A free part and a paid part
Publish a Skill with a free part that anyone who can see it may install, and a paid part. The public listing shows only the free files. The names, hashes, and contents of paid files are never listed.
FRELY SKILLS
A paid Skill is more than a text file. Frely treats it that way.
A plain-text paid Skill puts everything you wrote on the buyer’s disk the moment they pay. Frely splits a Skill into a free part and a paid part, keeps the paid part behind a pass, and can run it on Frely so it never reaches anyone’s device.
What a Frely Skill adds
- Paid part behind a passNot listed, not sent
- Run in a sandboxOptional, never downloaded
- Scanned before useBadge from Frely
- Subscription, time pass or buy-outOr free or per call
- Sales settle in FrelyOne account
01 / FOR CREATORS
Keep the part people pay for.
You decide what is free to try and what sits behind a pass, and how long a pass lasts.
Run the paid part on Frely
Publish the paid part as a container version. It is a complete Skill that runs in a Frely sandbox and is never sent to a device. People call it through FrelyMCP and get the result.
Price it your way
Offer a Skill for free, per call, for 3 days, for 1 month, as a monthly subscription, or as a buy-out. A buy-out keeps the version bought; a subscription brings every update while it runs. A pass that ends stops working; buying again extends it.
Scripts are encrypted
If your Skill has scripts, Frely encrypts them. Only a device with a pass can unlock them, for a limited time, and a pass that ends or is revoked stops unlocking. Text and resources stay readable so buyers can see what they are getting.
Update and withdraw
Each update is a new version, and people who use the Skill get the new one. Unpublish a Skill and it can no longer be installed.
02 / FOR PEOPLE WHO USE SKILLS
Know what you install, and where it runs.
A paid Skill still runs next to your files, so Frely gives you ways to check it before it does.
A scan you can see
Frely can scan a Skill before you use it and show the result. A version that passes is marked, and the Frely CLI skips the extra review. A changed version needs a new scan.
Unscanned means reviewed first
For a Skill without a passing scan, the Frely CLI adds a guard Skill that asks your AI to review the files before first use.
Container versions stay off your machine
When the paid part is a container version, it runs in a Frely sandbox, not on your computer. Only the result comes back.
Encrypted scripts run in a sandbox
The Frely CLI runs an encrypted script in its sandbox. It cannot read your Frely credentials, can write only to your workspace and temp folders, and anything more needs your approval first. It never runs without the sandbox.
How the sandbox protects your dataYour approval for device access
When your AI uses your computer through FrelyMCP, commands run in a sandbox that blocks credential folders such as ~/.ssh. Anything beyond that needs your approval first.
How the sandbox protects your data03 / HOW IT WORKS
Publish, price, sell. All inside Frely.
- 01
Publish
Upload the free part and the paid part, or a container version, from your Creator workspace or through the Cloud MCP.
- 02
Set a price
Choose free, per call, a time pass, a monthly subscription or a buy-out, and who can see the Skill.
- 03
People get a pass
Someone buys access with Frely Credit and installs or runs the paid part. Access ends when the pass or subscription does; a buy-out keeps the version bought.
- 04
Sales settle
Sales are recorded in Frely and held for a period, so a refund or dispute can still be reversed. Then they are added to your Credit. On a commercial plan you can apply to cash them out.
04 / COMPARE
Frely Skill and a plain-text paid Skill.
What changes when a paid Skill is more than a file you hand over.
| Frely Skill | Plain-text paid Skill | |
|---|---|---|
| What the buyer receives | Free part as files. Paid part only with a pass, or never, for a container version | The full text of the Skill, as files |
| Can the paid part stay off the buyer’s device | Yes, with a container version | No |
| Scripts on the buyer’s disk | Encrypted; unlocked by a device with a pass, for a limited time | Readable files |
| Access can end | Passes expire or run out of calls, and unpublishing stops installs | Usually not; the files stay once copied |
| Check before use | Scan result shown; unscanned Skills are reviewed first | The buyer reads it themselves |
| Where it runs | Your computer, or a Frely sandbox for a container version | Your computer |
| Payment and settlement | In Frely: passes, a hold period, then Credit or a cash payout on commercial plans | Depends on the seller or platform |
The plain-text column describes common practice for Skills sold as readable files, not a specific product.
05 / GOOD TO KNOW
What this does not promise.
No system can guarantee absolute security. Here is where the limits are.
Downloaded files are visible
Text and resources, free and paid, are installed on the buyer’s device. The person who has them can read them. Encrypted scripts add a barrier, but someone determined can still get around it, so treat anything you ship as potentially copyable. Use a container version to keep paid content off devices.
Results can reveal the Skill
A container version never sends its files, and Frely checks run output for large overlaps with them. The results people receive can still show parts of what the Skill does.
A scan is a check, not a guarantee
A passing scan lowers risk. It does not prove that a Skill is harmless, so review what you install.
START
Ready to sell a Skill? Publish it on Frely.
Publishing limits depend on your plan. The pricing page lists every plan.
Publish a Skill