diff --git a/src/langbot/pkg/api/http/controller/groups/system.py b/src/langbot/pkg/api/http/controller/groups/system.py
index 2c243ea36..97203e47b 100644
--- a/src/langbot/pkg/api/http/controller/groups/system.py
+++ b/src/langbot/pkg/api/http/controller/groups/system.py
@@ -29,6 +29,15 @@ SYSTEM_CAPABILITY_OPERATIONS = (
     'knowledge_base.get',
     'knowledge_base.file.store',
     'file.document.upload',
+    'plugin.install.github',
+    'plugin.install.marketplace',
+    'plugin.install.local',
+    'plugin.upgrade',
+    'plugin.get',
+    'skill.install.github',
+    'skill.install.upload',
+    'mcp_server.get',
+    'mcp_server.test',
 )
 
 
diff --git a/tests/integration/api/test_workspaces.py b/tests/integration/api/test_workspaces.py
index 656ae5941..e41c3322a 100644
--- a/tests/integration/api/test_workspaces.py
+++ b/tests/integration/api/test_workspaces.py
@@ -514,6 +514,15 @@ async def test_api_key_context_returns_bound_identity_without_workspace_permissi
             'knowledge_base.get',
             'knowledge_base.file.store',
             'file.document.upload',
+            'plugin.install.github',
+            'plugin.install.marketplace',
+            'plugin.install.local',
+            'plugin.upgrade',
+            'plugin.get',
+            'skill.install.github',
+            'skill.install.upload',
+            'mcp_server.get',
+            'mcp_server.test',
         ]
     )
     assert all(item == {'supported': True} for item in capabilities['operations'].values())