Symbol

Package your workspace's published skills and agents as an installable Claude Code plugin — how to enable it, install it, and protect, rotate, and recover the install URL.

A marketplace turns your workspace's published skills and packaged agents into a single installable Claude Code plugin. Instead of copying capabilities from machine to machine, you enable a marketplace once, hand out an install command, and every machine that runs it gets the whole set — and keeps it current.

There are two kinds, and they work identically:

A personal marketplace publishes the skills and agents in your personal workspace. Manage it from your Settings → Marketplace.
An organization marketplace publishes an organization's skills and agents. Manage it from that organization's Settings → Marketplace (owners only).

Claude Code only. This private marketplace works in Claude Code (CLI and desktop). claude.ai on the web and Cowork currently require public sources, so they cannot install from it.

Enabling a marketplace

Open the Marketplace settings for the workspace you want to publish from and, as its owner, give it a plugin name (lowercase letters, digits, and hyphens — permanent once set). A personal marketplace also lets you pick a public marketplace name; leave it blank to get an auto-generated, opaque one with no personal details in it. Enable it, and Symbol is ready to hand out install commands.

Nothing is published until you mark individual capsules as skills or package them as agents — see Prompts & Skills and Agents. The marketplace is the delivery channel; those pages cover authoring what rides on it.

Installing the plugin

The Marketplace settings show a one-time install command. Run it once in Claude Code:

/plugin marketplace add <your-install-url>

That registers the marketplace and lets you enable its plugin. For a hands-off setup that also auto-updates, copy the settings snippet the page shows into your user-scoped Claude Code settings (~/.claude/settings.json):

{
  "extraKnownMarketplaces": {
    "<marketplace-name>": {
      "source": { "source": "git", "url": "<your-install-url>" },
      "autoUpdate": true
    }
  },
  "enabledPlugins": {
    "<plugin-name>@<marketplace-name>": true
  }
}

Keep this in your user settings, not a project's .claude/settings.json. The install URL embeds a personal access token (see protect it below), so a project file — which is typically committed and shared — would leak your credential. Tokens are per member anyway, so each teammate adds their own URL to their own user settings rather than sharing a committed one.

With autoUpdate on, the marketplace refreshes at the start of each session. With the one-line install instead, pull published changes yourself whenever you want:

/plugin marketplace update <marketplace-name>

Agents published this way ride along with the skills — they are delivered as plugin agents (namespaced plugin-name:agent-name). This is the third of the three agent delivery paths; see Agents → Path 3 for what a plugin-delivered agent can and cannot carry (the plugin ceiling drops permissionMode).

The install URL — protect it, rotate it, recover it

Your install URL embeds a personal access token as part of the address (https://x:<token>@<host>/<owner>.git). The token is what authorizes the clone, so the URL is a credential.

Protect it

Treat the install URL like a password. Anyone who has it can clone your marketplace. Do not commit it to a repository, paste it into shared documents, or send it over chat. When you share access with a teammate, have them generate their own URL from their own Marketplace settings rather than passing yours around — tokens are per member.

Rotate it

The Rotate install token button in Marketplace settings mints a fresh token and immediately invalidates your previous URL. After rotating, re-add the marketplace (or re-paste the settings snippet) on every machine that used the old one. Rotation is scoped to you: a teammate's URL keeps working, because each member holds their own token. Rotate whenever a URL may have been exposed, or on a routine schedule.

Add a second device

Nothing to enable — the same install URL works on every machine you own. If you still have it, run the install command there and you are done.

If you no longer have it, see Recover it below — copying it off a machine that already has the plugin is the route that does not disturb your other devices.

Recover it — "I didn't save the URL"

Symbol shows the tokenized URL only once, at the moment you mint it — it is never re-displayed afterwards, so the settings page alone cannot give a lost URL back. Two ways to recover:

Copy it from a machine that already has the plugin installed. Claude Code stores the marketplace's source URL in its own configuration — run /plugin marketplace list, or read the extraKnownMarketplaces entry in that machine's ~/.claude/settings.json. The token is right there in the stored URL.
Rotate and reinstall everywhere. If no installed machine is available, Rotate install token to mint a new URL, then reinstall with that new URL on every affected machine — the machine you rotated from included. Rotating invalidates the old URL, so any machine still holding it (old or new) must be re-added with the new URL before it can pull again.

Leaving revokes access. Removing a member from an organization revokes their marketplace token, so their install URL stops working immediately — no separate cleanup step needed.

Plugin Marketplace