# BigSkill

> BigSkill is a business skill repository delivered over MCP (Model Context Protocol). Write skills once, assign them to departments, issue a key per employee — every staff member's AI assistant always reads the latest version. Update once, the whole company's AI follows instantly.

BigSkill là kho skill cho doanh nghiệp phát qua MCP: soạn skill (file SKILL.md kèm file văn bản) ở một nơi, gán theo cây phòng ban, phát key cho từng nhân sự. Trợ lý AI của họ (Claude, Cursor, ChatGPT, Gemini CLI…) đọc đúng bản mới nhất qua một địa chỉ hub duy nhất.

## How it works

1. Owner/Admin creates a Biz, builds the department tree, invites staff by email (one-time link, 7 days).
2. Skills are authored via web editor, AI Studio (description + PDF/Word/Excel → draft), .zip/.skill bundles, or individual files.
3. Managers issue keys per person or per department — keys are emailed to recipients.
4. Staff paste a ready-made config into their AI assistant — nothing to install.

## Key capabilities

- Skills delivered via MCP hub (Streamable HTTP, JSON-RPC 2.0): tools list_skills, get_skill, get_skill_file, search_skills; MCP resources skill://<server>/<name> and prompts /skill-name.
- RAG: search_knowledge retrieves relevant passages across permitted skills; knowledge graph with similarity/hierarchy/concepts/entities views.
- Cross-session AI memory: remember/recall_memory/forget_memory, shareable to a company pool after manager review.
- Staff can propose skill edits via propose_skill_update/suggest_skill_change — proposals await review in a web inbox.
- Department-scoped permissions: servers visible to "Whole Biz" or chosen departments, children inherit parents.
- Instant revocation: revoked keys or locked members are blocked on the next call; department changes take effect immediately.
- GenSkill Studio: AI drafts SKILL.md from a description plus PDF/Word/Excel uploads, billed against plan AI token credits.
- Management MCP face for admin AI keys (bmk_) with read|write|write_delete scopes.
- Web dashboard: call stats, per-person audit trail, access simulator, CSV export, dark/light, VI/EN i18n.

## Security

- Keys stored only as HMAC-SHA256 hashes with a pepper outside the database; shown once at issuance.
- Staff-facing hub is read-only by default; direct writes limited to managers+ when enabled.
- TOTP 2FA with 8 one-time backup codes; secrets AES-256-GCM encrypted at rest.
- Two-layer rate limiting: 120/min per key, 600/min per IP.
- Full tenant isolation at query layer, optional Postgres row-level security; unknown Bizs respond as non-existent (anti-enumeration).
- MCP logs never contain real keys or skill content; 3 skill security levels per Biz: off / protected / locked.

## Compatibility

Claude Desktop, claude.ai, Claude Code, Cursor, ChatGPT, Gemini CLI, and any MCP client supporting Streamable HTTP + Authorization header.

## Pricing

Free trial plan: 5 skill servers, 20 members, 50 skills, 5 active keys per person, 100,000 AI tokens/month. All features included.

## Links

- [Homepage](https://bigskill.biglead.vn/)
- [English homepage](https://bigskill.biglead.vn/?lang=en)
- [Connect your AI](https://bigskill.biglead.vn/connect)
- [Sign up](https://bigskill.biglead.vn/register)
- [Full documentation for LLMs](https://bigskill.biglead.vn/llms-full.txt)

## Contact

support@biglead.vn