agent-messaging

agent-messaging is a skill for Claude Code from agentmessaging/claude-plugin. It costs 83 tokens per session (1,391 once invoked), scanned A, a copy of agent-messaging, Apache-2.0.

A skill for sending and receiving cryptographically signed messages between AI agents through the Agent Messaging Protocol (AMP). It supports local or remote messaging, file attachments, identity checks, and message-provider registrations.

In plain words
What is it for?
Use it to check an agent inbox, send or reply to messages, register with messaging providers, download attachments, and inspect agent identity or messaging status.
Why use it?
It lets agents communicate and verify who sent a message instead of relying on informal, unsigned exchanges.

Skill for Claude Code

Written for Claude Code: shipped in a Claude Code plugin.

Part of the agent-messaging plugin — 1 skill, 13 commands shipped together

Good fit Use it to check an agent inbox, send or reply to messages, register with messaging providers, download attachments, and inspect agent identity or messaging status.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/agentmessaging/claude-plugin/agent-messaging
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add agentmessaging/claude-plugin --skill agent-messaging
Clone the repo
git clone --depth 1 https://github.com/agentmessaging/claude-plugin

Made for: Claude Code.

Or install agent-messaging, the plugin that ships this one along with the rest of its 1 skill, 13 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agent-messaging

README.md
[![agentmods](https://agentmods.dev/badge/skills/agentmessaging/claude-plugin/agent-messaging/github.svg)](https://agentmods.dev/skills/agentmessaging/claude-plugin/agent-messaging)
Your own site
<a href="https://agentmods.dev/skills/agentmessaging/claude-plugin/agent-messaging"><img src="https://agentmods.dev/badge/skills/agentmessaging/claude-plugin/agent-messaging/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agent-messaging

Your own site · 80×15
<a href="https://agentmods.dev/skills/agentmessaging/claude-plugin/agent-messaging"><img src="https://agentmods.dev/badge/skills/agentmessaging/claude-plugin/agent-messaging.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 83 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,391 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00083 $0.01391
Opus 5.5 $0.00033 $0.00556
Sonnet 5.5 $0.00017 $0.00278
Haiku 4.5 $0.00008 $0.00139

Measured yesterday against content hash cb6ed0749f5b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agent-messaging scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

compatibility: Requires curl, jq, openssl, and base64 CLI tools. macOS and Linux supported. Scripts are POSIX-compatible bash.
Origin

This is a copy

100% identical to agent-messaging — 3 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

skills/agent-messaging/SKILL.md · 76 lines

How it starts

The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent Messaging (AMP)

AMP is signed mail between agents. Each agent has its own Ed25519 identity, inbox and sent folder; the amp-*.sh scripts sign, send, store and verify for you. The scripts work out which agent you are from the environment (AI Maestro sets AMP_DIR). Pass --id <uuid> to any command except amp-init.sh to act as a specific agent.

Commands

amp-inbox.sh [--all | --read] [--count] [--limit N] [--json]   # default: unread only
amp-read.sh <msg-id> [--no-mark-read] [--json]                  # full message; marks read and records it as last read
amp-send.sh <to> "<subject>" "<body>" [--type T] [--priority P] [--context '<json>'] [--attach FILE]... [--attach-afp REF]...
amp-send.sh <to> "<subject>" --body-file PATH                   # or --body-stdin; avoids shell-escaping long bodies
amp-reply.sh <msg-id> "<body>" [--type T] [--priority P] [--attach FILE] [--force]
amp-download.sh <msg-id> --all | <attachment-id> [--dest DIR]
amp-delete.sh <msg-id> [--force]
amp-prune.sh [--days N] [--apply] [--include-unread]            # remove old read messages and unused attachments; dry run without --apply
amp-identity.sh [--json]                                        # your address and keys
amp-status.sh                                                   # identity plus external registrations
amp-init.sh --auto | --name <name> [--tenant <org>]             # first time only
amp-register.sh --provider <domain> --user-key <uk_...> [--name <name>]
amp-fetch.sh [--provider <domain>]                              # pull from external providers
  • Addresses: a bare name such as alice is local (alice@<your-org>.aimaestro.local). A full address such as [email protected] goes through that provider and needs a registration with it.
  • Types: notification (default), request, response, task, status, alert, update, handoff, ack, system.
  • Priorities: low, normal (default), high, urgent.
  • Checking the inbox means listing, then reading each message with amp-read.sh so it is marked read. A [MESSAGE] notification means a new message is waiting: read it and act on it.

Read the full file on GitHub · 76 lines

Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday Changed cb6ed0749f5b
  2. 7d ago Changed · +5 lines 4f8b7eeefe38
  3. 12d ago Changed · +2 lines 7c2ea5964414
  4. 15d ago Changed · -333 lines · +33 tokens per session scan B → A 29e64d6948b2
  5. 26d ago Changed · +24 lines acc7229017f8
  6. 1mo ago Changed · +47 lines scan A → B b6beb067ca2d
  7. 1mo ago First seen · 331 lines · 50 tokens per session scan A 3176634fafb0

Subscribe to this mod's changes

agent-messaging is a skill published in the GitHub repository agentmessaging/claude-plugin (5 stars, last pushed yesterday), licensed Apache-2.0. It adds 83 tokens to every session and 1,391 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to agent-messaging, differing in 3 lines, and is treated as a copy.