Admin › Settings › Marketplace
Overall architecture
The Marketplace stores only catalog metadata and connection config. The containers (sidecars) that do the actual work are deployed separately by the administrator, and this screen just points at their URLs.| Sidecar | ACR image | Container | Port | Role |
|---|---|---|---|---|
| Code Interpreter (Jupyter) | mkp-code | jupyter | 8888 | Runs document-generation skills + code interpreter |
| Google Workspace MCP | mkp-gws | gws-mcp | 8000 (/mcp) | Gmail, Calendar, Drive, and more |
| Microsoft 365 MCP | mkp-m365 | m365-mcp | 8001 (/mcp) | Outlook, Teams, SharePoint, and more |
Images are distributed from the private ACR
acrcloosphere.azurecr.io. Customer-VM deployment uses docker compose + .env (ACR token required, JUPYTER_TOKEN recommended). If you only use document generation, the Jupyter sidecar alone is sufficient.Document generator (code execution)
The PPT/Word/Excel/HTML document-generation skills run bundled scripts in the Jupyter code execution engine to produce files.Enter Jupyter URL and token
On the document-generator card, enter the Jupyter service URL (e.g.
http://jupyter:8888) and auth token (JUPYTER_TOKEN).Test connection
Click Test connection to verify Jupyter responds. It must succeed before you can activate.
This setting shares the same engine as the Code Execution settings. Enabling Jupyter on either side lets both the document-generation skills and the user code interpreter use it.
External integrations (MCP services)
Expose Google Workspace/Microsoft 365 as agent tools.Enter the service URL
On each MCP service card, enter the container URL (e.g.
http://gws-mcp:8000/mcp, http://m365-mcp:8001/mcp). Do not add a trailing slash.Test connection
Use Test connection to check reachability. For an auth-gated MCP server, a 401/403 on a token-less probe is normal and is treated as “reachable.”
MCP sidecars use passthrough authentication — they don’t run their own OAuth but trust each user’s SSO token directly. So the Google OAuth client must be the same one Cloosphere signs in with, and each service category’s availability is determined by the OAuth scopes granted to the user.
Status badges
Each service card shows real-time status.| Badge | Meaning |
|---|---|
| Reachable | The URL responds — can be activated |
| Unreachable | The URL does not respond — check deployment/network |
| Not Ready | A prerequisite (e.g. code execution engine) is not configured |
An MCP “Connected” badge only means a connection row exists; it does not guarantee the server is actually alive. Real status is confirmed when the tool list is fetched in Workspace ▸ Tools.
Granting permissions
After an administrator connects the services, users need group permission to use the Marketplace.- In Admin Settings > Users > Groups, grant groups the Marketplace Access permission (none/read/write). The default is locked.
- Write permission is required to create connections/capabilities.
- For users who use document generators (skills), also grant Skills Access permission if needed.
Related pages
Marketplace (user)
How users create document capabilities and MCP integrations and attach them to agents
Code Execution
Configure the code execution engine (Jupyter) the document generators share
License
Register the Marketplace add-on feature key
Skills (user)
The concept of reusable playbooks and executable skills