NOTICKET Publish five public Apollo skills v0.2 by SamuelTElliott · Pull Request #9 · apolloio/apollo-mcp-plugin

SamuelTElliott · 2026-07-13T21:41:55Z

Purpose

Publish five public Apollo workflow skills from one lean source while preserving the current multi-client MCP setup guidance.

Scope

Exactly eight files in the final diff:

five SKILL.md files: onboarding, analytics, enrich-lead, prospect, and sequence-load
catalog/skills.json
one dependency-free validator
the root README

The Claude, Cursor, and MCP manifests remain aligned at 0.1.1; release versioning stays with the team-owned registry work.

Why these changes exist

Keep the skills optional and the Apollo MCP usable without them.
Use standard Agent Skills name/description frontmatter and unqualified Apollo tool names.
Preserve Claude Code, Cowork, Cursor, Copilot/VS Code, OAuth, troubleshooting, and model guidance from current main.
Use free apollo_organizations_lookup for shallow organization discovery by name, domain, or supported filters.
Reserve one-credit apollo_mixed_companies_search for requests that explicitly require full organization details in search results.
Match live credit, waterfall-capability, async polling, ten-person bulk, contact-upsert, and sequence remove/stop contracts.
Keep credit, private-data, contact-write, enrollment, activation, send, remove, and stop approvals distinct.

Deliberately excluded

No installer, public platform matrix, private Replit skill, internal eval, workflow, contract package, lockfile, customer data, credential, local path, or unpublished evidence.

Verification

node scripts/validate-skills.mjs: pass on Windows and Linux/WSL.
All five skills pass the standards-aligned local skill validator.
Three OAuth-only, read-only production analytics smoke scenarios passed: current-user email metrics, team call outcomes by user, and ranked rep email metrics.
git diff --check: pass; committed content is LF with no local-machine markers.
Independent final review: no unresolved code P0/P1/P2 findings.

Release gates

Leadgenie PR #97251 merged the canonical apollo_organizations_lookup contract. Vinayak confirmed the tool is visible for at least one rollout-enabled team, but GA PR #99335 remains open and the tool is still absent from another authenticated production Apollo MCP tool list.

Keep this PR draft and do not publish v0.2.0 until:

the GA change is merged and deployed
tools/list includes apollo_organizations_lookup for a representative intended workspace
a read-only shallow-discovery smoke test succeeds without a credit charge

Do not silently substitute paid company search.

Registry PR #10 is merged. Registry PR #5 remains a separate owner decision. MCP connectivity does not prove that any client installed or discovered these skills.

This PR supersedes closed PRs #7 and #8.

kodem-security · 2026-07-13T21:42:11Z

Kodem Security Scan Summary

Status	Check	Issues by Severity	Link
✅ Passed	Code Weakness Security Report	🟧 M: 2	Link to Check

Note: Kai marked all findings as likely false positives.

orca-security-us

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0 0 0 0	View in Orca
Passed	Secrets	0 0 0 0	View in Orca
Passed	Vulnerabilities	0 0 0 0	View in Orca

alexander-rykhlitskiap · 2026-07-15T16:43:32Z

-In Claude Code, run:
-
-```
-/plugin marketplace add apolloio/apollo-mcp-plugin


Don't our users need to know this command? Why do we remove it and all other instructions?

+1, and note it's not just removed, the new validator actively forbids adding these commands back (see my comment on validate-skills.mjs). Needs to be restored.

You're right here. I restored the Claude Code, Cowork, and Cursor setup in this branch, but main has since picked up a much stronger README through #12 and #13. I'm going to rebase this without replacing those install, OAuth, registry, and troubleshooting sections, then add only the public-skill guidance.

This is fixed now. The root README keeps the current Claude Code, Cowork, Cursor, Copilot/VS Code, OAuth, registry, and troubleshooting instructions, and adds the public-skill guidance without replacing them.

Use apollo_organizations_lookup for free name/domain resolution, keep filtered company search on the confirmed one-credit tool, restore verified Claude/Cowork/Cursor setup, and remove the volatile public platform matrix.

marcus-gomes-v

Really like the staged-approval safety model, separate gates for credits/reveal/writes/enroll/send is the right shape.

But requesting changes on three things: prospect depends on a tool that doesn't exist on production MCP yet, the install instructions were removed and the validator forbids adding them back, and analytics dropped its whole metric catalog with no end-to-end run as evidence.

Happy to approve once those land.

marcus-gomes-v · 2026-07-20T09:34:32Z

+      "summary": "Build a ranked search-first prospect list and gate enrichment, private data, and saves.",
+      "required_tools": [
+        "apollo_mixed_people_api_search",
+        "apollo_organizations_lookup",


Don't know if this tool exstis in the production MCP surface today — I checked the live tool list and there's no apollo_organizations_organization_lookup.

The PR body says we only publish after this contract exists, but nothing in the repo enforces that gate, what is the plan for this?

You were right to flag this. #97251 has since merged the canonical apollo_organizations_lookup name, but as of today it still isn't present in the authenticated production tool list I checked. I'm keeping this release blocked until tools/list shows it and a read-only name/domain smoke test passes. I won't silently fall back to paid company search.

I kept this fail-closed. The catalog now uses the canonical apollo_organizations_lookup name, but the PR remains draft because that tool still was not present in the authenticated production tool list I checked. Since this is a content-only repo, I did not add a pretend runtime check; publishing is blocked until tools/list and a read-only name/domain smoke test both pass.

apollo_organizations_lookup is now present in the tools

marcus-gomes-v · 2026-07-20T09:36:43Z

-In Claude Code, run:
-
-```
-/plugin marketplace add apolloio/apollo-mcp-plugin


+1, and note it's not just removed, the new validator actively forbids adding these commands back (see my comment on validate-skills.mjs). Needs to be restored.

marcus-gomes-v · 2026-07-20T09:38:02Z

+    [/"visibility"\s*:\s*"private"/i, "private visibility"],
+    [/\bevals?\b/i, "evaluation artifact reference"],
+    [/\$ARGUMENTS/, "client-specific argument placeholder"],
+    [/\/apollo:/, "client-specific slash command"],


This validator hard-bans /apollo: and /plugin in all public content, which means the install instructions Alexander asked about can never come back without editing the validator too?

Good callout. The portability check belongs on the portable SKILL.md files, not the user-facing README. /plugin is currently allowed in the README, but /apollo:* is still blocked too broadly. I'm going to scope that rule to skill content so the README can document verified client commands.

Fixed. The portability restriction is scoped to the portable skill files, so the README can document verified /plugin and other client setup commands. The dependency-free validator passes on both Windows and WSL.

marcus-gomes-v · 2026-07-20T09:39:15Z


-**Contact attributes**
-`contact_stage_id`, `contact_label_ids`, `contact_owner_id`, `persona`, `person_title_unanalyzed`, `person_seniority`, `person_location_country`, `person_location_state`, `person_location_city`
+Follow the parameter types exposed by the tools. For sequence paging, start with page 1 and a small page size. If the server rejects the visible schema, report a tool/schema blocker instead of retrying with guessed parameter shapes. If the report tool is absent, stop and do not invent data.


This drops the entire documented metric catalog (all the num_/percent_ names, group_by dimensions, filters: { user_ids: ["current"] }, sort rules). Was any skill actually run end-to-end against production MCP?

You're right. We did not run the analytics skill end to end against production, and the broader matrix does not justify removing this catalog. I'm going to restore the metric, grouping, filter, and sorting guidance and add a few focused read-only checks before asking for another review.

Fixed. I restored the metric catalog, groupings, current-user filter, and sorting guidance. I also ran three OAuth, read-only production examples: current-user email metrics, team call outcomes by user, and rep email metrics ranked by replies. All three returned successfully; no customer output is included in the public PR.

…kills-v0.2-rebuild # Conflicts: # README.md

Preserve the current multi-client README while adding the five-skill catalog and release gate. Align enrichment, waterfall polling, credit balance, ten-person batching, contact writes, and sequence removal with the live Apollo tool contracts. Keep canonical skills on standard Agent Skills frontmatter, restore manifest parity with server.json, and narrow validation to public skill portability and safety.

Publish five public Apollo skills v0.2 source

8e3642e

orca-security-us Bot reviewed Jul 13, 2026

View reviewed changes

SamuelTElliott marked this pull request as ready for review July 14, 2026 16:32

SamuelTElliott marked this pull request as draft July 14, 2026 16:32

SamuelTElliott added 3 commits July 14, 2026 12:22

Align prospect skill with free organization lookup

0a9e709

docs(skills): clarify platform delivery support

1021a6d

NOTICKET Align public skill release contracts

0fc24bd

SamuelTElliott changed the title ~~Publish five public Apollo skills v0.2 source~~ NOTICKET Publish five public Apollo skills v0.2 Jul 14, 2026

alexander-rykhlitskiap reviewed Jul 15, 2026

View reviewed changes

Align public skills with lookup contract and restore setup

eed20b4

Use apollo_organizations_lookup for free name/domain resolution, keep filtered company search on the confirmed one-credit tool, restore verified Claude/Cowork/Cursor setup, and remove the volatile public platform matrix.

This was referenced Jul 17, 2026

Publish portable Apollo skills 0.3.0 #8

Closed

Improve Apollo MCP skills and documentation #7

Closed

SamuelTElliott added 2 commits July 19, 2026 18:32

Clarify current plugin activation commands

5e93f89

NOTICKET Clarify public skill release safeguards

7840da7

marcus-gomes-v requested changes Jul 20, 2026

View reviewed changes

SamuelTElliott added 3 commits August 5, 2026 20:21

Merge remote-tracking branch 'origin/main' into codex/apollo-public-s…

5b15203

…kills-v0.2-rebuild # Conflicts: # README.md

NOTICKET Align prospect skill with organization lookup rollout

c2864f7

Uh oh!

Conversation

SamuelTElliott commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Purpose

Scope

Why these changes exist

Deliberately excluded

Verification

Release gates

Uh oh!

kodem-security Bot commented Jul 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Kodem Security Scan Summary

Uh oh!

orca-security-us Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Orca Security Scan Summary

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

marcus-gomes-v left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

SamuelTElliott commented Jul 13, 2026 •

edited

Loading

kodem-security Bot commented Jul 13, 2026 •

edited

Loading

orca-security-us Bot left a comment •

edited

Loading