Agent Plugins Made AI Agent Skills Portable — What Agencies Should Do Now

The same skill, six different wrappers

If you build custom AI automations for clients, you already know the pain: an MCP server or agent skill is portable, but the wrapper around it is not. The same tool had to be repackaged, re-configured, and re-maintained for every client platform — Codex here, Cursor there, VS Code somewhere else. Same component, six directory layouts, six metadata formats, six forks that drift apart over time.

On August 6, 2026, that problem got a standard. Agent Plugins 1.0.0 — an open, vendor-neutral specification for packaging agent skills and MCP servers into portable plugins — was published and announced by OpenAI's developer account alongside AWS, Cursor, GitHub, and Vercel. Here is what actually shipped, who backs it, and what an agency should do about it now.

What happened: an open spec, six clients at launch

Agent Plugins 1.0.0 defines one packaging format that works across agentic clients. OpenAI's announcement on X was echoed by Google's Developers Blog, which described the spec as packaging "your skills, tools, and more." The home base for the standard is agent-plugins.org, with the full 1.0.0 specification and a compatible-clients list published openly.

Who backs v1.0.0: the Technical Steering Committee of Core Maintainers comprises Amazon, Cursor, Microsoft, OpenAI, and Vercel. Google is joining as a Core Maintainer and has already shipped two products using the format (its Agents CLI and Data Agent Kit for BigQuery, Spanner, and Cloud SQL). The spec is versioned 1.0.0 but explicitly labeled a Working Draft — a public consensus document, not a frozen standard.

Six clients support the format at launch, per OpenAI's compatible-clients post and the official list:

AWS's Agent Toolkit is compatible with 30+ curated skills across Lambda, S3, DynamoDB, and CDK. Notably, no Anthropic/Claude client was announced at launch as of August 6, 2026 — don't assume Claude Code support until it is officially declared.

What a plugin actually is

A plugin is a directory, not an installer or a bundle format. It has three fixed parts plus optional client extensions:

my-plugin/
├── plugin.json      # closed-schema manifest
├── skills/          # Agent Skills
├── mcp.json         # optional MCP server config
└── com.example.client/   # reverse-domain client extensions

The plugin.json manifest is deliberately closed — only $schema, name, version, description, author, homepage, repository, license, keywords, and extensions. It cannot relocate or inline components: skills live in skills/, MCP servers in mcp.json, and each transport is declared explicitly (stdio, Streamable HTTP, or legacy HTTP+SSE).

Two design choices matter for agencies. First, independent component failure: a bad MCP server entry doesn't take skills down — clients skip what they don't support and load the rest. Second, deliberately small scope: v1 standardizes exactly two component types (Skills + MCP). Commands, hooks, agents, rules, and LSP servers are explicitly out until their formats converge. Client-specific behavior is contained in reverse-domain extension namespaces that other clients simply ignore.

The spec also slots into a broader ecosystem layering: Agentic Resource Discovery (find) → AI Catalog (describe) → Agent Plugins (package) → MCP + Agent Skills (run). Each layer is independently adoptable.

What v1 deliberately leaves out

The most important part of the spec might be what it does not do yet. Installation, distribution, permissions, sandboxing, and trust/provenance verification are all flagged as Future Considerations. That means the v1 plugin format has no permission model and no provenance standard.

For an agency, that gap is both a risk and a differentiator. If you sell plugins, self-impose signing, code review, and least-privilege practices — and document that you did. If you buy plugins (or install third-party ones into client environments), vet them the same way you would vet any dependency. Trust layers are now a service agencies can legitimately sell.

Why it matters for packaging and reselling

The strategic shift is simple: build once, run anywhere. Custom skills and MCP servers packaged as a plugin work across six clients at launch. The deliverable is one directory instead of N client-specific builds, and per-client reimplementation cost collapses.

• Plugins become a real product line. Agencies can ship branded plugin bundles — "SEO workflow plugin," "client reporting plugin," "lead-qualification plugin" — that clients install in Codex, Cursor, Copilot, or VS Code. AWS explicitly frames the standard as enabling the same extensions across harnesses.
• Cost modeling changes. Delivery estimates that assume a fixed per-platform adaptation cost now overstate work for plugin-based deliverables. One package, one maintenance stream — not N forks that drift.
• Client portability cuts both ways. A client can switch agent platforms without rebuilding their tools. That lowers switching costs — great for client trust, but it weakens "sticky" platform-based retainers.
• Lock-in moves up the stack. The spec is community-governed (no reserved seats, no single-vendor majority), but distribution, installation, permissions, and UX remain client-owned. The lock-in risk shifts from the package format to the marketplace and install layer.

The build-once thesis just got a B2B data-vendor proof point

Four days after Agent Plugins 1.0.0 shipped, 6sense announced its MCP Server (open beta since July 14, 2026; general availability was planned for August 2026 as of that announcement) — putting proprietary GTM intelligence into Claude, ChatGPT, Writer, and Agentforce "with no custom integration required." That is the exact build-once-run-anywhere argument this page makes, validated by a major B2B data vendor, not a dev-tools startup.

What it means for agencies wiring agentic GTM tools: intent data, predictive buying stages, 6QA status, and keyword-level intent are now callable from the same agents clients already run — no per-platform integration build. A lead-qualification agent can score accounts against live buying signals out of the box. That converts what used to be a custom integration project into a configuration task, and it makes MCP-connected lead scoring and account research a sellable service line.

The same release adds Trusted People Intelligence (verified decision-maker contacts and CRM matching) and programmatic APIs (People Search & Enrichment, Keyword Intent Data Beta, Segments Beta) for data-warehouse and CDP pipelines — so the intelligence layer is portable across both agents and the rest of the stack.

Pricing angle for agencies: when the data source arrives over MCP instead of custom integration, the build estimate drops — but a data-subscription line appears. Model both sides in the AI Agency Pricing Calculator hybrid model, which currently prices "hybrid glue" integration at $10,000–$30,000; the 6sense pattern is the first mainstream case where that line item shrinks toward zero for GTM data.

Every major platform now ships an MCP server — here is the verified roster

The table below is the roster as of September 18, 2026: 20 official, vendor-hosted MCP servers. Every link was fetched and confirmed working that day, and every middle cell is the vendor's own description of what its server exposes, copied from the linked page. It is ordered newest first. Read it as a compatibility checklist — each row is a surface an agent can already reach without your agency building a custom integration.

Two rows worth reading carefully. X's verified server is X Ads MCP — the ads-API surface, exposing 74 X Ads tools — not a general X API server, so do not plan around reading or posting through it. And Twilio and Airtable are deliberately absent: their candidate doc URLs returned 404 when checked on September 18, 2026, and an unverified link is worse than a missing row.

Newest entry — Meta, September 15, 2026: WhatsApp Business Tools MCP. Meta's server connects an agent of your choosing to the WhatsApp Business Platform and covers setup and management: discovering the businesses and accounts you administer, adding a phone number and verifying it over OTP, registering it for the Cloud API, checking Terms of Service status, creating and editing message templates, sending a test message, configuring and subscribing webhooks, configuring a payment method, and checking or starting Business Verification. Meta's own line is that your AI agent "can now set up WhatsApp business messaging" (Meta for Developers). Two limits matter for scoping: Meta describes it as built for development and testing workflows rather than production sending at scale, and the server is a beta rolling out gradually with a tool set that may change. The billable half of the work does not disappear — completed Business Verification, template approval and the billing relationship are still human steps, and we work through that split in what the WhatsApp Business Tools MCP automates and what still needs a human.

Actionable next steps for your agency

1. Inventory your tools. List every custom skill and MCP server you currently build and maintain per client. Those are your first plugin candidates — and your first pricing conversations.
2. Design plugins to spec. Package one existing automation as a spec-compliant plugin and test it in two launch clients. The agent-plugins.org guides cover the directory anatomy and schema.
3. Update your pricing calculators. If you estimate delivery cost per platform, apply a portability discount for additional compatible clients — roughly a 60–90% reduction in adaptation cost per extra client — and add "plugin packaging & distribution" as a priced line item.
4. Add a trust layer to your offer. Plugin vetting, signing, and least-privilege review is a sellable compliance service precisely because v1 leaves it to you.

Frequently asked questions

Sources

• OpenAI Developers, "Introducing Agent Plugins" (X, Aug 6, 2026): x.com/OpenAIDevs/status/2085398373511918022
• OpenAI Developers, "Compatible agentic clients at launch" (X, Aug 6, 2026): x.com/OpenAIDevs/status/2085398374841532758
• Google Developers Blog, "Agent Plugins package your skills, tools, and more" (Aug 6, 2026): developers.googleblog.com
• Agent Plugins — home: agent-plugins.org
• Agent Plugins Specification 1.0.0 (Working Draft): agent-plugins.org/specification
• Agent Plugins Compatible Clients: agent-plugins.org/compatible-clients
• Agent Plugins spec repo (agentplugins/agent-plugins-spec): github.com/agentplugins/agent-plugins-spec
• 6sense Newsroom, "6sense Brings Intelligence Directly Into AI Agents and Entire GTM Stack With Latest Product Releases" (Aug 10, 2026): 6sense.com/newsroom
• Meta for Developers, "WhatsApp Business Tools MCP" and the Meta MCP overview (doc links fetched and confirmed working September 18, 2026): developers.facebook.com/documentation/mcp/whatsapp-business-tools-mcp/