP_WRITE=1`. External MCP tool
+calls are available only when launched with `COLIBRI_MCP_EXTERNAL_CALL=1`.
+
+## Generic MCP client config
+
+Most MCP clients accept a config shaped like `mcpServers`. Use one of:
+
+- `mcp-readonly.json` — safe default profile
+- `mcp-trusted-write.json` — explicit trusted profile with Colibri write tools enabled
+- `mcp-external-call.json` — explicit trusted profile for external MCP tool calls
+- `external-mcp.sample.json` — example external MCP server registry
+
+## Quick checks
+
+```sh
+colibri-mcp tools
+COLIBRI_MCP_WRITE=1 colibri-mcp tools
+colibri-mcp socket-path
+COLIBRI_MCP_EXTERNAL_CONFIG=/usr/local/share/clawdie-iso/mcp-examples/external-mcp.sample.json \
+ colibri-mcp tools
+```
+
+## Claude Code example
+
+If your Claude Code version supports `claude mcp add`, adapt:
+
+```sh
+claude mcp add colibri /usr/local/bin/colibri-mcp
+claude mcp add colibri-write --env COLIBRI_MCP_WRITE=1 /usr/local/bin/colibri-mcp
+```
+
+If your version uses a JSON config file instead, copy the matching object from
+`mcp-readonly.json` or `mcp-trusted-write.json`.
+
+## Zed / Cursor example
+
+Zed, Cursor, and other MCP-capable editors may use slightly different config
+file paths or wrapper keys by version. The server object is the important part:
+
+```json
+{
+ "command": "/usr/local/bin/colibri-mcp",
+ "args": [],
+ "env": {}
+}
+```
+
+For a write-capable profile, add:
+
+```json
+{
+ "env": { "COLIBRI_MCP_WRITE": "1" }
+}
+```
+
+Only enable the write profile for trusted workspaces/sessions.
+
+## External MCP server prototype
+
+Newer Colibri builds can also use `colibri-mcp` as a small MCP host/client for
+other stdio MCP servers. Copy the sample registry into the live config path and
+edit it for the servers you actually want:
+
+```sh
+mdo -u root mkdir -p /usr/local/etc/colibri
+mdo -u root cp /usr/local/share/clawdie-iso/mcp-examples/external-mcp.sample.json \
+ /usr/local/etc/colibri/external-mcp.json
+```
+
+Read-only discovery works by default through these tools:
+
+- `colibri_external_mcp_servers`
+- `colibri_external_mcp_list_tools`
+
+Calling external MCP tools requires an explicit trusted profile:
+
+```json
+{
+ "command": "/usr/local/bin/colibri-mcp",
+ "args": [],
+ "env": {
+ "COLIBRI_MCP_EXTERNAL_CALL": "1"
+ }
+}
+```
+
+External MCP tool calls are intentionally separate from `COLIBRI_MCP_WRITE=1`.
diff --git a/live/operator-session/mcp-examples/external-mcp.sample.json b/live/operator-session/mcp-examples/external-mcp.sample.json
new file mode 100644
index 00000000..079057b4
--- /dev/null
+++ b/live/operator-session/mcp-examples/external-mcp.sample.json
@@ -0,0 +1,16 @@
+{
+ "servers": {
+ "demo": {
+ "command": "/usr/local/bin/demo-mcp-server",
+ "args": ["--stdio"],
+ "env": {
+ "DEMO_MODE": "1"
+ }
+ },
+ "filesystem-example": {
+ "command": "npx",
+ "args": ["-y", "@modelcontextprotocol/server-filesystem", "/home/clawdie"],
+ "env": {}
+ }
+ }
+}
diff --git a/live/operator-session/mcp-examples/mcp-external-call.json b/live/operator-session/mcp-examples/mcp-external-call.json
new file mode 100644
index 00000000..e93fad72
--- /dev/null
+++ b/live/operator-session/mcp-examples/mcp-external-call.json
@@ -0,0 +1,11 @@
+{
+ "mcpServers": {
+ "colibri-external-call": {
+ "command": "/usr/local/bin/colibri-mcp",
+ "args": [],
+ "env": {
+ "COLIBRI_MCP_EXTERNAL_CALL": "1"
+ }
+ }
+ }
+}
diff --git a/live/operator-session/mcp-examples/mcp-readonly.json b/live/operator-session/mcp-examples/mcp-readonly.json
new file mode 100644
index 00000000..56617b39
--- /dev/null
+++ b/live/operator-session/mcp-examples/mcp-readonly.json
@@ -0,0 +1,9 @@
+{
+ "mcpServers": {
+ "colibri": {
+ "command": "/usr/local/bin/colibri-mcp",
+ "args": [],
+ "env": {}
+ }
+ }
+}
diff --git a/live/operator-session/mcp-examples/mcp-trusted-write.json b/live/operator-session/mcp-examples/mcp-trusted-write.json
new file mode 100644
index 00000000..68151d90
--- /dev/null
+++ b/live/operator-session/mcp-examples/mcp-trusted-write.json
@@ -0,0 +1,11 @@
+{
+ "mcpServers": {
+ "colibri-write": {
+ "command": "/usr/local/bin/colibri-mcp",
+ "args": [],
+ "env": {
+ "COLIBRI_MCP_WRITE": "1"
+ }
+ }
+ }
+}
diff --git a/scripts/stage-colibri-iso.sh b/scripts/stage-colibri-iso.sh
index 9cdc4391..10fce5ba 100755
--- a/scripts/stage-colibri-iso.sh
+++ b/scripts/stage-colibri-iso.sh
@@ -61,6 +61,7 @@ mkdir -p "${BIN_DIR}" "${RC_DIR}" "${ETC_DIR}" "${NEWSYSLOG_DIR}" "${DB_DIR}" "$
copy_bin colibri-daemon
copy_bin colibri
copy_bin colibri-smoke-agent
+copy_bin colibri-mcp
if [ "${COLIBRI_STAGE_INCLUDE_TUI}" != "0" ] && [ -x "${COLIBRI_ARTIFACT_DIR}/colibri-tui" ]; then
copy_bin colibri-tui
@@ -142,6 +143,8 @@ Runtime validation:
colibri status
colibri create-task --title "iso smoke"
colibri list-tasks --status queued
+ colibri-mcp tools
+ COLIBRI_MCP_WRITE=1 colibri-mcp tools # trusted write-capable MCP profile
service colibri_daemon stop
EOF
diff --git a/skills/iso-build/SKILL.md b/skills/iso-build/SKILL.md
index da1b24ae..056e5d98 100644
--- a/skills/iso-build/SKILL.md
+++ b/skills/iso-build/SKILL.md
@@ -151,11 +151,13 @@ cargo build --workspace --release
ls -lh target/release/colibri-daemon \
target/release/colibri \
target/release/colibri-smoke-agent \
+ target/release/colibri-mcp \
target/release/colibri-tui
file target/release/colibri-daemon \
target/release/colibri \
target/release/colibri-smoke-agent \
+ target/release/colibri-mcp \
target/release/colibri-tui
target/release/colibri --help | head
@@ -183,8 +185,9 @@ cargo clean
rm -rf /tmp/colibri-*
```
-`colibri-tui` is optional in the staging script, but desired for this operator
-USB target and should be verified with the other three binaries.
+`colibri-mcp` is part of the out-of-the-box operator USB. `colibri-tui` is
+optional in the staging script, but desired for this operator USB target and
+should be verified with the required binaries.
### Deployed-system Clawdie service boundary