paigy-onboard

paigy-onboard is a command for Claude Code from paigy-ai/mcp. It costs 12 tokens per session (644 once invoked), scanned B, original, MIT.

A one-time pairing command that connects a coding agent to the user's Paigy account. Pairing authorizes Paigy's notification and reply tools to reach the user.

In plain words
What is it for?
Linking an agent with Paigy, completing browser-based approval, and waiting for the account pairing to finish.
Why use it?
It sets up the account connection needed before the agent can contact the user through Paigy. The process uses a verification link and code.

Command for Claude Code

Written for Claude Code: shipped in a Claude Code plugin. Also seen: reads .claude/ paths; mentions Claude Code.

Part of the paigy plugin — 1 skill, 2 commands, 1 hook, 1 MCP server shipped together

Good fit Linking an agent with Paigy, completing browser-based approval, and waiting for the account pairing to finish.

Compare 6 commands from other repositories ↓
Install with agentmods
npx agentmods add commands/paigy-ai/mcp/paigy-onboard
View source ↗ paigy-ai/mcp
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo
git clone --depth 1 https://github.com/paigy-ai/mcp

Made for: Claude Code.

Or install paigy, the plugin that ships this one along with the rest of its 1 skill, 2 commands, 1 hook, 1 MCP server.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for paigy-onboard

README.md
[![agentmods](https://agentmods.dev/badge/commands/paigy-ai/mcp/paigy-onboard/github.svg)](https://agentmods.dev/commands/paigy-ai/mcp/paigy-onboard)
Your own site
<a href="https://agentmods.dev/commands/paigy-ai/mcp/paigy-onboard"><img src="https://agentmods.dev/badge/commands/paigy-ai/mcp/paigy-onboard/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for paigy-onboard

Your own site · 80×15
<a href="https://agentmods.dev/commands/paigy-ai/mcp/paigy-onboard"><img src="https://agentmods.dev/badge/commands/paigy-ai/mcp/paigy-onboard.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 12 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 644 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00012 $0.00644
Opus 5 $0.00006 $0.00322
Sonnet 5 $0.00002 $0.00129
Haiku 4.5 $0.00001 $0.00064

Measured 4d ago against content hash f5df200ca794, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade B, and why

paigy-onboard scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

repo)" — and on yes, add to `~/.claude/settings.json` (or the project's
commands/paigy-onboard.md · 45 lines

What it actually says

Pair this Claude Code agent with the user's Paigy account so the Paigy MCP tools (contact, check_replies, …) can reach them. Do it in-context with the pair tool — no shell step needed:

  1. Call the pair tool with no arguments. It attempts to open the user's browser and returns { verification_uri_complete, user_code, device_code }. That attempt can silently fail in headless/remote environments — always show the link regardless of whether it opened.
  2. In one line, show the user verification_uri_complete and user_code, and tell them to tap Approve (verifying the on-screen code matches). If the browser didn't open on its own, they can go to verification_uri_complete manually and enter user_code there.
  3. In the SAME turn — do NOT stop to wait for the user — immediately call pair again with that device_code. The tool itself polls ~90s for the approval; that is the waiting. On { status: "pending" }, call it AGAIN with the same device_code (each call waits another ~90s). Keep looping until it returns the token. Only stop and ask the user if it's still pending after a couple windows (~3 min) — they may not have approved yet.

Do not end your turn on "tell me once you've approved" — the poll is automatic; just keep calling pair. Once it returns the token, retry whatever you were doing.

  1. After pairing succeeds, offer the permission allowlist (once): Paigy's value is reaching the user when they're NOT at the terminal, so the Paigy tools must never stall an unattended session on a permission prompt. Ask one question — "Allow Paigy's tools to run without prompting? (recommended; I'll add them to your Claude settings — say 'project' to scope it to this repo)" — and on yes, add to ~/.claude/settings.json (or the project's .claude/settings.json if they said project) under permissions.allow:

    "mcp__paigy__notify_user", "mcp__paigy__check_replies",
    "mcp__paigy__set_task_state", "mcp__paigy__schedule_callback", "mcp__paigy__get_thread"
    

    Merge into the existing file (create keys as needed, never clobber other entries). Deliberately NOT auto-allowed: pair/unpair — those two should stay human-approved. If they decline, drop it and don't ask again.

Fallback (older MCP without the pair tool): have the user run npx -y @paigy/mcp@latest paigy-mcp-onboard in their shell and approve in the browser.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago Changed f5df200ca794
  2. 11d ago First seen · 45 lines · 12 tokens per session scan B 5a1fcf65e48c

Subscribe to this mod's changes

paigy-onboard is a command published in the GitHub repository paigy-ai/mcp (0 stars, last pushed 4d ago), licensed MIT. It adds 12 tokens to every session and 644 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.