weegloo-service-architecture

Selects Weegloo API, login, and role combinations for different service types.

1|2|Updated Feb 20, 2026
One-click install
npx skills add https://github.com/weeglooapi/weegloo-mcp-plugin --skill weegloo-service-architecture-weeglooapi
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: weegloo-service-architecture
Source: https://github.com/weeglooapi/weegloo-mcp-plugin/tree/main/plugins/weegloo/skills/weegloo-service-architecture
Command: npx skills add https://github.com/weeglooapi/weegloo-mcp-plugin --skill weegloo-service-architecture-weeglooapi

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Choosing the wrong API or identity model on Weegloo leads to over-privileged tokens, broken member permissions, and leaked data. This Skill maps your product's access model to the correct combination of CMA, CDA, ACMA, ACDA, Upload, ServiceLogin, and token types before you write any code. ## Core Features & Use Cases - Architecture Recipes: Five ready-made recipes covering fully public sites, public sites with admin editing, members-only read services, member read/write communities, and composite multi-tier products. - Identity Disambiguation: Clarifies the two separate identity systems (Weegloo User vs Service User) and which APIs each Bearer token can reach. - Anti-Pattern Detection: Lists forbidden patterns such as exposing Personal Access Tokens in browsers, binding Administrator roles to DeliveryAccessTokens, or routing member writes through CMA. - Use Case: You are building a members-only forum where users post and upload avatars. The Skill directs you to ServiceLogin for sign-up, ACMA with a createdBy :self default role for member writes, Upload plus ACMA Media create for avatars, and CDA with a least-privilege DeliveryAccessToken for any public content. ## Quick Start Ask the agent to plan the Weegloo architecture for your app, describing whether visitors are anonymous, members, or admins.

Frequently Asked Questions about weegloo-service-architecture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I choose between CDA and ACDA on Weegloo?

Use CDA with a DeliveryAccessToken for anonymous visitors reading published public content. Use ACDA with a ServiceLogin Bearer Token when signed-in members read content scoped to their own account or assignments.

What is the difference between a Weegloo User and a Service User?

A Weegloo User is a platform account that owns or is invited to a Space and calls CMA, Upload, and CDA. A Service User is an end-user of your product who signs up through ServiceLogin OAuth and can only reach ACMA and ACDA.

How do members upload media in a Weegloo app?

Members upload files through the Upload API using their ServiceLogin Bearer Token, then create the Media resource via ACMA with the same token. Never route member media through CMA, which is reserved for Weegloo Users.

Can I use a Personal Access Token in browser client code?

No. Personal Access Tokens are Weegloo User credentials intended for servers, CI, and scripts only. Browser admin UIs should use the console FE login popup flow, and public read-only clients should use a least-privilege DeliveryAccessToken.

How do I let moderators edit other members' posts?

Keep the default ServiceUserRole scoped with a createdBy :self filter so members only touch their own rows. Attach a broader role without that filter to individual moderators through ServiceUser.roleOverride.

When should an owner dashboard use CMA instead of ACDA?

Cross-member access such as an owner viewing all bookings requires Weegloo User login and CMA, built as an in-app admin UI. ACDA is per-member only, and exposing all member data through a public CDA token would leak it to any visitor.