05 · Setup

Install & connect.

Stand up the brain, connect the tools once for everyone, and give each role exactly the access it needs. New teammate? The step-by-step list is on Onboarding. Secrets live in the host, keychain or 1Password, never in Git.

First · the brain

Install crue-os for the org.

crue-os marketplace

Org settings · admins
  1. Organization settings → Plugins. Connect the GitHub repo crue-os/crue-os via the Claude GitHub App. Cowork and Skills must be on.
  2. Set the seven work packs to Installed by default: brand, web, product, media, content, studio, ops. Set crue-hub to Available for install; only admins install it.
  3. Turn on Sync automatically. A merged change reaches the whole org in about 30 minutes, or hit Update.
  4. Claude Code reads its own settings file. See the next section.
Access by account, not by hiding skills. Every teammate has every work pack. Offer, invoice, auftrag and hours-report stop politely outside crue · House, and Bexio only lets Roman and Edvin in. The confidential layer lives in crue-os/crue-house, mounted read-only in the House Project.
Claude Code

One file per role. No manual installs.

Copy the file into ~/.claude/settings.json, restart, check /plugin. Your claude.ai connectors come along, so /mcp already shows ClickUp, Figma and the rest.

team-settings.json

everyone
{
  "extraKnownMarketplaces": {
    "crue-os": { "source": { "source": "github", "repo": "crue-os/crue-os" }, "autoUpdate": true }
  },
  "enabledPlugins": {
    "crue-brand@crue-os": true,
    "crue-web@crue-os": true,
    "crue-product@crue-os": true,
    "crue-media@crue-os": true,
    "crue-content@crue-os": true,
    "crue-studio@crue-os": true,
    "crue-ops@crue-os": true
  }
}

Admins use admin-settings.json: the same plus "crue-hub@crue-os": true. Both files live in the repo under GETTING-STARTED/claude-code/.

Auth. GitHub read on crue-os/crue-os (gh auth login). For background auto-update set GITHUB_TOKEN with repo scope. By hand instead: /plugin marketplace add crue-os/crue-os, then /plugin install crue-web@crue-os and the rest.

Connectors

Added once for the org. Signed in once by each person.

Admins add them in Organization settings → Connectors. Each person then goes to Settings → Connectors and signs in. Works in claude.ai, Desktop, Cowork and Code.

ClickUp

everyone

Where the work comes from. Directory connector, or https://mcp.clickup.com/mcp, OAuth. Skills stay inside the crue space; each person sees only the lists ClickUp lets them see, so Sales and Admin stay with Roman and Edvin.

Figma

everyone · Full seat to write

The official remote MCP, https://mcp.figma.com/mcp, OAuth. Reads designs, writes files, pages, images and SVG, pushes a built page back into Figma. Writing needs a Full seat. In Claude Code the official plugin adds Figma’s own skills: /plugin install figma@claude-plugins-official.

Envato

everyone · new

Licensed stock: photos, video, music, sound, fonts, graphics, mockups, 3D, templates. Org custom connector https://mcp.envato.com/mcp, no login: click Connect once under Settings → Connectors. It searches and returns watermarked previews with links; the download and the licence registered to the client project happen in Envato Elements under the crue account (1Password). Certificate to SharePoint Projects/<Client>/licences/.

Claude Code without a claude.ai login: claude mcp add --transport http --scope user envato https://mcp.envato.com/mcp.

Mobbin

everyone · paid seat

600k+ real screens and flows. Directory connector, or https://api.mobbin.com/mcp, OAuth with your Mobbin seat.

Ideogram · Recraft · Higgsfield

everyone

Ideogram for type in image: https://mcp.ideogram.ai/mcp. Recraft for real vector, icon sets and brand style sets: https://mcp.recraft.ai/mcp. Higgsfield for image and video: https://mcp.higgsfield.ai/mcp, one shared crue account. All OAuth. After generating, open the result in the tool to download.

GitHub · write MCP

everyone · scoped

The hands behind lock to client. Add custom connector https://api.githubcopilot.com/mcp/ and sign in. Grant only crue-os/crue-clients and crue-projects, Contents read and write. Never crue-os, crue-house or crueweb. Claude Code commits with git, so the MCP is optional there.

Microsoft 365 · Canva · Sanity · Supabase

everyone · web

Directory connectors. Outlook drafts, never sends; SharePoint is read-only today. Sanity and Supabase for web builds that need a CMS or a backend.

Vercel

admins + Fisnik

Directory connector, or https://mcp.vercel.com, OAuth. It sees only the Vercel teams the person belongs to: team crue holds Roman and Edvin as owners and Fisnik as Developer for care. Production only after the Roman Pass.

Bexio

admins · House only

Add custom connector https://bexio-mcp.crue.ch/mcp, sign in with your crue Microsoft 365 account. ALLOWED_EMAILS lists Roman and Edvin only, and it is enabled in the crue · House Project only. Creates, never sends.

The rule for all of them. Read freely. Create on confirmation. Never send, publish or deploy without a human go. Connectors are optional: a skill falls back silently when a tool is not there.
Local tools

Run where you build.

Per machine, in Claude Code and Desktop. Keys in your shell env or keychain, never in Git.

21st MCP

web · formerly Magic

shadcn and Tailwind component scaffolds, restyled to the tokens. Old Magic keys were reset: get a fresh one at 21st.dev/mcp, then:

npx @21st-dev/cli@latest init --client claude

Or as a plugin: /plugin marketplace add 21st-dev/magic-mcp, /plugin install 21st, key in API_KEY_21ST.

Playwright

bundled in crue-web

Captures reference sites and checks our own builds. Ships inside the crue-web pack, so it registers itself. Needs Node 18+; the first run downloads a browser. On the web surface the skills use the Chrome connector instead.

Google Analytics · GA4

admins + web

Real traffic and funnels, read-only. In Google Cloud enable the Analytics Admin and Data APIs and create a Desktop OAuth client, then:

gcloud auth application-default login \
  --scopes=https://www.googleapis.com/auth/analytics.readonly,\
https://www.googleapis.com/auth/cloud-platform \
  --client-id-file=YOUR_CLIENT.json

claude mcp add analytics-mcp --scope user \
  -e GOOGLE_APPLICATION_CREDENTIALS=PATH \
  -e GOOGLE_PROJECT_ID=PROJECT_ID \
  -- pipx run analytics-mcp
Stock & templates

Real material, licensed right.

Premium work uses real photography, real type, real mockups. Generation fills what cannot be shot.

Envato · the order

Real before generated

The client’s own images first. Then Envato: Claude shortlists 6 to 12 candidates that fit the lock-in, you pick, download in Envato Elements and register the licence to the client project, then grade them so they read as one shoot. Then Higgsfield, Ideogram or Recraft to the locked recipe.

licence per projectgraded to the lock-inno stock clichés
Temlis · no MCP

A head start, never the finish

One crue licence. A Temlis template can seed structure, rhythm or a Figma base. We rebuild it on our stack and restyle it to the client’s tokens until nothing stock survives. A repo that bundles template source stays private, and the template goes in the client’s decisions log.

rebuilt on our stackprivate repologged in the Core
The GitHub orgs

Work in progress here. Finished and live there.

Each org has one job and one group of people, so nothing drifts and nobody reaches what they should not.

crue-projects

whole team · write

The team workspace. Every client build in progress: <client>-website, <client>-app, <client>-docs. Branches, PRs, previews.

crueweb

admins · Fisnik for care

Finished and live, linked to Vercel. When a build ships and is worth keeping, an admin transfers the repo here from crue-projects and relinks the Vercel project. Fisnik writes on the live sites he looks after.

crue-os · crue-clients · crue-house

the brain

crue-os: the skills and standards; the team reads, admins merge. crue-clients: one Client Core per client under clients/<slug>/; the team writes by lock to client. crue-house: pricing, proof and crue’s own memory; admins only.

Client Cores · the clients repo

One repo. A folder per client. Updated by commit.

Every client’s brain (brand-pack, imagery lock-ins, reference packs, decisions) lives in crue-os/crue-clients under clients/<slug>/, mounted read-only into that client’s Project.

How a result persists

lock to client
  1. Generate something in the client Project: a colour, a voice, a style lock-in, a reference pack, a decision.
  2. Say “lock to client”. The skill shows a lock card (item, file, the change), checks it against what is already locked, logs the decision.
  3. It commits to crue-clients/clients/<slug>/<file>.md through the GitHub write MCP. Never a force-push.
  4. Sync the Project so the next chat reads the new state. The committed Core is the memory, not the chat.
No write MCP connected? The skill hands you a block to paste and commit. It never blocks.
Start a client project

From nothing to a warm Project in minutes.

One client equals one Project equals one brand.

Step by step

admin starts, team works
  1. Generate the Core (admin). In crue · House run initialize-project: pick or create the client in Bexio, it creates clients/<slug>/ from the latest template and commits it.
  2. Create the Project named Client · <Name> and share it with the people on the work.
  3. Mount the Core. Files → GitHub → crue-os/crue-clients → only clients/<slug>/, read-only. Set the archetype in brand-pack.
  4. Set the instructions. “This is the Client Core for <Name>. Always read brand-pack.md first. Stay within this brand. Never reference other clients or the crue House brand.”
  5. Brief to tasks. clickup-brief puts one task in the right Projects list with an owner, dates and the Client, Claude Project and Github Client Brain fields. Size, never budget.
  6. Work, then lock. The teammate runs the skill from the task, ends on the Roman Pass, says “lock to client”, hands in to review.
Billing. In the client Project, work-summary lists what was delivered with no rates. An admin runs invoice in House to price it and create it in Bexio.
Money stays with admins. Tasks and client Projects carry small, medium or big, never a number. Bexio is never enabled in a client Project.