Tags

Best Authentication Skills for AI Agents

166 Authentication skills for AI coding assistants — ranked by popularity.

Securing applications requires precise implementation of identity protocols and access controls. This collection provides curated skill files for Claude Code, Codex, and Cursor, specifically focused on authentication and identity management. Whether you are setting up Supabase Auth with Next.js, integrating Better Auth, or deploying enterprise-grade identity orchestration via Auth0, these files give your AI agent the context needed to execute tasks accurately. You will find specialized skills ranging from developer-focused integrations for frameworks like Next.js and Supabase to high-level security architecture tools for ISO 27001 compliance. These skills act as a configuration layer, allowing your coding assistant to understand specific CLI commands, best practices, and security frameworks without hallucinating implementation details. If your project involves authentication, these tools help ensure your agent follows established patterns for sessions, token management, and identity storage, directly impacting the security posture of your codebase.

Top Authentication skills

supabase-developer

daffy0208

Build full-stack applications with Supabase (PostgreSQL, Auth, Storage, Real-time, Edge Functions). Use when implementing authentication, database design with RLS, file storage, real-time features, or serverless functions.

95185

supabase-mcp-integration

manutej

Comprehensive Supabase integration covering authentication, database operations, realtime subscriptions, storage, and MCP server patterns for building production-ready backends with PostgreSQL, Auth, and real-time capabilities

13124

1password

openclaw

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

2799

security-compliance

davila7

Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout the SDLC.

1981

information-security-manager-iso27001

davila7

Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities.

1169

better-auth-best-practices

novuhq

Skill for integrating Better Auth - the comprehensive TypeScript authentication framework.

1854

nextjs-supabase-auth

davila7

Expert integration of Supabase Auth with Next.js App Router Use when: supabase auth next, authentication next.js, login supabase, auth middleware, protected route.

1259

cursor-sso-integration

jeremylongshore

Configure SSO and enterprise authentication in Cursor. Triggers on "cursor sso", "cursor saml", "cursor oauth", "enterprise cursor auth", "cursor okta". Use when working with cursor sso integration functionality. Trigger with phrases like "cursor sso integration", "cursor integration", "cursor".

433

springboot-security

affaan-m

Spring Security best practices for authn/authz, validation, CSRF, secrets, headers, rate limiting, and dependency security in Java Spring Boot services.

529

better-auth

mrgoonie

Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, session management, role-based access control (RBAC), rate limiting, and database adapters. Use when adding authentication to applications, implementing OAuth flows, setting up 2FA/MFA, managing user sessions, configuring authorization rules, or building secure authentication systems for web applications.

527

auth-patterns

davepoon

This skill should be used when the user asks about "authentication in Next.js", "NextAuth", "Auth.js", "middleware auth", "protected routes", "session management", "JWT", "login flow", or needs guidance on implementing authentication and authorization in Next.js applications.

720

django-security

affaan-m

Django security best practices, authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure deployment configurations.

522

twilio-communications

davila7

Build communication features with Twilio: SMS messaging, voice calls, WhatsApp Business API, and user verification (2FA). Covers the full spectrum from simple notifications to complex IVR systems and multi-channel authentication. Critical focus on compliance, rate limits, and error handling. Use when: twilio, send SMS, text message, voice call, phone verification.

324

agent-authentication

ruvnet

Agent skill for authentication - invoke with $agent-authentication

317

epic-permissions

epicweb-dev

Guide on RBAC system and permissions for Epic Stack

317

netalertx-authentication-tokens

netalertx

Manage and troubleshoot API tokens and authentication-related secrets. Use this when you need to find, rotate, verify, or debug authentication issues (401/403) in NetAlertX.

69

lindy-install-auth

jeremylongshore

Install and configure Lindy AI SDK/CLI authentication. Use when setting up a new Lindy integration, configuring API keys, or initializing Lindy in your project. Trigger with phrases like "install lindy", "setup lindy", "lindy auth", "configure lindy API key".

410

clerk-incident-runbook

jeremylongshore

Incident response procedures for Clerk authentication issues. Use when handling auth outages, security incidents, or production authentication problems. Trigger with phrases like "clerk incident", "clerk outage", "clerk down", "auth not working", "clerk emergency".

110

windsurf-enterprise-sso

jeremylongshore

Configure enterprise SSO integration for Windsurf. Activate when users mention "sso configuration", "single sign-on", "enterprise authentication", "saml setup", or "identity provider". Handles enterprise identity integration. Use when working with windsurf enterprise sso functionality. Trigger with phrases like "windsurf enterprise sso", "windsurf sso", "windsurf".

18

auth-http-api-cloudbase

TencentCloudBase

Use when you need to implement CloudBase Auth v2 over raw HTTP endpoints (login/signup, tokens, user operations) from backends or scripts that are not using the Web or Node SDKs.

17

auth-tool-cloudbase

TencentCloudBase

Use CloudBase Auth tool to configure and manage authentication providers for web applications - enable/disable login methods (SMS, Email, WeChat Open Platform, Google, Anonymous, Username/password, OAuth, SAML, CAS, Dingding, etc.) and configure provider settings via MCP tools `callCloudApi`.

17

cloudbase-guidelines

TencentCloudBase

Essential CloudBase (TCB, Tencent CloudBase, 云开发, 微信云开发) development guidelines. MUST read when working with CloudBase projects, developing web apps, mini programs, or backend services using CloudBase platform.

17

auth-token-manager

mikopbx

Получение валидных JWT Bearer токенов для аутентификации MikoPBX REST API v3. Использовать когда нужно тестировать API эндпоинты, отлаживать проблемы аутентификации или при возникновении ошибок 401 Unauthorized. Автоматически обрабатывает вход с username/password и возвращает готовый к использованию access token.

15

auth-web-cloudbase

TencentCloudBase

CloudBase Web Authentication Quick Guide - Provides concise and practical Web frontend authentication solutions with multiple login methods and complete user management.

15

How to choose a Authentication skill

Evaluate these skills based on your project stack and compliance needs. If you are building a full-stack application, look for specialized skills like nextjs-supabase-auth or better-auth-best-practices. For enterprise infrastructure or regulated environments, prioritize the information-security-manager or security-compliance skills. Always check the specific tool mentioned in the skill—such as the 1Password CLI or Auth0 orchestration—to ensure it aligns with your existing identity provider. Choose the skill that matches the specific framework or compliance standard your project requires to avoid mismatched configuration patterns.

More Authentication skills

auth-wechat-miniprogram
TencentCloudBase · 1 installs
clay-install-auth
jeremylongshore · 0 installs
customerio-security-basics
jeremylongshore · 1 installs
iam
itsmostafa · 1 installs
clerk-common-errors
jeremylongshore · 1 installs
clerk-enterprise-rbac
jeremylongshore · 1 installs
clerk-performance-tuning
jeremylongshore · 1 installs
cloudbase-auth
TencentCloudBase · 1 installs
evernote-install-auth
jeremylongshore · 1 installs
firebase-vertex-ai
jeremylongshore · 1 installs
supabase
alinaqi · 1 installs
windsurf-enterprise-rbac
jeremylongshore · 1 installs
azure-identity-dotnet
microsoft · 1 installs
clerk-sdk-patterns
jeremylongshore · 2 installs
clerk-security-basics
jeremylongshore · 1 installs
epic-auth
epicweb-dev · 1 installs
linear-security-basics
jeremylongshore · 1 installs
middleware-protection
dadbodgeoff · 1 installs
mistral-install-auth
jeremylongshore · 1 installs
utility-components
TencentBlueKing · 1 installs
apollo-install-auth
jeremylongshore · 1 installs
auth-implementation-patterns
sickn33 · 1 installs
auth-nodejs-cloudbase
TencentCloudBase · 0 installs
azure-security-keyvault-keys-dotnet
microsoft · 1 installs
clerk-auth
davila7 · 2 installs
clerk-install-auth
jeremylongshore · 1 installs
cognito
itsmostafa · 0 installs
cursor-api-key-management
jeremylongshore · 1 installs
customerio-install-auth
jeremylongshore · 0 installs
flowglad-feature-gating
flowglad · 1 installs
gamma-enterprise-rbac
jeremylongshore · 1 installs
ideogram-install-auth
jeremylongshore · 1 installs
instantly-install-auth
jeremylongshore · 1 installs
jwt-auth
dadbodgeoff · 1 installs
maintainx-common-errors
jeremylongshore · 1 installs
openrouter-install-auth
jeremylongshore · 0 installs
performing-security-code-review
jeremylongshore · 1 installs
auth-module-architecture
TencentBlueKing · 1 installs
clerk-core-workflow-a
jeremylongshore · 1 installs
clerk-hello-world
jeremylongshore · 1 installs
clerk-multi-env-setup
jeremylongshore · 1 installs
clerk-observability
jeremylongshore · 1 installs
clerk-reference-architecture
jeremylongshore · 1 installs
clerk-upgrade-migration
jeremylongshore · 1 installs
cloudbase-platform
TencentCloudBase · 1 installs
documenso-install-auth
jeremylongshore · 1 installs
granola-enterprise-rbac
jeremylongshore · 1 installs
maintainx-enterprise-rbac
jeremylongshore · 1 installs
maintainx-security-basics
jeremylongshore · 1 installs
nuxt-better-auth
onmax · 1 installs
oauth-social-login
dadbodgeoff · 1 installs
spring-boot-security
HoangNguyen0403 · 1 installs
agent-agentic-payments
ruvnet · 1 installs
azure-identity-py
microsoft · 1 installs
building-api-authentication
jeremylongshore · 1 installs
clerk-cost-tuning
jeremylongshore · 1 installs
clerk-data-handling
jeremylongshore · 0 installs
clerk-debug-bundle
jeremylongshore · 1 installs
clerk-deploy-integration
jeremylongshore · 1 installs
clerk-local-dev-loop
jeremylongshore · 1 installs
clerk-prod-checklist
jeremylongshore · 1 installs
deepgram-enterprise-rbac
jeremylongshore · 0 installs
deepgram-install-auth
jeremylongshore · 1 installs
evernote-security-basics
jeremylongshore · 0 installs
firecrawl-security-basics
jeremylongshore · 1 installs
fireflies-install-auth
jeremylongshore · 0 installs
instantly-enterprise-rbac
jeremylongshore · 1 installs
klingai-install-auth
jeremylongshore · 1 installs
linear-enterprise-rbac
jeremylongshore · 1 installs
linear-install-auth
jeremylongshore · 1 installs
lokalise-install-auth
jeremylongshore · 1 installs
mistral-security-basics
jeremylongshore · 1 installs
openevidence-enterprise-rbac
jeremylongshore · 1 installs
perplexity-install-auth
jeremylongshore · 1 installs
posthog-install-auth
jeremylongshore · 1 installs
replit-security-basics
jeremylongshore · 1 installs
supabase-enterprise-rbac
jeremylongshore · 1 installs
tier-entitlements
dadbodgeoff · 1 installs
validating-authentication-implementations
jeremylongshore · 0 installs
vastai-install-auth
jeremylongshore · 0 installs
vercel-enterprise-rbac
jeremylongshore · 0 installs
vercel-security-basics
jeremylongshore · 0 installs
windsurf-install-auth
jeremylongshore · 0 installs
azure-identity-java
microsoft · 0 installs
clerk-ci-integration
jeremylongshore · 0 installs
convex-security-check
waynesutton · 0 installs
gamma-install-auth
jeremylongshore · 0 installs
maintainx-install-auth
jeremylongshore · 0 installs
openevidence-security-basics
jeremylongshore · 0 installs
replit-install-auth
jeremylongshore · 0 installs
supabase-auth-storage-realtime-core
jeremylongshore · 0 installs
sts
ArtisanCloud · 0 installs
security-hardening
boctulus · 0 installs
aws-iam
mashharuki · 0 installs
fortify-development
gdarko · 0 installs
mfa-on-mobile
almasumdev · 0 installs

+46 more — browse all skills.

Frequently asked

Should I use multiple authentication skills at once?
You can, but it is better to stack them based on layers. Use one framework-specific skill, like nextjs-supabase-auth, to handle the primary identity logic, and add a specialized security skill, such as security-compliance, for secondary audit requirements. Ensure the instructions in each SKILL.md file do not conflict on how they handle session tokens or database access permissions.
Do these skills handle actual security audits for me?
No. Skills like information-security-manager-iso27001 provide your AI agent with the context needed to suggest architecture that adheres to ISO standards, but they do not replace a human security audit. They assist by prompting the AI to follow approved patterns for implementation, helping you prepare for actual external assessments by maintaining consistent documentation and secure coding practices throughout development.

Browse other tags

Search skills

Search the agent skills registry