What problem does it solve? Setting up a machine identity in Ramp involves choosing the right permissions, creating a role and agent in the dashboard, connecting credentials to a runtime, and verifying access safely. This Skill walks a Ramp admin through that entire process interactively, enforcing least-privilege access and read-only verification. ## Core Features & Use Cases - Scoped permission recipes: Recommends the narrowest set of role permissions for jobs like reporting, bill intake, bill approval, payment release, and expense cleanup. - Secure credential handling: Connects the agent via the Ramp CLI using an isolated XDG_CONFIG_HOME profile and a local helper script, so the Client secret is never pasted into chat. - Safe verification: Confirms the agent identity and role through the CLI, then runs one read-only check to prove the connection works without creating, approving, or paying anything. - Use Case: A finance admin needs a machine identity that approves assigned bills. The Skill prescribes the exact role checkboxes, guides dashboard agent creation, configures approval routing, connects the CLI, and verifies the agent can list bills awaiting approval. ## Quick Start Ask the assistant to set up a standalone Ramp agent for a specific job such as weekly finance reporting or bill approval.
