skills.rest
divinaarmuela
divinaarmuelaCOMMUNITY
Explore all skills by this author →
GitHub

wix-auth

Authenticate with Wix via OAuth device flow to obtain account and site access tokens.

Updated Apr 19, 2026
Search Tags:#authentication#api#oauth#token refresh#wix#access token#device flow
One-click install
npx skills add https://github.com/divinaarmuela/Content --skill wix-auth-divinaarmuela
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: wix-auth
Source: https://github.com/divinaarmuela/Content/tree/main/.claude/skills/wix-auth
Command: npx skills add https://github.com/divinaarmuela/Content --skill wix-auth-divinaarmuela

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? Calling Wix APIs requires a valid access token, and agents often have none or hold an expired one. This Skill walks through the Wix authentication flow so an agent can obtain, refresh, and manage tokens without manual credential handling. ## Core Features & Use Cases - Device Flow Login: Implements the OAuth 2.0 Device Authorization Grant (RFC 8628) so a user authorizes in a browser while the agent polls for tokens, with no client secret required. - Token Lifecycle Management: Detects expired account tokens, refreshes them silently, and re-runs the device flow when a session is revoked. - Site Token Derivation: Derives short-lived site tokens from the account refresh token and a siteId for site-scoped APIs like contacts, products, and bookings. - Use Case: An agent needs to list a user's Wix sites and then query contacts on one of them. It runs the device flow to get an account token, queries the site list, then derives a site token to call the contacts API. ## Quick Start Authenticate me with Wix using the device flow so I can get an access token for calling Wix APIs.

Frequently Asked Questions about wix-auth

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I get a Wix access token without a client secret?▼

Use the OAuth 2.0 Device Authorization Grant (RFC 8628). Request a device code from the Wix OAuth endpoint, show the user the verification URL and code, then poll the token endpoint every 3 seconds until the user approves in their browser.

How do I call Wix site-level APIs like contacts or bookings?▼

Site-level APIs require a site token, not an account token. Derive one by posting to the token endpoint with grantType refresh_token, your account refreshToken, and the target siteId. The site token expires in about 15 minutes, so re-derive it on each use.

Why does my Wix API call return a 403 error?▼

A 403 on site-level endpoints means you are using an account token where a site token is required. Derive a site token from your refresh token and the siteId, then retry the request with that token in the Authorization header.

How do I refresh an expired Wix access token?▼

Post to the token endpoint with grantType refresh_token and your stored refreshToken to get a new access token silently. If the refresh returns a 400 invalid_grant error, the session was revoked and you must run the device flow again.

How long do Wix access tokens last?▼

Account tokens expire in about 4 hours, while derived site tokens expire in about 15 minutes. Check validity with a 10-minute buffer before calls, and re-derive site tokens on each use rather than caching them.

Related Skills

Explore More Software Engineering Skills→
itayheritayher
15

site-management

Discover and switch Wix sites using a single access token.

Community
Intermediate
Yuli1003Yuli1003

wix-manage

Automate Wix site management and configuration via REST API.

Community
Advanced
PatrityPatrity

secret

Manage encrypted secrets in Cognova's vault via CLI commands.

Community
Intermediate
seanchiuaiseanchiuai
14

auth

Authenticate users across web, native, and API clients with PKCE and Supabase.

Community
Advanced