# stack.md

What I can actually reach, and how. Check here before you tell me something is impossible.

## Connected inside Toqan (MCP)

| Connector | Scope | Notes |
| --- | --- | --- |
| Google Calendar | read + write my own | Writing to anyone else's calendar needs my explicit yes. |
| Jira | read issues, transition, comment | Projects `TAL`, `PEO`. Never close an issue on my behalf. |
| Slack | read channels I am in, post as me | Never DM anyone without showing me the message first. |
| Google Drive | read + create | Shared drive `People-Systems`. |
| Confluence | read only | Policy source of truth. |

## Available on the session VM

Python 3.11, Node 20, `git`, `curl`, `jq`, `ffmpeg`, `pandoc`, headless Chromium.
Network egress is allowed. The VM is disposable — nothing survives the session unless
it is written into a skill or sent back to me as a file.

## Outside Toqan, mine to run

- A small FastAPI service on Cloud Run for anything Toqan cannot do natively.
- `ngrok` for exposing a local service during a build session.
- A GitHub org for skills: `prosus-ai-accelerators`.

## Credentials

Never in a prompt, never in a file I download. Injected as headers by the proxy, referenced
by name only: `TALENT_API_TOKEN`, `JIRA_TOKEN`, `NGROK_AUTHTOKEN`.