CloudBase AI Toolkit is an integration layer that lets AI coding tools use Tencent CloudBase as an application backend, including databases, authentication, functions, storage, and deployments. Developers use it to have coding agents build and operate CloudBase-backed applications through skills, plugins, commands, and chat-accessible tools. The catalogue entries are the toolkit’s own skills, agents, hooks, plugins, rules, instructions, and MCP tools.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add TencentCloudBase/CloudBase-AI-Toolkit --skill cloudbasegit clone --depth 1 https://github.com/TencentCloudBase/CloudBase-AI-ToolkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase)<a href="https://agentmods.dev/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase"><img src="https://agentmods.dev/badge/skills/tencentcloudbase/cloudbase-ai-toolkit/cloudbase.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 35 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 102 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium MCP Rug Pull · line 103 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00311 | $0.03788 |
| Opus 5.5 | $0.00124 | $0.01515 |
| Sonnet 5.5 | $0.00062 | $0.00758 |
| Haiku 4.5 | $0.00031 | $0.00379 |
Grade A, and why
cloudbase scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 155 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CloudBase Development Guidelines
Step 0 — Confirm the site (domestic vs international)
CloudBase has two independent account systems: 国内站 (domestic, cloud.tencent.com) and 国际站 (international, tencentcloud.com). Environments, consoles, API keys, and login state do not cross over. A wrong-site login usually looks like "logged in, but no environments visible" rather than a clear error — so settle the site before installing MCP, logging in, or binding an env.
Infer it when you can (console domain, envId, an existing error); otherwise ask the user once. Do not guess.
| 国内站 domestic | 国际站 international | |
|---|---|---|
| Remote MCP (preferred) | https://tcb-api.cloud.tencent.com/mcp/v1 |
https://tcb-api.tencentcloud.com/mcp/v1 |
| Local stdio MCP | nothing to set (TCB_SITE is domestic by default) |
TCB_SITE=intl + TCB_REGION=ap-singapore |
tcb CLI |
default | TCB_IS_INTL=true (or tcb config set isIntl true) |
Project record .cloudbase/project.json |
site omitted, or "domestic" |
"site": "intl", "region": "ap-singapore" |
| Console | tcb.cloud.tencent.com |
tcb.tencentcloud.com |
| Default region | ap-shanghai |
ap-singapore |
| NoSQL / document DB tools | available | not available |
- Connect remote by default. Both hosts are first-class endpoints: OAuth covers the login and the hostname decides the site, so there is no
siteparameter to pass. International:https://tcb-api.tencentcloud.com/mcp/v1; domestic:https://tcb-api.cloud.tencent.com/mcp/v1. - Use local stdio only when something requires it — an account signing in with a CloudBase API key, one session that must cover both sites (a remote URL is bound to one), or a task that needs a tool the hosted endpoint does not register. Deploying functions or apps is not a reason: that works remotely through the two-step upload. Comparison:
references/mcp-setup.md. TCB_IS_INTL(CLI) andTCB_SITE(MCP) are different variable names for different tools. Set the one matching the tool in use; setting the wrong one silently does nothing.- On a first run, settle the site once and persist it — the CLI switch is machine-global, the MCP switch is per-client, and only
.cloudbase/project.jsonis project-scoped and readable by MCP after a restart. Followreferences/site-onboarding.md; do not re-ask on later sessions.
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 8fa461791713
- 2d ago Changed f6027e78a3c5
- 8d ago Changed f0e56b2a9170
- 11d ago Changed · +1 lines a03808a1918e
- 12d ago Changed · +1 lines 77f187a2db8c
- 21d ago Changed 4aa09721916d
- 27d ago Changed 9169a9c48d0d
- 1mo ago Changed · +4 lines f88318d36c0b
- 1mo ago Changed eea9170866bb
- 1mo ago First seen · 149 lines · 311 tokens per session scan A 8ff4ddd24c9b
cloudbase is a skill published in the GitHub repository TencentCloudBase/CloudBase-AI-Toolkit (1,141 stars, last pushed today), licensed MIT. It adds 311 tokens to every session and 3,788 once invoked, about $0.0012 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
nginx-reverse-proxy
Configure nginx as a reverse proxy with TLS termination, headers, and upstream health — for self-hosted web apps.
apache
Apache HTTP Server 配置.
stripe-projects
Provision SaaS services + sync creds via Stripe Projects.
django-storages-s3
Use when configuring Django to store static and media files on AWS S3 with django-storages. Invoke when working with the STORAGES setting, S3 buckets, presigned URLs, CloudFront, or boto3-backed file storage in settings.py. Configures the Django 4.2+ STORAGES dict, public/private custom backends, presigned GET/POST…
websocket-engineer
Use when building real-time communication systems with WebSockets or Socket.IO. Invoke for bidirectional messaging, horizontal scaling with Redis, presence tracking, room management.
azure-eventhub-dotnet
Azure Event Hubs SDK for .NET. Use for high-throughput event streaming: sending events (EventHubProducerClient, EventHubBufferedProducerClient), receiving events (EventProcessorClient with checkpointing), partition management, and real-time data ingestion. Triggers: "Event Hubs", "event streaming"…