Skip to content

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

agentic-auth

Generate auth.md files and implementation checklists for agent-ready applications.

Who it is for

agentic-auth is for builders creating apps, APIs, services, or SaaS products that may need to support AI agents acting on behalf of users.

It is part of grAIce Tech's work on agentic workflows, governed access, and practical AI systems.

Problem it solves

Most applications are designed to authenticate humans. AI agents increasingly need to discover supported auth flows, register with services, receive scoped credentials, and operate within defined permissions.

auth.md is an open protocol from WorkOS that standardizes how agents register with applications. This Claude skill helps new projects consider that requirement early instead of treating it as an afterthought.

Quickstart

cp -r agentic-auth ~/.claude/skills/

When you start building a new app, API, or service, the skill asks whether the project should support agentic authentication.

Example output

When enabled for a project, the skill can generate:

  • An auth.md file for the project root
  • Suggested scopes and credential type
  • Integration guidance for auth endpoints
  • Discovery document reminders
  • Security notes for tokens, OTPs, replay protection, rate limits, and secrets

The generated auth.md should be served from the production service root, for example:

https://example.com/auth.md

How it works

The skill:

  1. Asks whether the app should support agentic authentication.
  2. Gathers or infers project details such as service name, domain, description, scopes, flows, and credential type.
  3. Reads templates/auth.md.template.
  4. Generates an auth.md file for the project root.
  5. Provides a practical integration checklist.

Reference material lives in references/auth-md-spec.md. Evaluation cases live in evals/.

Status / roadmap

Status: usable Claude skill with template, protocol reference, and eval cases.

Planned cleanup:

  • Keep the generated checklist aligned with the WorkOS auth.md protocol.
  • Improve examples for simple apps, APIs, and SaaS products.
  • Add clearer guidance for projects that should not support agentic authentication yet.

References

Attribution

This skill was inspired by Michael Grinich's MCP Night keynote on auth.md. The auth.md protocol is an open standard created by WorkOS and published under the MIT license at github.com/workos/auth.md.

License

MIT. Built by Michelle M. Juhanson / grAIce Tech.

About

Generate auth.md specifications and security checklists for applications that support governed AI-agent access.

Topics

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors