skills.rest
fabricioctelles
fabricioctellesCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

auth-md

Generate and validate auth.md files and OAuth metadata for AI agent authentication.

47|4|Updated Feb 21, 2026
Search Tags:#oauth#agent authentication#token exchange#auth.md#id-jag#protected resource metadata#claim ceremony
One-click install
npx skills add https://github.com/fabricioctelles/skills --skill auth-md
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: auth-md
Source: https://github.com/fabricioctelles/skills/tree/main/skills/auth-md
Command: npx skills add https://github.com/fabricioctelles/skills --skill auth-md

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps developers make applications agent-ready by creating, validating, and explaining auth.md files and the associated OAuth discovery, registration, token exchange, and revocation flows.

Core Features & Use Cases

  • auth.md Generation: Produce protocol-compliant auth.md files, Protected Resource Metadata, and Authorization Server Metadata for supported registration flows.
  • Protocol Validation: Check document structure, JSON metadata, endpoint consistency, supported flows, error handling, placeholders, and optionally live endpoint availability.
  • Implementation Guidance: Explain ID-JAG verification, claim ceremonies, token exchange, user matching, rate limiting, replay protection, revocation, audit events, and security requirements.
  • Use Case: Use this Skill to audit an existing auth.md file, generate agent authentication documentation for an API, or design the backend endpoints required for identity assertion and browser-based claim registration.

Quick Start

Use the auth-md skill to generate a complete auth.md implementation guide and OAuth metadata for my application based on its existing authentication routes and supported scopes.

Frequently Asked Questions about auth-md

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I make my API ready for AI agent authentication?▼

To make an API ready for AI agent authentication, generate a protocol-compliant auth.md file alongside OAuth Protected Resource Metadata and Authorization Server Metadata to define discovery, registration, and token exchange endpoints.

What is an auth.md file and when do I need it for OAuth?▼

An auth.md file documents the OAuth discovery, registration, and revocation flows required for AI agent authentication, needed when exposing protected resources to autonomous agents using ID-JAG identity assertions.

How do I validate OAuth metadata and endpoint consistency for agent authentication?▼

Validate OAuth metadata and endpoint consistency by checking document structure, JSON metadata formats, supported flows, error handling, and placeholders against offline rules or live endpoint availability.

How do I implement a browser-based claim ceremony for AI agents?▼

Implement a browser-based claim ceremony by designing backend endpoints for ID-JAG identity assertion, user matching, replay protection, and revocation as defined in your auth.md implementation guide.

What security controls do I need for AI agent token exchange workflows?▼

Security controls for AI agent token exchange workflows require rate limiting guidance, replay protection, audit events, and revocation workflows to ensure protocol-compliant identity assertion and safe access.

Related Skills

Explore More Software Engineering Skills→
fabricioctellesfabricioctelles
47

agent-ready-auth-md

Implement Auth.md and OAuth discovery metadata for agent registration and authentication.

Community
Intermediate
RedHatProductSecurityRedHatProductSecurity
47

protected-resource-metadata

Implement or review OAuth 2.0 Protected Resource Metadata in MCP servers.

Official
Intermediate
joyz0joyz0

security-design

Implement device pairing, token authentication, access control, and audit logging for IoT gateways.

Community
Advanced
RedHatProductSecurityRedHatProductSecurity
47

discovery-mechanisms

Locate and validate OAuth 2.0 and OpenID Connect authorization servers via discovery protocols.

Official
Intermediate