---
title: "Publish a hosted agent resource package"
method: POST
path: "/imports/resource-package"
---

# Publish a hosted agent resource package

`POST /imports/resource-package`

## Request

- Base URL: `https://superskill.sh/api`
- URL: `https://superskill.sh/api/imports/resource-package`
- Auth: HTTP bearer

A confirmed signed-in user is required. Publishing is self-service and does not require a managed recommendation grant. Production enables the durable archive path; deployments still fail closed with 503 PUBLISH_DISABLED when HOSTED_RESOURCE_PUBLISH_ENABLED=false. Every publish requires an immutable semantic version and a 16-200 character idempotencyKey, accepts at most 8 MiB of bounded text file content, writes a canonical digest-bound archive to the dedicated import store, and lists only active unreviewed metadata. This does not grant a Verified harness badge; use /imports/harness-dir for eval/gate-verified native packages.

## Request body

- object
  - `name` string
  - `version` string, required
  - `idempotencyKey` string, required
  - `title` string
  - `summary` string
  - `resourceType` 'harness' | 'skill' | 'plugin' | 'workflow' | 'mcp_server' | 'service_endpoint' | 'agent_team' | 'subagent_pack' | 'command_pack' | 'config' | 'guide' | 'framework' | 'agent_runtime'
  - `sourceUrl` string
  - `worksWith` string[]
  - `tags` string[]
  - `files` object[], required
    - `path` string, required
    - `content` string, required
    - `truncated` boolean

## Response `200`

Idempotent replay of the same immutable hosted package release

- object

## Other responses

- `201`: Hosted agent resource package
- `400`: Request validation failed before any durable mutation
- `401`: Authorization required
- `403`: Authorization was provided but is not allowed for this action
- `409`: The requested action conflicts with current product or resource state
- `413`: Request validation failed before any durable mutation
- `422`: Static security scan failed before any durable mutation
- `503`: Hosted resource publishing is disabled or archive storage is unavailable. No package was published.

---

[API](https://skmtc.dev/superskill/apis/superskill-api.md) · [All operations](https://skmtc.dev/superskill/apis/superskill-api/llms.txt) · [OpenAPI document](https://skmtc.dev/superskill/apis/superskill-api/revisions/ced2d2d1f217?raw)