Loadouts are ready-made bundles of rules, skills and MCP configs for one job — a Godot game jam, a Supabase SaaS, a Discord bot. Equip one and your agent stops making the classic mistakes. Works with Claude Code, Codex, Cursor, Gemini CLI, Antigravity CLI and Copilot.
Latest note Claude Code hook security: what a cloned repo can run
Most skill directories list millions of files nobody has run. We would rather list a few hundred that work. Every loadout is verified on install automatically: the files parse, land where each agent looks, pass a safety scan and, where we can, build a starter project. Agent runs are a separate badge, and until an agent has actually run a loadout it says not agent-tested, plainly. No fake ticks.
Fail-closed PreToolUse, post-edit and Stop hooks that block force-pushes, .env reads and wild deletes, check each edit and run tests before done.
discord.js v14 rules and an add-a-slash-command skill for building a Discord bot that registers commands properly and never leaks its token.
GDScript conventions, jam-scope discipline and a ship-to-itch.io skill so your agent helps you finish a Godot 4 game in 48 hours.
Rules and an add-a-tool skill for building a Model Context Protocol server in TypeScript that agents can actually use well — clear tools, safe inputs, no stdout noise.
Rules, an RLS audit skill and a read-only Supabase MCP config for vibe-coding a Next.js App Router SaaS without leaking your database.
A launch-check skill and always-on security rules that catch leaked keys, open databases and missing auth before your vibe-coded app goes live.
Every loadout is plain files plus a JSON manifest. Agents can read the catalogue without scraping a single page.
# the whole catalogue, for an LLM curl https://setupbay.com/llms.txt # machine-readable index and one loadout with install paths curl https://setupbay.com/api/index.json curl https://setupbay.com/api/loadouts/godot-4-game-jam.json