endor-auth-setup

Verify Endor Labs credentials and refresh SSO tokens into a dotenv file.

4|Updated Oct 18, 2025
One-click install
npx skills add https://github.com/endorlabs/endorlabs-sdk --skill endor-auth-setup
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: endor-auth-setup
Source: https://github.com/endorlabs/endorlabs-sdk/tree/main/agent-knowledge/skills/endor-auth-setup
Command: npx skills add https://github.com/endorlabs/endorlabs-sdk --skill endor-auth-setup

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill removes the friction of figuring out whether Endor Labs credentials are present, valid, and usable before you start API or workflow tasks. It helps you avoid avoidable auth failures by checking environment variables, probing endorctl, and confirming access with a whoami call.

Core Features & Use Cases

  • Credential Discovery: Scans the environment for supported Endor Labs auth variables and detects conflicting auth modes.
  • Access Verification: Validates credentials by checking endorctl configuration and running a Client whoami request.
  • Token Refresh: Performs an interactive browser-based SSO refresh and writes a fresh token to a dotenv file.
  • Use Case: A platform engineer can run this Skill at the start of a tenant session to confirm access before launching SDK workflows, automation jobs, or MCP-based tasks.

Quick Start

Ask the assistant to check your Endor Labs authentication status for the target tenant and refresh your local token if needed.

Frequently Asked Questions about endor-auth-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I verify Endor Labs credentials before starting an API workflow?

You can verify Endor Labs credentials by scanning environment variables for auth configurations, probing endorctl, and running a whoami request to confirm access for your target tenant.

What is the best way to refresh an expired Endor Labs token?

The best way to refresh an expired Endor Labs token is through an interactive browser-based SSO flow, which generates a fresh token that is then written directly to a dotenv file for immediate use.

Does endorctl support browser-based SSO for tenant selection and access?

Yes, endorctl supports browser-based SSO to handle tenant selection and token renewal, allowing you to validate access and write renewed credentials into your local environment.

Why does my SDK session fail with an authentication error when using Endor Labs?

Authentication errors often occur due to missing environment variables or conflicting auth modes. Running an environment scan and a whoami validation detects these conflicts before your workflow begins.

Can I use this to check authentication readiness for MCP-based agent bootstrap flows?

Yes, this checks authentication readiness for MCP-based agent bootstrap flows by probing endorctl configurations and validating credentials to ensure your agent tasks run without avoidable auth failures.

Do I need endorctl installed to validate my Endor Labs access?

Yes, endorctl is required to probe local configurations and run the whoami request needed to validate your Endor Labs access before launching SDK workflows or automation jobs.