Tutti is a real-time collaboration space where people can work alongside multiple AI agents, including by sharing rooms, editing together, and borrowing agents. It is intended for users who want human-agent or multi-agent collaboration across devices, with open-source and VM versions available. The catalogue entries provide skills and instructions for working with Tutti.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/tutti-os/tutti/agent_workspace_app_referencenpx skills add tutti-os/tutti --skill agent_workspace_app_referencegit clone --depth 1 https://github.com/tutti-os/tuttiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/tutti-os/tutti/agent_workspace_app_reference)<a href="https://agentmods.dev/skills/tutti-os/tutti/agent_workspace_app_reference"><img src="https://agentmods.dev/badge/skills/tutti-os/tutti/agent_workspace_app_reference.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00106 | $0.01602 |
| Opus 5 | $0.00053 | $0.00801 |
| Sonnet 5 | $0.00021 | $0.00320 |
| Haiku 4.5 | $0.00011 | $0.00160 |
Grade A, and why
tutti-agent-workspace-app scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 89 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Tutti Agent Workspace App
Use this skill when the task is to create or evolve a full Tutti app repository, not just a final package directory. The target app is usually a local-first web app with a server, shared contracts, optional local agent runtime, and an app-owned scripts/package-tutti-app.mjs.
For the final package contract, defer to $tutti-workspace-app-factory and its references. This skill owns app architecture patterns; the factory skill owns tutti.app.json, tutti.cli.json, bootstrap.sh, runtime env, storage, i18n harness, and static package validation rules.
When To Use
Use this skill for:
- New agent-enabled Tutti app repositories.
- Existing web/server apps being converted into maintainable Tutti app repos.
- Apps that need
@tutti-os/agent-acp-kitfor app-owned local Agent execution and@tutti-os/agent-acp-kit/tuttifor auto CLI-backed/standalone platform context. - App-specific MCP or command gateways that expose domain tools to local agents.
- Multi-package
pnpmworkspaces withapps/web,apps/server, andpackages/shared. - App-owned packaging, smoke tests, i18n enforcement, and CLI/reference endpoints.
- GitHub Actions release workflows for publishing Tutti app releases and staging/production catalogs.
Use $tutti-workspace-app-factory instead for a small standalone package, package repair, or manifest-only validation.
Required References
Read only the references needed for the task:
references/app-architecture.mdfor repository layout, web/server/shared boundaries, and dependency choices.references/agent-acp-kit.mdwhen implementing local agent providers, ACP event mapping, or run-scoped MCP tools.references/dynamic-agent-providers.mdwhen implementing agent catalog/composer endpoints, standalone behavior, agent pickers, default selection, or canonical agent-id persistence. Read this before hard-coding any agent or provider list.references/package-builder.mdwhen addingscripts/package-tutti-app.mjs,bootstrap.sh, Tutti CLI output docs, or package validation.references/github-actions-release.mdwhen creating or changing.github/workflows/publish-tutti-app.yml,.github/workflows/publish-tutti-app-staging.yml, release variables, or catalog publishing.references/i18n-and-web-debugging.mdwhen changing UI copy, language handling, web-first debug flow, or smoke/e2e checks.
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 89 lines · 106 tokens per session scan A 1f309dda0f1d
tutti-agent-workspace-app is a skill published in the GitHub repository tutti-os/tutti (3,684 stars, last pushed 2d ago), licensed Apache-2.0. It adds 106 tokens to every session and 1,602 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
assimilate-popular-workflows
This skill should be used when the user asks to "find skills in the wild", "assimilate popular workflows", "discover SKILL.md files in repos", "research external skills", "find workflow patterns", "survey the skill landscape", "what skills exist out there", or wants to investigate public repositories for extractable…
verification-suite
Plan structure validation, phase completeness checks, reference integrity verification, and artifact existence confirmation. Provides the structured verification layer ensuring GSD artifacts are well-formed and complete.
guardrails-ai-setup
Guardrails AI validation framework setup for LLM applications. Implement input/output validation, safety checks, and structured output enforcement.
mcp-app-scaffolding
Scaffolds MCP App project structure with correct directory layout, dependencies, entry points, and framework-specific templates. Handles React (useApp hook), Vanilla JS, Vue, Svelte, Preact, and Solid.
mcp-csp-investigation
Comprehensive Content Security Policy audit for MCP Apps in sandboxed iframes. Discovers all network origins, traces them to source, and generates CSP configuration for registerAppResource.
mcp-host-styling-integration
Integrates MCP App UI with host theming system. Applies host CSS variables, handles onhostcontextchanged, safe area insets, display mode detection, and fullscreen configuration.