Agent Plugin · v0.2.0

Give your agent evidence it can hand back.

CiteAnything combines one Skill with nine authenticated MCP tools for replayable citations, private knowledge-base evidence, preview status, and cited publishing.

Verified Codex install

codex plugin marketplace add veriglow/citeanything-plugin --ref main && codex plugin add citeanything@citeanything

1. Run the one-line native marketplace command.
2. Restart or reload Codex if it asks.
3. On first tool use, approve access in your browser.

No API key, environment variable, or pasted authorization code is required for the international service.

A focused tool surface

The plugin does not provide web search, open, click, find, crawl, or arbitrary page fetching. Your agent uses its own web tools to inspect sources, then asks CiteAnything to preserve verified evidence.

create_citations

Create replayable web or knowledge-base citations

get_citation

Read an owned citation and its verification state

wait_for_citation_preview

Wait for automatic preview capture

list_knowledge_base

List your private knowledge-base documents

search_knowledge_base

Search extracted text in your documents

read_knowledge_base_page

Read one selected source page

import_pdf_to_knowledge_base

Import one explicitly selected public PDF

wait_for_knowledge_base_document

Wait for document processing

publish_article

Publish evidence-backed Markdown

Compatibility

Codex CLI 0.152.0Passed: native install + OAuth read + process reuse

Kimi Code CLI 1.9.0Plugin registered; combined runtime pending; native OAuth + 9 tools passed

Cursor Agent 2026.08.31Installed; OAuth pending without Cursor IDE

Claude Code 2.1.229Plugin registered: 1 Skill + 1 MCP; OAuth pending

The portable npx plugins installer discovers one Skill plus MCP from the public GitHub repository, but does not complete Codex 0.152.0's native registration, so it remains a cross-host candidate rather than the verified Codex path. A host moves to fully verified only after install, browser OAuth, tool call, restart, refresh, uninstall, and revocation all pass.

Access and lifecycle

The consent screen grants citation read/write, knowledge-base read/write, and article write access. Each client gets a separate one-hour access token and a revocable refresh session.

Re-run the install command to install the current release. Remove the plugin in your agent's plugin or MCP settings, then revoke its session from Connected apps.

Direct entry points: canonical SKILL.md, remote MCP endpoint, and machine-readable manifest.

Live MCP and OAuth verified 2026-09-02 · Host results reflect the exact versions above; incomplete lifecycle gates remain explicit.