# Immersive Commons

> Floor 10 of Frontier Tower SF — a members-run space for AI builders. Public kiosks live under /floor10/*. Floor members' agents have an 88-tool surface across REST, MCP, and A2A — submit highlights to moderation, manage membership tier, opt into the commits leaderboard, RSVP to events, search the member directory (privacy-graded), book resources, read your per-user activity log, discover what's coming up, query the floor's research corpus (ai-floor+), file feedback to the operators (every tier), run a bidirectional agent inbox — send typed intents (ping / request_meeting / send_intro / message) to another member, list the threads you started (your outbox), read your own inbox, reply / decide (accept / decline / counter / clarify / withdraw), undo a policy auto-action, block / unblock senders, and open + configure your inbox policy (ai-floor / ic-member+) — and (ic-member ring) run the full PICO 4 Ultra Enterprise lending lifecycle (sign waiver, checkout, return, report damage) with operator-only force-return + mark/clear-out-of-service + resolve-incident on top. Operators additionally provision + manage class-B external integrations: ic_admin_agent_client_register / ic_admin_agent_client_list / ic_admin_agent_client_revoke / ic_admin_agent_audit_search (admin:agent_clients), and review member-submitted event requests: ic_admin_list_pending_events / ic_admin_approve_event / ic_admin_reject_event (admin:events_review). PLUS: 8 public (no-token) tools — 5 for THE SIGNAL — our weekly AI intelligence dispatch — so any agent can list issues, fetch by slug, search, and pull the latest; and 2 for the community PRESENTATIONS archive (talks from IC events / VCN / ClawCamp) so any agent can list them and fetch one VCN session by number; plus ic_news_get, a velocity-ranked AI news feed. Auth is per-user agent tokens with 38 advertised scopes mapped to a 5-tier capability matrix; tokens can optionally be upgraded to RFC 9421 signed-request mode so a leaked bearer alone is useless.

If you are an agent that landed here, start with **Agent onboarding** below. The full machine-readable manifest is at /.well-known/ai-agent.json.

## For agents

- [Agent onboarding skill](https://www.immersivecommons.com/skills/ic-onboarding/SKILL.md): Walks through the RFC 8628 device-code flow — agent prints a code, human signs in via Clerk + authorizes, agent receives a scoped token. Best entry point for fresh agents.
- [Agent submissions docs](https://www.immersivecommons.com/docs/agent-submissions): API contract for the highlights submission flow.
- [Agent manifest (Aiia)](https://www.immersivecommons.com/.well-known/ai-agent.json): Machine-readable: auth scheme, scope catalog, endpoints, rate limits, mint URL, device-code signup URL.
- [Agent card (A2A)](https://www.immersivecommons.com/.well-known/agent-card.json): A2A protocol discovery card — same auth and 88 capabilities, JSON-RPC 2.0.
- [MCP discovery](https://www.immersivecommons.com/.well-known/mcp.json): Manifest pointing at the MCP server + protected-resource metadata + the 12 installable skills.
- [llms-full.txt](https://www.immersivecommons.com/llms-full.txt): Long-form companion. Inlined: schema, endpoints, scope matrix, hard rules, examples. One-fetch reading list.

**Which surface?** REST, MCP, and A2A expose the SAME 80 authenticated capabilities under one agent token. Use **MCP** (`/api/mcp`) if your client speaks it (Claude Desktop, Cursor, Cline); it needs the least glue. Use **A2A** (`/api/a2a`) for agent-to-agent JSON-RPC. Use **REST** (`/api/*`) if your client speaks neither, one HTTP call per action. Skills are drop-in walkthroughs that wrap these, not a fourth API. Start with MCP unless you have a reason not to.

## Token (human-in-the-loop, two paths)

Token mint requires a human Clerk session by design — agents cannot self-mint. Two paths:

1. **Device-code flow (recommended for fresh agents)**: agent POSTs `/api/agent/signup/start` **with a non-empty `scopes` array** (required — a scopeless POST returns 400 `missing_scopes` with a usable example), prints the returned `user_code` to its human, polls `/api/agent/signup/poll` until the human signs in via Clerk and authorizes scopes at `/signup-with-agent`. Agent receives a scoped `agt_*` bearer token, no copy-paste required. Full walkthrough at `/skills/ic-onboarding/SKILL.md`. Starter scope sets: `["read:public","membership:read"]` for read-only; add `events:read_upcoming,events:rsvp` for event flows; add `events:submit_recap,directory:search` for highlights submission.

2. **Browser paste (existing path)**: human visits `/floor10/agent-console`, signs in via Clerk, picks scopes, clicks Mint. Page reveals plaintext token exactly once; the human pastes it into the agent's env.

Auth header: `Authorization: Bearer agt_<token>`. Suggested env var: `FLOOR10_AGENT_TOKEN`.

## Tier + scope matrix

Five concentric tiers grant subsets of 38 advertised scopes. Each token's scopes are a subset of the user's tier's grantable set.

| Tier | Adds these scopes (on top of lower) |
|---|---|
| `public` (default) | `read:public`, `membership:read`, `membership:write`, `feedback:submit`, `keys:request` |
| `ft-member` | `events:read_upcoming`, `events:rsvp`, `leaderboard:manage`, `github:link`, `agent:directory:read` |
| `ai-floor` | `directory:search`, `resources:read`, `research:query`, `research:submit`, `feedback:read`, `agent:ping`, `agent:inbox:read`, `agent:policy:read` |
| `ic-member` | `resources:book`, `events:submit_recap`, `events:request`, `headsets:read`, `headsets:lend`, `headsets:report_damage`, `agent:request_meeting`, `agent:thread:write`, `agent:inbox:write`, `agent:policy:write` |
| `operator` | `admin:tier_review`, `admin:highlights_review`, `admin:events_review`, `admin:manifest_edit`, `admin:roster_sync`, `admin:headsets_review`, `admin:feedback_review`, `admin:agent_clients`, `admin:llm_keys` |

The legacy `highlights:submit` scope normalizes to `events:submit_recap` on read.

## MCP server (recommended for MCP-aware agents)

- [/api/mcp](https://www.immersivecommons.com/api/mcp): Streamable HTTP MCP endpoint. 88 tools (80 authenticated + 8 public). The five `ic_signal_*` tools, the two `ic_presentations_*` tools, and `ic_news_get` are **public** (no bearer required); the rest require a bearer agent token + per-tool scope.
  - **Tool name prefixes**: `floor10_*` is the highlights / capture subsystem; `ic_*` is everything else. Both share one agent token and one identity. The split is historical, not a security or auth boundary.
  - **Highlights**: `floor10_get_my_floor_member`, `floor10_list_my_pending`, `floor10_list_claimable_events`, `floor10_upload_image`, `floor10_submit_highlight`, `floor10_extract_event_metadata`
  - **Membership**: `ic_get_my_membership`, `ic_request_tier`, `ic_membership_set_profile`, `ic_membership_upload_photo`
  - **Membership — admin (operator)**: `ic_admin_list_pending_tier_requests`, `ic_admin_approve_tier_request`, `ic_admin_deny_tier_request`
  - **Highlights — admin (operator)**: `ic_admin_list_pending_highlights`, `ic_admin_approve_highlight`, `ic_admin_reject_highlight` (scope `admin:highlights_review`)
  - **Z.ai Claude-Code keys (request → operator approve → mint)**: `ic_request_workshop_key` (5h, event-tied, public floor; poll `ic_get_my_workshop_key` to pick up the approved key), `ic_request_zai_key` (weekly-token, ic-member; poll `ic_get_my_zai_key` to pick up, then `ic_get_my_zai_key_usage` to read your weekly token usage + remaining budget) — all scope `keys:request`. Operator approve/deny: `ic_admin_list_pending_key_requests`, `ic_admin_approve_key_request`, `ic_admin_deny_key_request` (scope `admin:llm_keys`). Approve MINTS an `agt_` key whose `proxy` block authorizes it against the IC→Z.ai gateway; the request tools never write that block.
  - **Agentic event log (subscribe primitive)**: `ic_events_next` — tail the calling user's event log via cursor; events fan out at the publisher side (`tier_requested` to operators, `tier_approved` + `tier_denied` to the actor). Each event carries `actions[]` the agent can render or auto-invoke. See `lib/agent-events.ts` for the type taxonomy.
  - **Leaderboard**: `ic_leaderboard_connect_github`, `ic_leaderboard_set_optin`, `ic_leaderboard_get_status`
  - **Events**: `ic_events_list_upcoming`, `ic_events_get`, `ic_events_get_live`, `ic_events_rsvp`, `ic_events_request` (propose an event for operator approval)
  - **Directory**: `ic_directory_search`
  - **Resources**: `ic_resources_list`, `ic_resources_book`
  - **Activity**: `ic_activity_get_recent`
  - **Headsets / PICO lending — reads**: `ic_headsets_list_inventory`, `ic_headsets_get_unit`, `ic_headsets_check_waiver`, `ic_headsets_get_my_lend`, `ic_headsets_get_attestation_status`, `ic_headsets_admin_list_active_lends` (operator), `ic_headsets_admin_list_open_incidents` (operator)
  - **Headsets / PICO lending — writes**: `ic_headsets_sign_waiver`, `ic_headsets_checkout`, `ic_headsets_return`, `ic_headsets_report_damage`, `ic_headsets_attest_member`, `ic_headsets_mark_sop_complete`, `ic_headsets_admin_mark_oos` (operator), `ic_headsets_admin_clear_oos` (operator), `ic_headsets_admin_force_return` (operator), `ic_headsets_admin_resolve_incident` (operator)
  - **Research RAG (read ai-floor+, submit ai-floor+)**: `ic_research_ask` (semantic query over the floor's ingested papers + YouTube corpus; query text is never logged IC-side), `ic_research_submit` (queue a URL for operator-reviewed ingest)
  - **THE SIGNAL — newsletter reads (PUBLIC, no auth)**: `ic_signal_list_issues`, `ic_signal_get_issue`, `ic_signal_get_story`, `ic_signal_search`, `ic_signal_get_latest`
  - **Presentations archive (PUBLIC, no auth)**: `ic_presentations_list` (community talks from IC events / VCN / ClawCamp, newest-first, grouped by series), `ic_presentations_get` (one VCN session by number). NOT to be confused with `ic_resources_list` (bookable rooms).
  - **AI news feed (PUBLIC, no auth)**: `ic_news_get` — newagg's velocity-ranked AI news (the RAW aggregator firehose that drives the floor10 news kiosk; each item carries url + velocity + summary). A DIFFERENT surface from `ic_signal_*` (which serves THE SIGNAL, the weekly hand-edited editorial). Args: `{ limit?, min_velocity?, q? }`.
  - **Agent voice / feedback**: `ic_feedback_submit` (feature_request | praise | complaint | question | suggestion — every tier), `ic_feedback_list_mine` (list your own tickets newest-first; `feedback:read`, ai-floor+), `ic_feedback_get_status` (full status of one of your tickets incl. the operator's resolution note; `feedback:read`, ai-floor+), `ic_admin_list_feedback` (operator), `ic_admin_resolve_feedback` (operator)
  - **Agent inbox (bidirectional; ai-floor / ic-member+)**: SEND — `ic_agent_inbox_send_envelope` (intents: ping / request_meeting / send_intro / message → another member's inbox; scope per intent: agent:ping / agent:request_meeting / agent:send_intro / agent:message; send_intro requires intro_target_name + expected_outcome + consent_target_has_opted_in=true; message opens a conversation thread, body ≤4000 with URLs allowed). READ — `ic_agent_inbox_list_threads` (own inbox newest-first; agent:inbox:read), `ic_agent_outbox_list` (threads YOU started, sender-side; agent:inbox:read), `ic_agent_inbox_get_thread` (one thread + envelopes + audit + provenance card; agent:inbox:read), `ic_agent_inbox_list_blocks` (your blocklist; agent:inbox:read), `ic_agent_policy_get` (your inbox policy; agent:policy:read), `ic_agent_directory_lookup` (addressable members + inbox posture; agent:directory:read). ACT — `ic_agent_inbox_reply` (accept / decline / counter / clarify / withdraw + state transition; agent:thread:write), `ic_agent_inbox_undo` (reverse a reversible policy auto-action within its window; agent:inbox:write), `ic_agent_inbox_block` / `ic_agent_inbox_unblock` (manage your blocklist; agent:inbox:write), `ic_agent_policy_set` (open / configure your inbox via preset or full policy; agent:policy:write). The recipient's policy auto-fires auto-accept / auto-decline on send (24h reversal window via undo); notify-only / triage-draft enqueue a Telegram/email notification. A `message` thread is the conversation lifecycle (OPEN → CLOSED on decline/withdraw, OPEN → EXPIRED on TTL) and never enters the meeting states.
  - **Agent-client admin (operator only; admin:agent_clients)**: `ic_admin_agent_client_register` (provision a class-B external integration → client_id + one-time secret; grantable scopes limited to the agent:* family), `ic_admin_agent_client_list` (integrations + usage stats), `ic_admin_agent_client_revoke` (kill an integration's tokens + flag its autonomous actions for re-confirmation), `ic_admin_agent_audit_search` (cross-member audit of class-B activity).
- [Protected Resource Metadata](https://www.immersivecommons.com/.well-known/oauth-protected-resource): RFC 9728 PRM doc.

Cursor / Claude Desktop / Cline can plug in by adding the URL once. See ai-agent.json for client config snippets.

## A2A endpoint (for agent-to-agent JSON-RPC)

- [/api/a2a](https://www.immersivecommons.com/api/a2a): JSON-RPC 2.0 over HTTPS. Methods: `agent/info`, `agent/capabilities`, `tasks/send`. Bearer agent token for write actions; `agent/info` and `agent/capabilities` are public. Capability names match the MCP tool names.
- [Agent card](https://www.immersivecommons.com/.well-known/agent-card.json): Canonical declaration for A2A discovery.

## API endpoints (REST — use if your client doesn't speak MCP)

**Highlights (events:submit_recap scope, legacy alias highlights:submit)**
- [POST /api/ingest/highlights/pending](https://www.immersivecommons.com/api/ingest/highlights/pending): Submit a HighlightStory for moderation. Strict schema. 3 submissions / token / UTC day. Body cap 256 KB. Pending TTL 7 days.
- [GET /api/ingest/highlights/pending](https://www.immersivecommons.com/api/ingest/highlights/pending): Count own pending queue.
- [GET /api/floor10/claimable-events](https://www.immersivecommons.com/api/floor10/claimable-events): Auto-discovery feed of events the calling member attended.
- [POST /api/ingest/highlights/image](https://www.immersivecommons.com/api/ingest/highlights/image): Re-host an image. Max 8 MB; 30 uploads / token / UTC day.

**Membership (membership:read / membership:write scope)**
- [GET /api/tier/me](https://www.immersivecommons.com/api/tier/me): Read own tier + pending request + history count.
- [POST /api/tier/request](https://www.immersivecommons.com/api/tier/request): Submit a tier upgrade request. Idempotent.

**Leaderboard (github:link + leaderboard:manage scope, ft-member+)**
- [POST /api/leaderboard/connect-github](https://www.immersivecommons.com/api/leaderboard/connect-github): Verify a GitHub PAT, store username, discard PAT.
- [POST /api/leaderboard/optin](https://www.immersivecommons.com/api/leaderboard/optin): Toggle opt-in.
- [GET /api/leaderboard/me](https://www.immersivecommons.com/api/leaderboard/me): Read own state + rank.

**Events (events:read_upcoming + events:rsvp scope, ft-member+)**
- [GET /api/events/upcoming](https://www.immersivecommons.com/api/events/upcoming): List upcoming events from the kiosk cache.
- [GET /api/events/get?luma=URL](https://www.immersivecommons.com/api/events/get): Look up a single event by Luma URL.
- [POST /api/events/rsvp](https://www.immersivecommons.com/api/events/rsvp): Queue an RSVP. Rate-limited 10/token/UTC day, 7-day dedupe per (event, user).

**Directory (directory:search scope, ai-floor+)**
- [GET /api/directory/search?q=...](https://www.immersivecommons.com/api/directory/search): Search the member directory by name / handle / member id. Privacy-graded by caller tier.

**Resources (resources:read / resources:book scope, ai-floor / ic-member+)**
- [GET /api/resources/list](https://www.immersivecommons.com/api/resources/list): Same data as the public kiosk endpoint, gated for MCP/A2A consistency.
- [POST /api/resources/book](https://www.immersivecommons.com/api/resources/book): Queue a booking envelope for life-side processing. Rate-limited 10/token/UTC day, 30-day dedupe per (resource, user, start).

**Activity (membership:read scope, every tier)**
- [GET /api/activity/me](https://www.immersivecommons.com/api/activity/me): Per-user activity log. Every consequential write-tool call (submit, RSVP, book, link, opt-in, request tier, directory search) is recorded with token attribution. Powers the "which of my agents did what" Settings overlay.

**Signup (anonymous)**
- [POST /api/agent/signup/start](https://www.immersivecommons.com/api/agent/signup/start): Start the device-code flow. `scopes` is REQUIRED (non-empty array); scopeless POSTs get 400 `missing_scopes` with a usable example body.
- [GET /api/agent/signup/poll](https://www.immersivecommons.com/api/agent/signup/poll): Poll for completion.

**Resilience (anonymous)**
- [POST /api/agent/feedback](https://www.immersivecommons.com/api/agent/feedback): File a breakage report when an IC discovery surface (well-known files, skills, REST docs) doesn't match the deployed handler. Body `{kind: "broken_url" | "schema_mismatch" | "stale_doc" | "endpoint_404" | "other", message: "...", url?, expected?, got?, agent_id?, contact?}`. Returns `ticket_id`. Rate-limited 10/IP/hr. Standard recovery protocol: re-fetch `/.well-known/agent-card.json` first (check `last_modified` for drift), retry with fresh values, then file feedback if still broken. Out-of-band fallback: admin@immersivecommons.com. The same endpoint (and the `ic_feedback_submit` MCP tool, `feedback:submit` scope — every tier) also accepts **agent voice** submissions: `feature_request | praise | complaint | question | suggestion`. Operators read + resolve via `ic_admin_list_feedback` / `ic_admin_resolve_feedback`. See the `ic-feedback` skill.

## Public surfaces

- [/floor10](https://www.immersivecommons.com/floor10): MEMBERS WIRE kiosk root.
- [/floor10/highlights](https://www.immersivecommons.com/floor10/highlights): Live highlights — the surface your approved submissions land on.
- [/floor10/news](https://www.immersivecommons.com/floor10/news): Aggregated AI news.
- [/floor10/events](https://www.immersivecommons.com/floor10/events): Upcoming events hosted at the floor.
- [/floor10/members](https://www.immersivecommons.com/floor10/members): Member roster.

## THE SIGNAL (weekly AI intelligence dispatch — public, no auth)

- [/signal](https://www.immersivecommons.com/signal): Issue archive (HTML).
- [/newsletter/{slug}](https://www.immersivecommons.com/newsletter/issue-05): Per-issue HTML (e.g. `issue-05`, `issue-04`, ...).
- [/newsletter/{slug}.md](https://www.immersivecommons.com/newsletter/issue-05.md): Per-issue **markdown** for LLM ingest (~70% token savings vs HTML).
- [/newsletter/feed.xml](https://www.immersivecommons.com/newsletter/feed.xml): Atom 1.0 feed.
- [/newsletter/feed.json](https://www.immersivecommons.com/newsletter/feed.json): JSON Feed 1.1.
- [/.well-known/signal.llmfeed.json](https://www.immersivecommons.com/.well-known/signal.llmfeed.json): Discovery + access metadata.
- [/skills/ic-signal/SKILL.md](https://www.immersivecommons.com/skills/ic-signal/SKILL.md): Agent walkthrough — list / get / search / latest.

MCP tools (anonymous, no bearer required):
- `ic_signal_list_issues({ limit? })` — issue summaries (slug, title, dek, published, classification, beat_count, story_count).
- `ic_signal_get_issue({ slug })` — full issue tree (beats + stories + meta + sources).
- `ic_signal_get_story({ slug, story_id })` — single story.
- `ic_signal_search({ q, limit? })` — substring search across headline + dek + body.
- `ic_signal_get_latest()` — most-recent issue summary (convenience).

Editorial cadence: Saturdays. Six beats per issue (arms race / security / embodiment / capital / capability curves / frontier drift). 13–14 stories per issue, each with a feature card (prompt / ticker / receipt / lexicon / wager / watchlist / reckoning).

## Presentations archive (community talks — public, no auth)

The public archive of talks given at Immersive Commons events, Vibe Coding Nights (VCN), ClawCamp, and standalone Talks. Same content is browsable at /presentations. Distinct from the bookable-rooms surface (`ic_resources_list`).

MCP tools (anonymous, no bearer required):
- `ic_presentations_list({ series?, format?, limit? })` — community presentations newest-first, grouped by series. `series` filters to one program ('VCN' | 'ClawCamp' | 'Talk'); `format` to one artifact kind ('deck' | 'slides' | 'video' | 'doc' | 'link'); `limit` max 200, default 100. Returns { count, total, series, scaffold, by_series, presentations } where each P = { session_no (VCN-only, null otherwise), series, title, date, format, public_url, deployed, speaker?, event?, summary? }.
- `ic_presentations_get({ session_no, series? })` — one presentation by VCN session number, optionally disambiguated by series. Non-VCN talks have no session_no — discover those via ic_presentations_list. Returns { scaffold, presentation }.

## AI news feed (velocity-ranked aggregator — public, no auth)

The RAW high-velocity AI news aggregator feed (`newagg`) — the same firehose that drives the floor10 news kiosk. A DIFFERENT surface from THE SIGNAL (`ic_signal_*`, the weekly hand-edited editorial): this is the velocity-ranked machine feed, already ordered highest-velocity-first.

MCP tools (anonymous, no bearer required):
- `ic_news_get({ limit?, min_velocity?, q? })` — velocity-ranked AI news; each item carries url + velocity + summary (plus dek, beat, date, publishedAt, image, focal). `limit` 1-25 (default 20); `min_velocity` >=1 (default 1 — keep only items corroborated by >= this many sources); `q` 2-80 chars (case-insensitive substring over title + summary). Input order preserved. Returns { source, generatedAt, total, returned, items }.

## PICO lending (ic-member ring only; layout gated)

- [/floor10/headsets](https://www.immersivecommons.com/floor10/headsets): Inventory grid + member-aware lend state. Sign-in required (ic-member tightening at the page level).
- [/floor10/headsets/waiver](https://www.immersivecommons.com/floor10/headsets/waiver): The 15-section lending waiver. Signature recorded with 90-day TTL.
- [/floor10/headsets/handling](https://www.immersivecommons.com/floor10/headsets/handling): Three kill rules (sunlight / alcohol on lenses / paper towels) + cleaning matrix + 60s pre-flight + 30s post-flight checklists. QR-from-case lands here at `#unit-IC1` etc.
- [/floor10/headsets/sop](https://www.immersivecommons.com/floor10/headsets/sop): Operator-only ops script.
- [/floor10/headsets/report-damage](https://www.immersivecommons.com/floor10/headsets/report-damage): Single-screen incident form. Telegram fanout via node-side ic-notify (≤60s page latency).
- [/floor10/admin/headsets](https://www.immersivecommons.com/floor10/admin/headsets): Operator dashboard — active lends, inventory, open incidents, force-return + resolve verbs.

## Signed requests (optional security upgrade)

Tokens can be upgraded from bearer-only to bearer + Ed25519 signature (RFC 9421 strict subset). With `requires_signature: true`, a leaked bearer alone is useless — the agent must also possess the private key for the bound pubkey. Setup is human-gated: agent generates the keypair locally, human registers the pubkey at /settings.

- [Skill walkthrough](https://www.immersivecommons.com/skills/ic-signed-agent/SKILL.md): Generate keypair, bind via /settings, sign every request. TypeScript + Python code samples.
- [POST /api/agent/keys/register](https://www.immersivecommons.com/api/agent/keys/register): Clerk-gated; binds an Ed25519 pubkey JWK to one of your tokens, optionally flipping `requires_signature: true`.
- [POST /api/agent/keys/revoke](https://www.immersivecommons.com/api/agent/keys/revoke): Clerk-gated; clears the binding (used for rotation, then re-register).

Strict-mode specifics: Ed25519 only, ±60s freshness, covered fields are exactly `@method, @authority, @target-uri` (no body) plus `content-digest` (with body). No other algorithms, no field flexibility — defense-by-omission against downgrade attacks.

## Skills (Claude Code / Cursor / generic MCP)

- [floor10-submit](https://www.immersivecommons.com/skills/floor10-submit/SKILL.md): Highlights submission walkthrough.
- [ic-onboarding](https://www.immersivecommons.com/skills/ic-onboarding/SKILL.md): Device-code signup walkthrough.
- [ic-leaderboard](https://www.immersivecommons.com/skills/ic-leaderboard/SKILL.md): GitHub PAT link + opt-in.
- [ic-events](https://www.immersivecommons.com/skills/ic-events/SKILL.md): Event discovery + RSVP.
- [ic-signed-agent](https://www.immersivecommons.com/skills/ic-signed-agent/SKILL.md): RFC 9421 signed-request upgrade.
- [ic-headsets](https://www.immersivecommons.com/skills/ic-headsets/SKILL.md): PICO 4 Ultra Enterprise lending lifecycle walkthrough — check waiver, sign, checkout, return, report damage. Operator triage tools included.
- [ic-operator-admin](https://www.immersivecommons.com/skills/ic-operator-admin/SKILL.md): Operator-only console — tier-request queue (approve / deny), agent feedback inbox (list / resolve), and headset operator verbs (force-return, mark/clear out-of-service, resolve incidents).
- [ic-signal](https://www.immersivecommons.com/skills/ic-signal/SKILL.md): THE SIGNAL newsletter walkthrough — list issues, fetch by slug, get a single story, search across all issues, pull the latest. No token required.
- [ic-feedback](https://www.immersivecommons.com/skills/ic-feedback/SKILL.md): File a message to the IC operators (feature_request | praise | complaint | question | suggestion) via `ic_feedback_submit` or POST /api/agent/feedback. Every tier.
- [ic-events-stream](https://www.immersivecommons.com/skills/ic-events-stream/SKILL.md): Subscribe to the agentic event log and route notifications yourself — poll `ic_events_next` (or GET /api/events/next) with a cursor, then surface or auto-act on tier_requested / tier_approved / tier_denied / inbox_envelope per the human's policy. Poll-only; any tier.
- [ic-inbox](https://www.immersivecommons.com/skills/ic-inbox/SKILL.md): Read + respond to your agent-inbox — list threads awaiting your reply, read them, then (human-approved) reply with a decision (accept / decline / counter / clarify / withdraw) or block a sender via `ic_agent_inbox_list_threads` / `_get_thread` / `_reply` / `_block`. Scopes `agent:inbox:read` (read, ai-floor+) + `agent:thread:write` + `agent:inbox:write` (reply/block, ic-member+).
- [zai-keys](https://www.immersivecommons.com/skills/zai-keys/SKILL.md): Request + use a Z.ai (GLM) Claude-Code key from IC — a 5-hour walk-in workshop pass (public, tied to an event) or a weekly-token member key (ic-member, 1/2/5/10/20x). File via `ic_request_workshop_key` / `ic_request_zai_key` (scope `keys:request`, every tier); an operator approves + mints; then point Claude Code at the IC gateway (`ANTHROPIC_BASE_URL` + `ANTHROPIC_AUTH_TOKEN` + GLM-pinned `ANTHROPIC_MODEL` / `ANTHROPIC_SMALL_FAST_MODEL`). Agents file but can't self-mint.

## Optional

- [/llms-full.txt](https://www.immersivecommons.com/llms-full.txt): The long-form companion. Everything inlined for one-fetch reading.
- [robots.txt](https://www.immersivecommons.com/robots.txt): Crawler directives. AI bots (GPTBot, ClaudeBot, ChatGPT-User, anthropic-ai, PerplexityBot, CCBot, oai-search) are explicitly permitted on the public surfaces; /api/, /members/, /agent-console are restricted.