arcgis-authentication

Manage ArcGIS OAuth token lifecycle for Python scripts and Claude chats.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/franzenjb/claude-skills --skill arcgis-authentication
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: arcgis-authentication
Source: https://github.com/franzenjb/claude-skills/tree/main/arcgis-authentication
Command: npx skills add https://github.com/franzenjb/claude-skills --skill arcgis-authentication

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill standardizes secure ArcGIS Online/Enterprise authentication across Python scripts and Claude chat interactions, enabling safe access to org-private services without exposing credentials.

Core Features & Use Cases

  • OAuth-based access for ArcGIS REST services via 3-legged flows with out-of-band redirects.
  • Token lifecycle guidance including generation, exchange, refresh, and health verification.
  • Session-safe integration with CLI or notebooks using environment variables and best practices.
  • Use Case: A data analyst needs to run a script against a private ArcGIS FeatureServer without exposing user passwords.

Quick Start

Begin by choosing an ArcGIS application and initiating the 3-legged OAuth workflow to obtain a user token for private services.

Frequently Asked Questions about arcgis-authentication

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I authenticate Python scripts to access private ArcGIS REST services?

To authenticate Python scripts for private ArcGIS REST services, you can use 3-legged OAuth flows to obtain a user token, ensuring credentials are handled securely via environment variables without exposing user passwords.

What is the difference between 2-legged and 3-legged OAuth flows for ArcGIS Online?

ArcGIS OAuth 2-legged flows are used for application-level access without user context, while 3-legged flows require user interaction to obtain a user token for accessing org-private services through out-of-band redirects.

How do I refresh an expired ArcGIS OAuth token in a notebook session?

To refresh an expired ArcGIS OAuth token in a notebook session, follow the token lifecycle guidance to perform a token exchange and refresh, then run a health verification to ensure continued access to private services.

Can I manage ArcGIS Enterprise authentication without exposing my user password?

Yes, you can manage ArcGIS Enterprise authentication securely by using OAuth-based access and environment variables, which allows scripts to access private FeatureServers without ever exposing user passwords directly in the code.

What is the best way to verify ArcGIS token health before querying a FeatureServer?

The best way to verify ArcGIS token health before querying a FeatureServer is to use deterministic guidance for token health verification, ensuring the session is valid and the OAuth token is active before making REST requests.