Capabilities

Recipes declare portable capability policy. A package manifest or environment binding supplies connectivity; the environment owns secrets and environment-specific overrides.

Policy and connectivity

package.json#pi.mcp declares the package-wide server and tool ceiling.
agents/*.yaml#mcp narrows that ceiling for the selected agent.
A package MCP manifest may supply portable endpoint and catalog metadata; .pi/mcp.local.json or a host binding supplies environment-specific endpoints and credential references.

Authorization intersects package policy with each agent's selection. A session materializes the combined selections of the active agent and its visible subagents. Connectivity is also required, but a binding never grants a tool by itself and no agent can select capability the package did not declare.

Use the canonical Pi Recipes MCP reference for schemas, fail-closed behavior, and the session-local CLI.