One clause governs this, it lives in a policy that only binds Anthropic's own Directories, and it is a primary-purpose test rather than a link ban
The question
"Does the Anthropic/Claude plugin marketplace permit a free skill whose output links to a paid off-platform product, and are there listing/policy constraints on commercial CTAs inside a free skill?" Named open follow-up #2 in [[2026-08-18-free-skill-funnel-paid-conversion]], which recommended shipping MAC's free /dq audit as an instrumented marketplace skill and left the legality of its CTA unresolved.
What we already know (from the vault)
- There is no single "the marketplace" - there are two surfaces with different governance, and the vault already documented both. [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]] records the official directory launching 2026-05-22, pre-configured in Claude Code v2.1.143+, browsable in-app via
/plugin-> Discover, with a two-tier trust model:claude-plugins-official(Anthropic-curated, automated security review, stricter review earns an "Anthropic Verified" badge) andclaude-plugins-community(automated safety screening, SHA-pinned). Critically, that brief established the review certifies security and safety, not efficacy - and it said nothing about commercial content, because nobody had looked. - RDCO's own public surface is self-hosted, which turns out to be the load-bearing distinction.
~/Projects/ray-plugins/.claude-plugin/marketplace.json(inspected 2026-08-24) is a plain git-hosted catalog:name: ray-plugins,owner: Ray Data Co / https://raydata.co, 12 plugin entries, no pricing or entitlement fields. Users add it with/plugin marketplace add. Nothing in that path passes through an Anthropic listing review. Per [[2026-06-10-claude-code-plugin-private-distribution]] the same mechanism serves private Bitbucket distribution, which is the CAF topology. - The official directory is already dominated by free plugins whose whole job is to reach a paid off-platform product. [[2026-07-09-anthropic-plugin-ecosystem-vs-rdco-brigade-plugins]] surveyed 255 entries in
claude-plugins-officialand found the catalog is "vendor-shaped: one entry per external system," namingstripe,linear,github, with 12 of the 54 physically inspected being bare MCP connectors carrying.mcp.jsonand zero skills. Stripe, Linear and Snowflake are paid commercial products. This is the observed-practice baseline. - The prior ToS scan looked at the adjacent question and did not reach this one. [[2026-07-04-anthropic-max-plan-tos-productized-agentic-use]] covers productized and agentic use of a Max subscription, not directory listing policy. The two questions share a vocabulary and are not the same constraint.
- The parent brief's recommendation is the thing this unblocks. [[2026-08-18-free-skill-funnel-paid-conversion]] concluded that the free
/dqaudit should ship "as the instrument, not as the funnel," publish to a public marketplace, and instrument install / activation / click-through to the paid page. That click-through is precisely the artifact whose permissibility was unknown.
What the web says
- A primary policy exists and it is the only text on point: the Anthropic Software Directory Policy, effective 2026-04-15 (support.claude.com article 13145358). Its scope covers "directories, repositories, surfaces, or similar offerings" and the software in them, explicitly including "Model Context Protocol servers, Skill folders, plugins, apps, and other software, containers, or data." A Skill folder inside a plugin is in scope.
- One clause addresses commercial content. Quoted verbatim from the unsupported-use-cases list (section 4.C): "Software that serves advertisements, sponsored content, paid product placements, or exists primarily as an advertising or promotional vehicle." That is the entire commercial-content surface of the policy as returned by the fetch.
- The policy is silent on the specific mechanics this question asks about. The fetch found no clause addressing pricing disclosure, free-versus-paid tiers, in-software purchase prompts, or a link from free software to the publisher's own paid product. Review is described only as: Anthropic "conduct[s] both initial and ongoing reviews of Software, and may require developers to address compliance issues to continue being included in our Directories." No published acceptance criteria, no rejection taxonomy, no removal procedure.
- The Claude Code marketplace documentation contains zero content policy. code.claude.com/docs/en/plugin-marketplaces (fetched 2026-08-24, ~100KB) is entirely mechanical. Grepping the full text for commercial, paid, pricing, monetize, advertise, promote, prohibit, must-not turns up no policy hits. Its only listing restrictions are anti-impersonation: a reserved-name list (
claude-plugins-official,anthropic-plugins,agent-skills,first-party-plugins,healthcareand others) plus a block on "names that impersonate official marketplaces, such asofficial-claude-pluginsoranthropic-plugins-v2," rechecked on every marketplace load. - The schema not only permits outbound commercial links, it anticipates entitlement data. Optional plugin fields include
homepage("Plugin homepage or documentation URL"),author(name required,emailandurloptional),license(SPDX),keywords, and - directly on point -metadata, an "object: Free-form object for your own fields, such as entitlement or catalog data. Claude Code doesn't read it." Anthropic's own field documentation names entitlement as an expected use of listing metadata. - The official directory README does not add a commercial rule. github.com/anthropics/claude-plugins-official states only that submission runs through a form at
clau.de/plugin-directory-submissionand that "External plugins must meet quality and security standards for approval." It does not enumerate those standards and says nothing about commercial content, paid products, promotion, or external paid links. - A separate and distinct constraint applies to inference, not to listings. Search results surfaced a Claude Code legal-and-compliance clause that customers "may not pay for, resell, or intermediate Claude usage on their end users' behalf," with each end user authenticating with their own API key or subscription credentials (code.claude.com/docs/en/legal-and-compliance). This is a search-snippet reading, not a direct fetch, so treat it as medium confidence. It bounds a different business model than MAC's.
Convergences and contradictions
- Convergence: policy text and observed practice both point away from a CTA prohibition, from opposite directions. The written rule bans ads, sponsorship, paid placement, and software that is primarily promotional. The live catalog is 255 entries deep in free connectors to paid commercial SaaS, and the listing schema ships first-class outbound-link fields plus an explicitly entitlement-shaped metadata slot. Nothing in either the text or the practice treats "free software that reaches a paid product" as a problem.
- Contradiction between the question's premise and the actual governance boundary. The question assumes a marketplace that reviews listings. For RDCO's
ray-plugins, none exists. The Software Directory Policy binds Anthropic's Directories; a self-hosted git marketplace added via/plugin marketplace addis governed by nothing but the reserved-name check and the user's own trust decision. So the honest answer splits: on RDCO's own surface the constraint is zero and so is the reach; the clause only becomes live the moment RDCO submits to the official or community directory, which is exactly what [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]] recommended for top-of-funnel. - Genuine ambiguity that no source resolves: "paid product placements." Read alongside "advertisements" and "sponsored content," the natural reading is placement paid for by a third party - sponsorship inventory - not "placement of a product that costs money." But the phrase is not defined, no interpretive guidance exists, and no enforcement precedent was found. The safer clause to plan against is the last one, "exists primarily as an advertising or promotional vehicle," which is a purpose test applied to the software as a whole.
Synthesis for RDCO
The direct answer, stated at the confidence the sources support: nothing in Anthropic's published policy prohibits a free skill from linking to the publisher's own paid off-platform product, and no source found imposes any listing constraint on commercial CTAs specifically. But that is not a permission, it is a silence plus one adjacent prohibition. The only clause that touches commerce is section 4.C, and it does not name links, CTAs, upsells, or pricing. Anyone claiming Anthropic "allows" or "forbids" the MAC CTA is reading a rule that is not written. What is written is a primary-purpose test, and MAC's exposure sits entirely inside it: a free /dq audit is fine as long as it is software that does a real job and happens to end with a next step; it becomes a policy problem the moment it is a thin wrapper whose actual function is to advertise a $350 product. That maps with uncomfortable precision onto the design constraint the parent brief already derived from Freemius on entirely commercial grounds - gate after value is realized, do not ship a trimmed demo that produces nothing worth acting on. The compliance argument and the conversion argument want the same artifact. That is a rare alignment and RDCO should treat it as the design brief rather than as two separate reviews.
The governance boundary, not the clause, is the decision-relevant finding. RDCO holds two publishing surfaces with opposite risk profiles. Publishing /dq to ray-plugins invokes no Anthropic listing review at all - the docs are purely mechanical, the only enforcement is anti-impersonation naming, and ray-plugins is already compliant on that axis. The cost is that the parent brief's entire strategic point was reach into the commons where buyers already are, and a self-hosted catalog delivers approximately none of it against an in-app Discover screen shipping 200+ plugins by default. Publishing to the community or official directory buys that reach and simultaneously imports 4.C plus an unpublished "quality and security standards" bar behind a submission form. This is the same trade [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]] identified for the Verified badge, and it should be decided once for both: RDCO either rides Anthropic's rails and builds to Anthropic's standards, or it keeps its own surface and accepts that the surface is not distribution.
Observed practice is the strongest evidence available, and it is genuinely strong, but it is not a precedent for MAC's exact shape. A Stripe or Linear connector is a free plugin whose entire function is to reach a paid product the user is already paying for. It is instrumentally tied to that product; it is not a customer-acquisition device for it. MAC's /dq audit is the other thing - a free artifact aimed at people who do not yet own the paid product, whose measured success is click-through. No listing in the surveyed 255 was identified as serving that function, so RDCO would not be violating an observed norm so much as testing an unobserved one. The practical read is that the risk is low and the failure mode is cheap: a rejected submission, not an account action, and the self-hosted fallback remains open either way.
What RDCO should not do is treat this brief as clearance. The Software Directory Policy was reached through a single targeted fetch that returned an extraction rather than the full text end to end, and the submission form's own criteria were never retrieved. Both gaps are closable in under an hour by a human reading two pages. The correct sequencing is: design /dq to stand alone as software with the CTA as a terminal next step rather than as its purpose; publish first to ray-plugins where no review applies and the instrumentation from the parent brief can start collecting the funnel data that does not exist anywhere in this category; and read the full policy plus the submission form before, not after, deciding to submit for directory reach.
Why this is in the vault
This closes open follow-up #2 of [[2026-08-18-free-skill-funnel-paid-conversion]] and removes the stated blocker on MAC's unshipped free /dq audit skill: the CTA is not prohibited by any published Anthropic text, so the go/no-go on shipping the lead magnet as an installable skill now turns on a design choice (does the audit stand alone as software) and a distribution choice (self-hosted ray-plugins with zero review versus directory submission with an unpublished bar), not on a legal unknown. It also supplies the missing commercial-content dimension to the ray-plugins submission decision left open in [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]].
Open follow-ups
- What does the full text of the Anthropic Software Directory Policy say outside section 4.C? This brief read a targeted extraction, not the document end to end, and a clause on data collection, telemetry, or user disclosure would directly constrain the parent brief's install-and-click-through instrumentation.
- What are the actual "quality and security standards" behind the
clau.de/plugin-directory-submissionform? Unretrieved here, and it is the real gate for directory reach plus the Verified badge. - Is there any enforcement precedent for 4.C - a plugin rejected or delisted for being primarily promotional? Without a single example, the primary-purpose test has no calibration and RDCO is guessing at where the line sits.
- Does the community directory (
claude-plugins-community, automated safety screening only) apply the Software Directory Policy's content clauses at all, or only the security screen? If content review is official-tier only, community listing is a materially cheaper reach option than this brief assumed. - Does the free-form
metadatafield's documented "entitlement or catalog data" use imply a coming Anthropic entitlement or billing layer, and would that change the calculus on shipping MAC as an off-platform purchase? [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]] flagged platform monetization as its one genuine watch item; this field is the first schema-level evidence for it. - Does the "may not pay for, resell, or intermediate Claude usage" clause constrain any MAC delivery shape RDCO might later want, such as a hosted or run-for-you audit? Read from a search snippet only, and it bounds business models adjacent to ones RDCO has discussed.
Related
- [[2026-08-18-free-skill-funnel-paid-conversion]]
- [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]]
- [[2026-07-09-anthropic-plugin-ecosystem-vs-rdco-brigade-plugins]]
- [[2026-06-10-claude-code-plugin-private-distribution]]
- [[2026-07-04-anthropic-max-plan-tos-productized-agentic-use]]
- [[2026-07-23-executable-agentic-info-product-pricing-scan]]
- [[2026-05-18-mac-matrix-downloadable-template-status]]
- [[2026-05-14-mac-pricing-intent]]
- [[2026-05-04-mac-product-shape-decisions]]
- [[2026-06-09-caf-restructure-proposal]]
Sources
- Vault: [[2026-08-18-free-skill-funnel-paid-conversion]] (
~/rdco-vault/06-reference/research/2026-08-18-free-skill-funnel-paid-conversion.md) - parent brief, source of the question,/dqinstrument recommendation - Vault: [[2026-07-21-anthropic-plugin-marketplace-brigade-strategy]] (
~/rdco-vault/06-reference/research/2026-07-21-anthropic-plugin-marketplace-brigade-strategy.md) - two-tier directory trust model, Verified badge certifies security not efficacy, ray-plugins submission decision left open - Vault: [[2026-07-09-anthropic-plugin-ecosystem-vs-rdco-brigade-plugins]] (
~/rdco-vault/08-tooling/2026-07-09-anthropic-plugin-ecosystem-vs-rdco-brigade-plugins.md) - 255-entry official-directory survey, vendor-shaped catalog, stripe/linear/github connectors - Vault: [[2026-06-10-claude-code-plugin-private-distribution]] (
~/rdco-vault/06-reference/research/2026-06-10-claude-code-plugin-private-distribution.md) - self-hosted and private marketplace.json distribution mechanics - Vault: [[2026-07-04-anthropic-max-plan-tos-productized-agentic-use]] (
~/rdco-vault/06-reference/research/2026-07-04-anthropic-max-plan-tos-productized-agentic-use.md) - adjacent ToS scan, does not cover listing policy - Vault: [[2026-07-23-executable-agentic-info-product-pricing-scan]] (
~/rdco-vault/06-reference/research/2026-07-23-executable-agentic-info-product-pricing-scan.md) - grandparent scan, free-tier-as-top-of-funnel framing - Local artifact:
~/Projects/ray-plugins/.claude-plugin/marketplace.json- inspected 2026-08-24; 12 plugin entries, owner Ray Data Co, no pricing or entitlement fields - Anthropic Software Directory Policy - PRIMARY. Fetched 2026-08-24, effective 2026-04-15. Scope clause and section 4.C advertising/promotion clause quoted verbatim. NOTE: fetch returned a targeted extraction, not the full document text - full read still outstanding
- Create and distribute a plugin marketplace - Claude Code docs - PRIMARY. Fetched 2026-08-24 (~100KB, grepped not read whole). Marketplace and plugin schemas, reserved-name list,
homepage/author.url/license/metadatafields. Zero commercial-content policy - anthropics/claude-plugins-official - PRIMARY. Fetched 2026-08-24. Submission via
clau.de/plugin-directory-submission; "External plugins must meet quality and security standards for approval"; silent on commercial content - Claude Code legal and compliance - NOT FETCHED. Reseller/intermediation clause read from search-result snippet only; medium confidence, flagged in-text
- Not retrieved:
clau.de/plugin-directory-submission(form, gated) - the actual directory acceptance criteria remain unread