pubnub-security

Secure PubNub apps with Access Manager, AES-256 encryption, and TLS validation.

6|Updated May 26, 2026
One-click install
npx skills add https://github.com/pubnub/skills --skill pubnub-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pubnub-security
Source: https://github.com/pubnub/skills/tree/main/pubnub-security
Command: npx skills add https://github.com/pubnub/skills --skill pubnub-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Secure PubNub real-time applications by centralizing access control, data protection, and secure transport.

Core Features & Use Cases

  • Access Manager (PAM) for fine-grained permissions and token issuance.
  • Message encryption with AES-256 and TLS enforcement for transport security.
  • End-to-end security best practices and threat mitigation across client/server boundaries.

Quick Start

Configure PAM on the server, issue tokens with grantToken and assign them to clients using setToken, enable AES-256 encryption with a cipherKey, and enforce TLS for all connections.

Frequently Asked Questions about pubnub-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement PubNub Access Manager for token-based authentication?

PubNub Access Manager (PAM) secures real-time applications through token-based authentication. You configure PAM on the server, issue tokens with grantToken, and assign them to clients using setToken to enforce fine-grained permissions.

When do I need AES-256 encryption and TLS for PubNub real-time messaging?

AES-256 encryption and TLS are needed to protect data confidentiality and secure transport for PubNub messaging. You enable encryption with a cipherKey for message payloads and enforce TLS 1.2+ for all client and server connections.

Does PubNub PAM support fine-grained permissions across web and mobile clients?

PubNub PAM supports fine-grained permissions across web, mobile, and server environments. Token issuance and client configuration apply universally, ensuring consistent access control and security best practices across all platform boundaries.

What's the best way to secure a PubNub application end-to-end?

The best way to secure a PubNub application end-to-end is to combine PAM token grants, AES-256 message encryption with a cipherKey, and strict TLS transport validation. This centralizes access control, data protection, and secure transport.

Why does my PubNub client fail to publish messages after enabling PAM?

PubNub client publish failures after enabling PAM typically occur when clients lack valid tokens with proper permissions. Ensure the server issues tokens via grantToken and clients correctly apply them using setToken before attempting operations.

Can I use a crypto module for PubNub message encryption on both server and client?

You can configure a crypto module for PubNub message encryption across server and client environments. Setup involves applying an AES-256 cipherKey to ensure payload confidentiality and adhering to security best practices for threat mitigation.