A safer access design for third-party apps.
Guides platform teams through designing third-party app authorization, including token policies, permissions, consent screens, and app verification.
When to use it
Use for issuer-side OAuth design involving third-party apps, tokens, scopes, consent, or PKCE, not for integrating with another provider or designing API keys.
Give it an authorization-design request and answer its batched questions about your platform; it returns a design covering protocol, permissions, consent, and verification.
No setup requirements listed.
This skill
the agent's persistent memory
Stores decisions in agent memory