skills.rest
yuezhen-huang
yuezhen-huangCOMMUNITY
Explore all skills by this author →
GitHub

neptune-acl

Query Neptune service authentication status and ACL authorization rules between PSM services.

Updated Apr 30, 2026
Search Tags:#authorization#microservices#access control#acl#neptune#psm#service authentication
One-click install
npx skills add https://github.com/yuezhen-huang/my-bytedance-skillhub --skill neptune-acl-yuezhen-huang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: neptune-acl
Source: https://github.com/yuezhen-huang/my-bytedance-skillhub/tree/main/neptune-acl
Command: npx skills add https://github.com/yuezhen-huang/my-bytedance-skillhub --skill neptune-acl-yuezhen-huang

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? When debugging service-to-service call failures or auditing microservice security posture, engineers need to know whether a callee service has authentication (Authen) enabled, whether strict authorization (ACL) is turned on, and whether a specific caller PSM is authorized to access it. This Skill queries the Neptune platform's service governance rules directly, replacing manual console lookups. ## Core Features & Use Cases - Authentication Status Check: Verify whether service authentication (Authen) is enabled for a callee PSM via the check_authen action. - Strict Authorization Check: Determine whether a callee has globally enabled strict ACL authorization via check_acl_enabled. - Caller Authorization Verification: Check whether a specific caller PSM is authorized to access a callee via check_acl_authorized, with cluster and method wildcard support. - Use Case: A caller service receives access-denied errors when invoking tiktok.my_service. Run check_acl_authorized with the caller and callee PSMs in the correct VRegion to confirm whether the caller is ALLOWED or DENIED, then request an ACL rule change if needed. ## Quick Start Ask the AI to check whether the caller PSM 'tiktok.caller_service' is authorized to access the callee 'tiktok.my_service' in the US region using Neptune ACL.

Frequently Asked Questions about neptune-acl

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check if a service has authentication enabled in Neptune?▼

Run the check_authen action with the callee PSM and its VRegion. The response returns authen_enabled and a status field indicating whether service authentication is on for that callee.

How to verify if one microservice is authorized to call another?▼

Use the check_acl_authorized action with both caller and callee PSMs. The result shows authorized as true or false with an ALLOWED or DENIED status, and caller_cluster supports the '*' wildcard.

What is the difference between check_acl_enabled and check_acl_authorized?▼

check_acl_enabled checks whether the callee globally enforces strict authorization, with caller fixed to any. check_acl_authorized checks whether one specific caller PSM is permitted to access the callee under those rules.

Why does the Neptune ACL query return StatusCode=-1?▼

StatusCode=-1 means no matching rule was found. Verify that the service PSM name is correct and that the VRegion matches the region where the service is actually deployed, since rules are stored per VRegion.

Does the ACL query support method-level wildcards?▼

Yes. The method parameter defaults to '*' which matches all methods, and you can also specify a concrete method name such as GetUser to check rules scoped to a single method.

Related Skills

Explore More Software Engineering Skills→
tsuga-devtsuga-dev
2

tsuga-debug-missing-trace-propagation

Diagnose missing trace propagation across HTTP, gRPC, and async messaging.

Official
Intermediate
nexuslabs-ainexuslabs-ai
1

pr-review-follow-up

Re-reviews pull requests to verify prior feedback was addressed and detect new issues.

Official
Intermediate
Hack23Hack23
9

api-integration

Design API clients for REST and GraphQL with retries, rate limiting, and authentication.

Official
Advanced
semicolon-devteamsemicolon-devteam

supabase-fallback

Query Supabase tables via PostgREST when the Spring Boot backend is offline.

Official
Advanced