devantler · Nov 7, 2026 · Nov 4, 2026 · Nov 7, 2026 · Nov 7, 2026 · Nov 7, 2026
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -20,7 +20,7 @@
     {
       "name": "agentic-engineering",
       "description": "The autonomous engineering system for repository portfolios and everything its agents need — engineer, read-only surveyor, meta-engineer and Flux troubleshooter agents; portfolio, product, spend and improvement workflows; GitHub, CodeRabbit review, security, library documentation, Go, Kubernetes, Flux, Talos, SvelteKit frontend, Stripe payments, engineering-practice, design, product-management, marketing, finance and productivity skills; and the MCP servers they use; configured by the consumer AGENTS.md",
-      "version": "7.1.1",
+      "version": "7.2.0",
       "source": "./plugins/agentic-engineering"
     },
     {

diff --git a/.github/plugin/marketplace.json b/.github/plugin/marketplace.json
@@ -20,7 +20,7 @@
     {
       "name": "agentic-engineering",
       "description": "The autonomous engineering system for repository portfolios and everything its agents need — engineer, read-only surveyor, meta-engineer and Flux troubleshooter agents; portfolio, product, spend and improvement workflows; GitHub, CodeRabbit review, security, library documentation, Go, Kubernetes, Flux, Talos, SvelteKit frontend, Stripe payments, engineering-practice, design, product-management, marketing, finance and productivity skills; and the MCP servers they use; configured by the consumer AGENTS.md",
-      "version": "7.1.1",
+      "version": "7.2.0",
       "source": "./plugins/agentic-engineering"
     },
     {

diff --git a/docs/plugins.md b/docs/plugins.md
@@ -6,7 +6,7 @@ A **skill** teaches an assistant a task. An **agent** gives it a specialized rol
 
 | Plugin | Resources | Description |
 |--------|-----------|-------------|
-| [`agentic-engineering`](../plugins/agentic-engineering/) | `accessibility-review`, `agent-improvement`, `agent-instructions`, `architecture`, `audit-support`, `autofix`, `brand-review`, `campaign-plan`, `check-skills`, `close-management`, `code-review`, `codeql`, `competitive-brief`, `connector-setup`, `content-creation`, `context7-mcp`, `conventional-release`, `debug`, `dependabot`, `dependency-scanning`, `deploy-checklist`, `design-critique`, `design-handoff`, `design-system`, `documentation`, `draft-content`, `email-sequence`, `financial-statements`, `find-skills`, `frontend-design`, `gh-cli`, `gh-stack`, `git-commit`, `github-actions-docs`, `github-actions-efficiency`, `github-actions-hardening`, `github-issues`, `gitops-cluster-debug`, `gitops-knowledge`, `gitops-tenant-onboarding`, `golang-pro`, `grilling`, `incident-response`, `journal-entry`, `journal-entry-prep`, `memory-management`, `metrics-review`, `performance-report`, `portfolio-maintenance`, `product-brainstorming`, `product-documentation`, `product-engineering`, `prototype`, `reconciliation`, `refactor`, `research-synthesis`, `roadmap-update`, `secret-scanning`, `self-improvement`, `seo-audit`, `siderolabs`, `sox-testing`, `sprint-planning`, `stakeholder-update`, `standup`, `start`, `stripe-best-practices`, `stripe-docs`, `svelte-core-bestpractices`, `synthesize-research`, `system-design`, `task-management`, `tech-debt`, `test-driven-development`, `testing-strategy`, `update`, `upgrade-stripe`, `user-research`, `ux-copy`, `variance-analysis`, `ways-of-working`, `web-design-guidelines`, `workspace-conventions`, `write-contributing`, `write-docs-introduction`, `write-readme`, `write-spec` (skills) · `agent-improver`, `agentic-engineer`, `flux-troubleshooter`, `portfolio-surveyor` (agents) · `aws-knowledge`, `cloudflare-docs`, `context7`, `flux-operator-mcp`, `github`, `github-ghas-tools`, `kubescape`, `siderolabs-docs`, `stripe`, `svelte`, `terraform-registry` (MCP servers) | The autonomous engineering system for a whole repository portfolio, and everything its agents need — engineer, read-only surveyor, meta-engineer and Flux troubleshooter agents; operating, product, spend and improvement workflows; GitHub, CodeRabbit review, security, library documentation, Go, Kubernetes, Flux, Talos, SvelteKit frontend, Stripe payments, engineering-practice, design, product-management, marketing, finance and productivity skills; and the MCP servers they use. Configured by the consumer's `AGENTS.md` |
+| [`agentic-engineering`](../plugins/agentic-engineering/) | `accessibility-review`, `agent-improvement`, `agent-instructions`, `architecture`, `audit-support`, `autofix`, `brand-review`, `campaign-plan`, `check-skills`, `close-management`, `code-review`, `codeql`, `competitive-brief`, `connector-setup`, `content-creation`, `context7-mcp`, `conventional-release`, `debug`, `dependabot`, `dependency-scanning`, `deploy-checklist`, `design-critique`, `design-handoff`, `design-system`, `documentation`, `draft-content`, `email-sequence`, `financial-statements`, `find-skills`, `frontend-design`, `gh-cli`, `gh-stack`, `git-commit`, `github-actions-docs`, `github-actions-efficiency`, `github-actions-hardening`, `github-issues`, `gitops-cluster-debug`, `gitops-knowledge`, `gitops-tenant-onboarding`, `golang-pro`, `grilling`, `incident-response`, `journal-entry`, `journal-entry-prep`, `memory-management`, `metrics-review`, `performance-report`, `portfolio-maintenance`, `product-brainstorming`, `product-documentation`, `product-engineering`, `prototype`, `reconciliation`, `refactor`, `research-synthesis`, `roadmap-update`, `secret-scanning`, `self-improvement`, `seo-audit`, `siderolabs`, `sox-testing`, `sprint-planning`, `stakeholder-update`, `standup`, `start`, `stripe-best-practices`, `stripe-docs`, `svelte-core-bestpractices`, `synthesize-research`, `system-design`, `task-management`, `tech-debt`, `test-driven-development`, `testing-strategy`, `update`, `upgrade-stripe`, `user-research`, `ux-copy`, `variance-analysis`, `ways-of-working`, `web-design-guidelines`, `workspace-conventions`, `write-contributing`, `write-docs-introduction`, `write-readme`, `write-spec` (skills) · `agent-improver`, `agentic-engineer`, `flux-troubleshooter`, `portfolio-surveyor` (agents) · `aws-knowledge`, `cloudflare-docs`, `context7`, `coroot`, `flux-operator-mcp`, `github`, `github-ghas-tools`, `kubescape`, `siderolabs-docs`, `stripe`, `svelte`, `terraform-registry` (MCP servers) | The autonomous engineering system for a whole repository portfolio, and everything its agents need — engineer, read-only surveyor, meta-engineer and Flux troubleshooter agents; operating, product, spend and improvement workflows; GitHub, CodeRabbit review, security, library documentation, Go, Kubernetes, Flux, Talos, SvelteKit frontend, Stripe payments, engineering-practice, design, product-management, marketing, finance and productivity skills; and the MCP servers they use. Configured by the consumer's `AGENTS.md` |
 | [`vibe-coding`](../plugins/vibe-coding/) | `needs-stack-mapping`, `allowed-stack-guardrail`, `jargon-free-voice` (skills) · `vibe-coding-companion` (agent) | Build a product by conversation alone — plain-language companion agent + guardrailed needs-to-stack skills for people with no technical background |
 | [`ksail`](../plugins/ksail/) | `ksail` (skill) · `ksail` (MCP server) | Create and operate Kubernetes clusters and GitOps workloads with the KSail CLI — needs `ksail` on `PATH`; PolyForm Shield licensed |
 

diff --git a/docs/resources.md b/docs/resources.md
@@ -33,7 +33,7 @@ armed, or with a schedule pointing at an entrypoint that no longer resolves. The
 ## MCP servers
 
 A plugin may bundle [MCP](https://modelcontextprotocol.io) servers as well as skills. The
-[`agentic-engineering`](../plugins/agentic-engineering/) plugin bundles eleven, authored once in its
+[`agentic-engineering`](../plugins/agentic-engineering/) plugin bundles twelve, authored once in its
 [`.mcp.json`](../plugins/agentic-engineering/.mcp.json) (`mcpServers` map), and the
 [`ksail`](../plugins/ksail/) plugin bundles the KSail server, which needs `ksail` on `PATH`:
 
@@ -42,6 +42,7 @@ A plugin may bundle [MCP](https://modelcontextprotocol.io) servers as well as sk
 | `aws-knowledge` | AWS's hosted knowledge server: AWS documentation and regional availability, read-only | Nothing; it works without an AWS account |
 | `cloudflare-docs` | Cloudflare's hosted documentation search, read-only | Nothing; it is public |
 | `context7` | Upstash's Context7: current documentation and code examples for libraries and frameworks, read-only | Nothing; it works without an account |
+| `coroot` | Your own Coroot instance's `/mcp` endpoint: topology, alerts, incidents, traces, metrics and logs; a Viewer key cannot resolve alerts, and in the Enterprise Edition can save an investigation onto an incident | `COROOT_URL`, a pinned address and a service-account API key; see the plugin README |
 | `flux-operator-mcp` | A live cluster's Flux resources, read-only (`serve --read-only`), for the `gitops-cluster-debug` skill and the `flux-troubleshooter` agent | The `flux-operator-mcp` binary, a POSIX `sh`, and cluster access through `KUBECONFIG` (default `~/.kube/config`) |
 | `github` | GitHub's everyday tools: repositories, issues, pull requests, Actions, labels and projects, read, and issue, label, comment, branch, new pull request and project writes; merging, pull request edits, reviews, repository creation and deletion, file writes and workflow runs are excluded | A GitHub sign-in; see below |
 | `github-ghas-tools` | GitHub's security tools, read-only (`X-MCP-Readonly`): alerts, advisories and dependency vulnerability lookups | A GitHub sign-in; see below |
@@ -51,16 +52,17 @@ A plugin may bundle [MCP](https://modelcontextprotocol.io) servers as well as sk
 | `svelte` | The Svelte team's hosted server at `https://mcp.svelte.dev/mcp`: Svelte 5 and SvelteKit documentation, the `svelte-autofixer` and playground links, all read-only | Nothing; it is public |
 | `terraform-registry` | HashiCorp's Terraform server, `registry` toolset only: public provider and module documentation, read-only | The `terraform-mcp-server` binary |
 
-`flux-operator-mcp` talks only to your clusters. `kubescape` also downloads Kubescape's released
-policy bundle from GitHub each time it starts, and `terraform-registry` runs locally but queries the
-public Terraform Registry. Every other server is hosted by a third party, so every call to one,
-including a documentation search, reaches that service. If your agents must not contact a third
-party, disable
-its server in your tool's MCP settings; denying single tools does not stop the connection. Among
+`flux-operator-mcp` talks only to your clusters, and `coroot` only to the Coroot instance you point
+it at. `kubescape` also downloads Kubescape's released policy bundle from GitHub each time it
+starts, and `terraform-registry` runs locally but queries the public Terraform Registry. Every
+other server is hosted by a third party, so every call to one, including a documentation search,
+reaches that service. If your agents must not contact a third party, disable its server in your
+tool's MCP settings; denying single tools does not stop the connection. Among
 the servers you keep, `github` and `stripe` can change things: `github` writes to GitHub as the
-signed-in account, and `stripe` writes to your Stripe account and can move money. The
-`siderolabs-docs` `submit_feedback` and `stripe` `send_stripe_feedback` tools send reports to Sidero
-Labs and Stripe. The Svelte autofixer and playground tools send the code they are given to Svelte's
+signed-in account, and `stripe` writes to your Stripe account and can move money. With a Viewer
+key, `coroot`'s Enterprise Edition `investigate_anomaly` can save its analysis onto an incident.
+The `siderolabs-docs` `submit_feedback` and `stripe` `send_stripe_feedback` tools send reports to
+Sidero Labs and Stripe. The Svelte autofixer and playground tools send the code they are given to Svelte's
 service, and the playground link carries that code. The
 [plugin README](../plugins/agentic-engineering/README.md#bundled-mcp-servers) covers each server's
 sign-in and what to deny.

diff --git a/plugins/agentic-engineering/.claude-plugin/plugin.json b/plugins/agentic-engineering/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "agentic-engineering",
   "description": "The autonomous engineering system for repository portfolios and everything its agents need — engineer, read-only surveyor, meta-engineer and Flux troubleshooter agents; portfolio, product, spend and improvement workflows; GitHub, CodeRabbit review, security, library documentation, Go, Kubernetes, Flux, Talos, SvelteKit frontend, Stripe payments, engineering-practice, design, product-management, marketing, finance and productivity skills; and the MCP servers they use; configured by the consumer AGENTS.md",
-  "version": "7.1.1",
+  "version": "7.2.0",
   "author": {
     "name": "devantler-tech",
     "url": "https://github.com/devantler-tech"

diff --git a/plugins/agentic-engineering/.codex-plugin/plugin.json b/plugins/agentic-engineering/.codex-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "agentic-engineering",
   "description": "The autonomous engineering system for repository portfolios and everything its agents need — engineer, read-only surveyor, meta-engineer and Flux troubleshooter agents; portfolio, product, spend and improvement workflows; GitHub, CodeRabbit review, security, library documentation, Go, Kubernetes, Flux, Talos, SvelteKit frontend, Stripe payments, engineering-practice, design, product-management, marketing, finance and productivity skills; and the MCP servers they use; configured by the consumer AGENTS.md",
-  "version": "7.1.1",
+  "version": "7.2.0",
   "author": {
     "name": "devantler-tech",
     "url": "https://github.com/devantler-tech"

diff --git a/plugins/agentic-engineering/.mcp.json b/plugins/agentic-engineering/.mcp.json
@@ -12,6 +12,11 @@
       "type": "http",
       "url": "https://mcp.context7.com/mcp"
     },
+    "coroot": {
+      "type": "http",
+      "url": "${COROOT_URL}/mcp",
+      "headersHelper": "bash \"${CLAUDE_PLUGIN_ROOT}/scripts/coroot-mcp-headers.sh\" \"${CLAUDE_PLUGIN_DATA}\""
+    },
     "flux-operator-mcp": {
       "command": "sh",
       "args": [

diff --git a/plugins/agentic-engineering/CHANGELOG.md b/plugins/agentic-engineering/CHANGELOG.md
@@ -1,5 +1,26 @@
 # Changelog — `agentic-engineering`
 
+## 7.2.0 — 2026-11-05
+
+**Added** — `coroot`, the MCP endpoint at `/mcp` that Coroot serves itself, which accepts
+service-account API keys from Coroot v1.26.8: application topology, alerts, SLO incidents, traces,
+PromQL metrics and logs. Coroot checks every tool call against the caller's role, so with a
+service account in the Viewer role the agents can investigate but cannot resolve alerts. In the
+Enterprise Edition a Viewer's `investigate_anomaly` can still save its analysis onto an incident
+when given an `incident_key`. The server reads its address from `COROOT_URL` in Claude Code's
+environment. The new `scripts/coroot-mcp-headers.sh` sends the API key from `coroot-api-key` in
+the plugin data directory only when Claude Code connects to the address pinned in `coroot-url`
+there, followed by `/mcp`, over `https://` or loopback `http://`; so neither the address nor the
+key goes into any repository, and a changed `COROOT_URL` cannot redirect the key (someone who
+controls Claude Code's whole environment still could, through its proxy settings).
+
+### Upgrading to 7.2.0
+
+Nothing is required. Until `COROOT_URL` and the two files are set, `coroot` shows a
+missing-variable warning or a failed connection and the other servers keep working. To use it, set
+them up as the README's *Bundled MCP servers* section describes. Copilot CLI, VS Code and Codex
+are expected to need their own MCP settings for Coroot.
+
 ## 7.1.1 — 2026-11-04
 
 **Fixed** — the README now says why `github` excludes `delete_repository` although a plain probe

diff --git a/plugins/agentic-engineering/CONNECTORS.md b/plugins/agentic-engineering/CONNECTORS.md
@@ -11,7 +11,7 @@ says what each placeholder maps to here.
 | `~~CI/CD` | GitHub Actions, read through the `github` server's `actions` toolset or `gh` | Another CI system's own connector |
 | `~~project tracker` | GitHub Issues and Projects, through the `github` server or `gh` | Another tracker's own connector, if the user has one |
 | `~~knowledge base` | The repository's own documentation and `AGENTS.md`; `context7` for library documentation | Another knowledge base's own connector |
-| `~~monitoring` | Live cluster state through `flux-operator-mcp` and `kubescape` | Metrics, logs and traces need the user's own connector |
+| `~~monitoring` | Live cluster state through `flux-operator-mcp` and `kubescape`; metrics, logs, traces and alerts through `coroot` once it is set up | Another monitoring tool's own connector |
 | `~~design tool`, `~~design` | Nothing bundled | A design tool's own connector |
 | `~~chat` | Nothing bundled | A chat tool's own connector |
 | `~~incident management` | Nothing bundled | An incident tool's own connector |