OpenAPI to MCP Server
mcp-use/mcp-use
Turns an OpenAPI or Swagger spec into an MCP server with the mcp-use TypeScript SDK, mapping each operation to a tool, wiring auth, testing and deploying.
Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).
Install Arista Cvp
$ npx skills add automateyournetwork/netclaw --skill arista-cvp -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install automateyournetwork/netclaw arista-cvp --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .claude/skills && cp -r skills-src/workspace/skills/arista-cvp .claude/skills/arista-cvp && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "arista-cvp" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvp into .claude/skills/arista-cvp/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "arista-cvp", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvpType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add automateyournetwork/netclaw --skill arista-cvp -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install automateyournetwork/netclaw arista-cvp --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .agents/skills && cp -r skills-src/workspace/skills/arista-cvp .agents/skills/arista-cvp && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "arista-cvp" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvp into .agents/skills/arista-cvp/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "arista-cvp", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill arista-cvp -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install automateyournetwork/netclaw arista-cvp --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/workspace/skills/arista-cvp .cursor/skills/arista-cvp && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "arista-cvp" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvp into .cursor/skills/arista-cvp/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "arista-cvp", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/automateyournetwork/netclaw.git --path workspace/skills/arista-cvp--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add automateyournetwork/netclaw --skill arista-cvp -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install automateyournetwork/netclaw arista-cvp --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/workspace/skills/arista-cvp .gemini/skills/arista-cvp && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "arista-cvp" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvp into .gemini/skills/arista-cvp/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "arista-cvp", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install automateyournetwork/netclaw arista-cvpInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add automateyournetwork/netclaw --skill arista-cvp -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .github/skills && cp -r skills-src/workspace/skills/arista-cvp .github/skills/arista-cvp && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "arista-cvp" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvp into .github/skills/arista-cvp/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "arista-cvp", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add automateyournetwork/netclaw --skill arista-cvp -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install automateyournetwork/netclaw arista-cvp --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/automateyournetwork/netclaw.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/workspace/skills/arista-cvp .opencode/skills/arista-cvp && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "arista-cvp" agent skill from https://github.com/automateyournetwork/netclaw/tree/main/workspace/skills/arista-cvp into .opencode/skills/arista-cvp/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "arista-cvp", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
arista-cvp- GitHub stars
- 677
- Token cost
- ~2.2k tokens
- SKILL.md length
- 772 words
- Files
- 1
- Skills in repo
- 120
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).
- Works in 5 steps: Arista Device Discovery → Arista Event Monitoring → Arista Network Health Check → …
- Managing Arista devices
- SKILL.md covers MCP Server, Authentication, Environment Variables and Tools (4), plus 6 more sections
- Calls uv and git
What it does
Arista Cvp is an agent skill from automateyournetwork/netclaw. Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools). Use when managing Arista devices, checking CloudVision events, monitoring network connectivity probes, or tagging devices in CVP.
Its SKILL.md is about 2.2k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It sits in Backend & APIs, covering REST APIs. It works with Model Context Protocol. The repository describes itself as: An AI agent that claws through your network. The licence is Apache-2.0.
When your agent uses it
- Managing Arista devices
- Checking CloudVision events
- Monitoring network connectivity probes
- Tagging devices in CVP
Example prompts
- “/arista-cvp”
Workflow steps
5 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit f943637. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Shell commands in SKILL.md call:
uvgit
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
github.com
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Arista Cvp loads about 2.2k tokens when it runs. Until then it costs about 69 tokens; SKILL.md has 772 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check: notes
The automated check noted patterns worth knowing about, such as sudo or a known installer.
- NoteMentions a .env fileSKILL.md:32
4. Store the token in the `.env` file as `CVPTOKEN`
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from automateyournetwork/netclaw at commit f943637, republished under its Apache-2.0 licence (© automateyournetwork). 772 words, ~2,152 tokens.
Download SKILL.mdSave it as
.claude/skills/arista-cvp/SKILL.md (or your agent's skills folder).- name
- arista-cvp
- description
- Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools). Use when managing Arista devices, checking CloudVision events, monitoring network connectivity probes, or tagging devices in CVP.
- license
- Apache-2.0
- user-invocable
- true
Arista CloudVision Portal (CVP) Automation
MCP Server
| Field | Value |
|---|---|
| Repository | noredistribution/mcp-cvp-fun |
| Transport | stdio (FastMCP) |
| Python | 3.12+ |
| Protocol | HTTPS REST → CloudVision Resource API |
| Dependencies | fastmcp, httpx, python-dotenv |
| Install | git clone + uv run (dependencies resolved at runtime) |
| Entry Point | uv run --with fastmcp fastmcp run /path/to/mcp_server_rest.py |
| Status | Community demo — not officially supported by Arista |
Authentication
CloudVision uses service account tokens passed as HTTP cookies:
- Log in to CloudVision Portal
- Navigate to Settings → Service Accounts
- Create a service account and generate a token
- Store the token in the
.envfile asCVPTOKEN
The token is sent as an access_token cookie with every API request (not a Bearer header).
Environment Variables
| Variable | Required | Purpose |
|---|---|---|
CVP | Yes | CloudVision instance hostname (e.g., www.arista.io or cvp.example.com) |
CVPTOKEN | Yes | Service account token for API authentication |
Tools (4)
Device Inventory (1 tool)
| Tool | Parameters | Description |
|---|---|---|
get_inventory | — | Get inventory of all devices from CloudVision (hostname, model, serial, version, MAC, IP, streaming status) |
Event Monitoring (1 tool)
| Tool | Parameters | Description |
|---|---|---|
get_events | — | Get all events from CloudVision (alerts, warnings, informational events with severity, timestamps, device associations) |
Connectivity Monitoring (1 tool)
| Tool | Parameters | Description |
|---|---|---|
get_connectivity_monitor | — | Get Connectivity Monitor probe statistics (jitter, latency, packet loss, HTTP response time across all probes) |
Tag Management (1 tool)
| Tool | Parameters | Description |
|---|---|---|
create_tag | tag_name, tag_value | Create a device-level tag in CloudVision via workspace workflow (create workspace → create tag → build → submit) |
create_tag Workflow Detail
The create_tag tool follows CloudVision's workspace model — a 5-step process:
- Create Workspace — POST to
/api/resources/workspace/v1/WorkspaceConfigwith a UUID-based workspace - Create Tag — POST to
/api/resources/tag/v2/TagConfigwithELEMENT_TYPE_DEVICE, workspace ID, tag name/value - Build Workspace — POST with
REQUEST_START_BUILDto validate changes - Wait for Build — 10-second wait for build completion
- Submit Workspace — POST with
REQUEST_SUBMITto apply the tag
CloudVision Resource API Endpoints
| Method | Endpoint | Tool |
|---|---|---|
| GET | /api/resources/inventory/v1/Device/all | get_inventory |
| GET | /api/resources/event/v1/Event/all | get_events |
| GET | /api/resources/connectivitymonitor/v1/ProbeStats/all | get_connectivity_monitor |
| POST | /api/resources/workspace/v1/WorkspaceConfig | create_tag (workspace create/build/submit) |
| POST | /api/resources/tag/v2/TagConfig | create_tag (tag creation) |
Responses use newline-delimited JSON (NDJSON) format, consistent with CloudVision's streaming resource API.
Workflows
1. Arista Device Discovery
get_inventory → list all Arista devices (hostname, model, serial, version, MAC, IP)
→ Cross-reference with NetBox/Nautobot → flag discrepancies
→ GAIT2. Arista Event Monitoring
get_events → retrieve all CloudVision events
→ Filter by severity (critical, warning, info)
→ Correlate events with device inventory
→ Severity-sort findings → GAIT3. Arista Network Health Check
get_inventory → identify all managed devices
→ get_events → check for active alarms and warnings
→ get_connectivity_monitor → analyze jitter, latency, packet loss
→ Correlate connectivity issues with events → severity-sort → GAIT4. Arista Device Tagging
ServiceNow CR must be in Implement state
→ get_inventory → verify target devices exist
→ create_tag(tag_name, tag_value) → apply device-level tag via workspace workflow
→ get_inventory → verify tag applied
→ GAIT5. Arista Connectivity Baseline
get_connectivity_monitor → capture current probe statistics
→ Record jitter, latency, packet loss baselines per probe
→ Compare against thresholds → flag degradation
→ GAITIntegration with Other Skills
| Skill | Integration |
|---|---|
| pyats-network | CVP MCP for Arista fleet visibility, pyATS MCP for Cisco devices — unified multi-vendor monitoring |
| junos-network | CVP MCP for Arista, JunOS MCP for Juniper — multi-vendor device inventory and health |
| netbox-reconcile | Cross-reference CVP device inventory (model, serial, version) against NetBox source of truth |
| nautobot-sot | Same as NetBox — validate Arista device IPAM data in Nautobot |
| infrahub-sot | Cross-reference Infrahub node data with Arista device inventory from CVP |
| servicenow-change-workflow | Gate all create_tag operations behind ServiceNow Change Requests |
| gait-session-tracking | Every CVP inventory query, event pull, and tag creation logged in GAIT |
| te-network-monitoring | Correlate ThousandEyes path data with CVP connectivity monitor probes |
| nvd-cve | Scan EOS versions from get_inventory against NVD vulnerability database |
| markmap-viz | Generate topology mind maps from CVP device inventory data |
Show full SKILL.md (301 more words)Show less
CVP MCP vs pyATS MCP vs JunOS MCP
| Capability | CVP MCP | pyATS MCP | JunOS MCP |
|---|---|---|---|
| Vendor | Arista (via CVP) | Cisco (IOS-XE, NX-OS, IOS-XR) | Juniper |
| Protocol | HTTPS REST → CVP Resource API | SSH + Genie parsers | NETCONF → PyEZ |
| Device Inventory | get_inventory (fleet-wide) | pyats_learn("platform") per device | gather_device_facts per device |
| Event Monitoring | get_events (fleet-wide) | Per-device show commands | Per-device show commands |
| Connectivity Metrics | get_connectivity_monitor (probes) | Per-device show commands | Per-device show commands |
| Config Push | Via CVP Change Control (not in MCP) | pyats_configure_device | load_and_commit_config |
| Tag/Label Mgmt | create_tag (workspace workflow) | N/A | N/A |
| Batch Operations | All tools are fleet-wide by default | pyats_pcall (parallel pCall) | execute_junos_command_batch |
| MCP Tools | 4 | 8 | 10 |
Guardrails
- Always call
get_inventoryfirst — verify CloudVision is reachable and devices are streaming before deeper queries - Check events before changes — call
get_eventsto identify active issues before any tag operations - Gate tag creation — all
create_tagcalls must have a ServiceNow CR inImplementstate - Validate tag names — ensure tag names follow organizational naming conventions before creation
- Monitor connectivity baselines — use
get_connectivity_monitorto establish baselines before and after network changes - Cross-reference inventory — compare CVP device data with NetBox/Nautobot to detect SoT drift
- Record in GAIT — every inventory query, event pull, connectivity check, and tag creation must be logged
- Community project — this is an unofficial demo; evaluate security implications (TLS verification disabled in source) before production use
Failure Behavior
- If a tool call fails with an authentication or connection error, check that
CVP,CVPTOKENare set and valid before assuming a data or device problem. - On a tool error (timeout, unreachable host, malformed response), report the failure and its error message directly to the user rather than fabricating or guessing at results.
- Do not automatically retry a write/mutating operation after a failure — surface the error and get explicit confirmation before retrying, since a blind retry on a partially-applied change can leave state inconsistent.
© automateyournetwork, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
Just SKILL.md in workspace/skills/arista-cvp of automateyournetwork/netclaw.
Open the folder on GitHubat commit f943637
Compare with similar skills
Arista Cvp next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Arista Cvp this skillautomateyournetwork/netclaw | 677 | — | ~2.2k | Automated safety check: Notes | Apache-2.0 | |
| OpenAPI to MCP Servermcp-use/mcp-use | 11k | — | ~5.2k | Automated safety check: Pass | Apache-2.0 | |
| Legbaevilsocket/legba | 1.9k | — | ~2.2k | Automated safety check: Pass | Custom licence | |
| Databuddydatabuddy-analytics/Databuddy | 1.2k | — | ~2.1k | Automated safety check: Pass | AGPL-3.0 | |
| API Endpoint Contracttrycompai/comp | 2k | — | ~2.7k | Automated safety check: Pass | AGPL-3.0 | |
| Skyllassafelovic/skyll | 247 | — | ~928 | Automated safety check: Pass | Apache-2.0 |
Similar skills
Legba
evilsocket/legba
A skill your agent uses when the user wants to brute-force credentials, spray passwords, or enumerate services/subdomains against any network protocol (HTTP, SSH, FTP, SMB, RDP, databases, mail…
Databuddy
databuddy-analytics/Databuddy
Integrate Databuddy analytics using the SDK, REST API, or MCP.
API Endpoint Contract
trycompai/comp
The contract every new or modified API endpoint must follow so it is correct for the public OpenAPI spec, the MCP server (npm @trycompai/mcp-server), the ValidationPipe, and the docs.
Skyll
assafelovic/skyll
Search and retrieve agent skills at runtime. An agent skill from assafelovic/skyll.
Cloudflare Email Service
hodgef/apiker
Send and receive transactional emails with Cloudflare Email Service (Email Sending + Email Routing).
More from automateyournetwork/netclaw
All 120 skills in this repoEVE-NG Lab Topology Design
automateyournetwork/netclaw
Entry point for designing EVE-NG network labs: classifies the request, gathers missing requirements, proposes options and validates the resulting topology.
ACI Policy Change Deployment
automateyournetwork/netclaw
Deploys Cisco ACI policy changes only behind an approved ServiceNow Change Request, capturing pre and post-change fault baselines and rolling back automatically on a fault delta.
Cisco ACI Fabric Health Audit
automateyournetwork/netclaw
Runs a phased health audit of a Cisco ACI fabric through MCP tools: node status, links, tenant and policy review, faults and endpoint learning.
Anta Validation
automateyournetwork/netclaw
Validate Arista EOS network state against ANTA's pre-built 208-test catalogue, with structured pass/fail verdicts.
AWS Cloud Monitoring
automateyournetwork/netclaw
AWS CloudWatch monitoring — metrics, alarms, log queries, VPC flow log analysis, network performance.
Batfish Config Analysis
automateyournetwork/netclaw
Batfish network configuration analysis -- pre-deployment validation, reachability testing, ACL/firewall tracing, differential analysis, compliance checking.
Related
Works with
Categories
Questions about Arista Cvp
What does Arista Cvp do?
Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools). Arista Cvp is an agent skill from automateyournetwork/netclaw. Arista CloudVision Portal (CVP) automation via REST API — device inventory, events, connectivity monitoring, tag management (4 tools).
When should I use Arista Cvp?
Arista Cvp fits situations like: managing Arista devices; checking CloudVision events; monitoring network connectivity probes; tagging devices in CVP.
How do I install Arista Cvp in Claude Code?
Run `npx skills add automateyournetwork/netclaw --skill arista-cvp -a claude-code`. Or copy the skill folder (workspace/skills/arista-cvp in automateyournetwork/netclaw) into .claude/skills/arista-cvp in your project. Claude Code loads it when a task matches its description.
How do I install Arista Cvp in Codex?
Run `npx skills add automateyournetwork/netclaw --skill arista-cvp -a codex`. Or copy the skill folder (workspace/skills/arista-cvp in automateyournetwork/netclaw) into .agents/skills/arista-cvp in your project. Codex loads it when a task matches its description.
Can I use Arista Cvp in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add automateyournetwork/netclaw --skill arista-cvp -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/arista-cvp, .gemini/skills/arista-cvp, .github/skills/arista-cvp and .opencode/skills/arista-cvp in your project.
What does Arista Cvp need to run?
Going by SKILL.md and its folder, Arista Cvp needs the command-line tools its instructions call (uv and git).
Does Arista Cvp access the network?
SKILL.md names 1 domain. As links in the text: github.com. This is read from the text; nothing was executed.
Is Arista Cvp safe to install?
Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.
What licence does Arista Cvp use?
Arista Cvp is published under the Apache-2.0 licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Arista Cvp use?
About 2.2k tokens (SKILL.md is roughly 8.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
What are the alternatives to Arista Cvp?
Skills that share tags, products or a category with Arista Cvp: OpenAPI to MCP Server (mcp-use/mcp-use, 11k stars), Legba (evilsocket/legba, 1.9k stars), Databuddy (databuddy-analytics/Databuddy, 1.2k stars) and API Endpoint Contract (trycompai/comp, 2k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Arista Cvp?
automateyournetwork (a GitHub user) maintains it in automateyournetwork/netclaw, which has 677 GitHub stars. The repository holds 120 skills in this directory. The repository was last updated on October 11, 2026.
Source: automateyournetwork/netclaw on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.