Draft, validate, and apply Descope FGA schemas using the ReBAC/ABAC DSL.
npx skills add https://github.com/descope/skills --skill descope-fga-schema
Please help me install this Agent Skill. Skill: descope-fga-schema Source: https://github.com/descope/skills/tree/main/skills/descope-fga-schema Command: npx skills add https://github.com/descope/skills --skill descope-fga-schema
Author, edit, or apply a Descope FGA schema using the ReBAC/ABAC DSL. Use this skill whenever the user asks to create a new FGA schema, modify an existing one, add types/relations/permissions/conditions, review an authorization model, or apply schema changes to a Descope project. Trigger even if the user says things like set up authorization, define roles and permissions, add team-based access, make this endpoint check FGA, or update my authz model — these almost always mean an FGA schema change.
Draft and validate an FGA schema, review potential data deletes, then confirm to apply.
High-intent search queries and answers about installing and using this skill.
You create an FGA authorization model by drafting a schema with the ReBAC/ABAC DSL, defining types, relations, permissions, and conditions to structure your access control rules safely.
The safe workflow uses DryRunSchema and GetFGASchema validation checks before applying changes, letting you review potential data deletes and confirm updates to prevent irreversible errors.
Yes, you can modify existing FGA schemas by adding or updating types, relations, permissions, and conditions, then validating the changes through the Descope MCP before applying them.
Yes, the FGA DSL supports ReBAC and ABAC models, allowing you to define relationship-based access and attribute-based conditions within your authorization schema.
Running a dry run validates schema changes and identifies potential data deletes before application, ensuring your authorization model updates are safe and prevent unintended data loss.
zmh13928433602-sysDefine and manage PostgreSQL schemas and migrations with Drizzle ORM in TypeScript.
hung-phanAnalyze and optimize authorization models for RBAC, ABAC, and ReBAC.
moonmingConfigure the Apache APISIX wolf-rbac plugin for consumer-level role-based access control.
Sir-chawakornDesign centralized authorization layers for RBAC, ABAC, and ReBAC models.
