Context7 plugin
The Context7 plugin lets a Vaubaan Gateway mission use Context7 without handing the agent a credential. Look up current library documentation with Context7, through the official Context7 MCP server.
- Version:
0.1.0(package@vaubaan/plugin-context7) - Status: stable
- Health: not enough reports yet — what this means
- Source: plugins/context7, catalog risk-catalog.yaml version 1 of 2026-10-16
- How to connect an account: Connect Context7
- How it is modelled: handbook
One account is a Context7 API key of a teamspace. It has one resource, the library index the key can query: the public libraries its teamspace policies allow and its private sources. The documentation questions an agent asks are sent to Context7. There is no environment.
Permissions
Each permission is a named risk of the plugin's catalog: a mission holds an explicit list of them, never "all". The severity is computed from the permission's six axes (undo, blast radius, data, cost, visible to, lasts); nothing is decided from it.
| Permission | What it allows | Severity | Why it is a risk |
|---|---|---|---|
context7.query-docs | Ask Context7 about library documentation | medium | The question the agent writes, which may carry code or internal context, is sent to Context7, a third party that stores queries; the documentation that comes back is third-party text. Each call also spends the key's monthly Context7 quota. |
context7.uncategorized-write | Uncategorized write | high (the catch-all: touched only by a call no other permission covers) | Catch-all for writes without a dedicated entry. No Context7 tool of this plugin writes. |
Presets
A preset pre-fills the permissions of a mission for one account, with a limit per period, a rate and whether each permission runs freely or asks the mission creator first. The person creating the mission adjusts it; the mission stores the explicit list.
Read-only
read-only — Ask Context7 about library documentation. The questions the agent writes are sent to Context7.
| Permission | What it allows | Limit per period | Rate | Runs |
|---|---|---|---|---|
context7.query-docs | Ask Context7 about library documentation | 300 | 20 per minute | runs freely |
Tools
| Tool | What it does |
|---|---|
context7__resolve-library-id | Find a library in Context7 |
context7__query-docs | Read a library's documentation |
Health
Health: not enough reports yet. A plugin version is deemed validated by the community with at least 200 reports and 90 % of them successful, over the last 90 days, as reported by the instances whose operators turned community telemetry on. It is a community signal, not a security guarantee.