skills.rest
plosson
plossonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

agentio-key

Create, list, update, rotate, and revoke API keys for remote agent vault access.

2|Updated Jan 3, 2026
Search Tags:#access control#credentials#vault#api keys#ci cd#key rotation#agentio
One-click install
npx skills add https://github.com/plosson/agentio --skill agentio-key-plosson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agentio-key
Source: https://github.com/plosson/agentio/tree/main/claude/skills/agentio-key
Command: npx skills add https://github.com/plosson/agentio --skill agentio-key-plosson

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Remote agents need scoped credentials to read secrets from a central vault hub, but handing out full access tokens is risky and hard to manage. This Skill manages the lifecycle of API keys that control exactly which service profiles each agent can use. ## Core Features & Use Cases - Scoped Key Creation: Create keys limited to specific service/name profiles, read-only access, or profile-management rights. - Key Lifecycle Management: List, rename, rescope, rotate, and revoke keys, with tokens printed only once at creation. - Use Case: You run a CI agent that only needs to read Gmail and Google Drive credentials. Create a read-only key scoped to those two profiles, capture the token in a deploy script, and rotate or revoke it instantly if the pipeline is decommissioned. ## Quick Start Ask the agent to create a read-only agentio key named ci scoped to your gmail and gdrive profiles with your hub's public URL.

Frequently Asked Questions about agentio-key

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a scoped API key for a remote agent?▼

Run agentio key create with a name, the hub's public --url, and a --profiles list of comma-separated service/name pairs. The token is printed once at creation, so capture it immediately for your deploy script.

How to give an agent read-only access to vault credentials?▼

Pass the --read-only flag when creating the key, which forces read-only on every profile the key can see. You can also combine it with --all to allow every profile while keeping access read-only.

Can I rotate an agentio key without changing its scope?▼

Yes, agentio key rotate replaces the secret while keeping the key's existing scope, and the old token stops working at once. Provide --url to embed the hub's public base URL in the new token.

Does agentio key list show the secret tokens?▼

No, agentio key list never displays secrets. Tokens are only printed once when a key is created or rotated, so store them securely at that moment.

What happens when I revoke an agentio API key?▼

Revoking a key deletes it and its token stops working immediately. Any remote agent using that token loses access to the vault hub's profiles at once.

Related Skills

Explore More Software Engineering Skills→
combinate-mecombinate-me

combinate

Assemble cross-system client context from CRM, Drive, Calendar, Slack, Gmail, and Teamwork.

Official
Advanced
HugoAlmeidaMoreiraHugoAlmeidaMoreira

github-auth

Configure GitHub authentication via HTTPS PATs, SSH keys, or gh CLI.

Community
Intermediate
flavien-iaflavien-ia
34

_add-keyring

Configure an encrypted Bitwarden vault for global access keys and credentials.

Community
Advanced
VincentChong123VincentChong123

init-onecli

Migrate API credentials from .env files into the OneCLI Agent Vault.

Community
Advanced