Shipmoor separates identity, plan, capability access, and command allowances. A capability can exist for an account while still requiring a successful allowance check before execution.
Capability matrix
| Capability | Free access | Pro access | Free allowance |
|---|---|---|---|
scan | Unlimited | Unlimited | None |
claim_check | Metered | Unlimited | 5/month |
code_review | Metered | Unlimited | 5/month |
test_evidence | Metered | Unlimited | 5/month |
blast_radius | Metered | Unlimited | 5/month |
agent_harness | Unlimited | Unlimited | None |
agent_skills | Unlimited | Unlimited | None |
repair_guidance | Standalone disabled; Claim Check output may include it | Unlimited | None |
ide_extension_pro | Disabled | Unlimited | None |
advanced_verification_config | Disabled | Unlimited | None |
verification_history | Disabled; raw artifacts stay local | Unlimited | None |
Reading capability state
The v2 capability output preserves enabled for existing consumers and adds access, allowance, and allowance snapshots. enabled means the capability exists for the account. A metered Free command must still consume successfully.
{
"plan": "free",
"capabilities": {
"scan": { "enabled": true, "access": "unlimited" },
"claim_check": {
"enabled": true,
"access": "metered",
"allowance": "claim_check_invocations"
},
"agent_harness": { "enabled": true, "access": "unlimited" }
},
"allowances": {
"claim_check_invocations": {
"included": 5,
"remaining_snapshot": 3,
"renews_at": "2026-09-01T00:00:00Z"
}
}
}Snapshots are display-only. The usage service is authoritative for Free metered commands and atomically consumes one command-specific allowance before work begins.
Counting rules
- Each of the four command families has an independent counter of five.
- Counters renew together at 00:00 UTC on the first day of each calendar month.
- Unused invocations do not roll over.
- Rerunning a command consumes another invocation, even after a blocked, inconclusive, canceled, or failed result.
- User, Skill, Harness, and IDE invocations share the same command counters.
- Internal Review or Test Evidence composition beneath one admitted Claim Check does not consume another bucket.
- Help, parse failures, authentication failures, invalid configuration, and documented setup-only subcommands do not consume an allowance.
If the allowance service is unavailable, Free metered commands do not execute. Unlimited surfaces continue while their signed lease remains valid, including its grace period.