{"query":"OAuth","count":18,"timings_ms":{"embed":179,"vector":125,"total":304},"embed_cached":true,"results":[{"slug":"claude-dev-suite/oauth2","score":0.4757,"name":"oauth2","category":"AI & Automation","quality_tier":"solid","quality_score":85,"repo_stars":30,"repo_full_name":"claude-dev-suite/claude-dev-suite","description":"OAuth 2.0 authorization framework. Covers flows, tokens, and provider integration. Use for third-party authentication. USE WHEN: user mentions \"OAuth\", \"Google login\", \"GitHub auth\", \"social login\", \"authorization code flow\", \"PKCE\", asks about \"third-party auth\", \"provider integration\" DO NOT USE FOR: JWT tokens (use jwt skill), NextAuth.js (use nextauth skill), API keys, simple password auth","entity_type":"skill","detail_url":"/skills/claude-dev-suite/oauth2/"},{"slug":"secondsky/oauth-implementation","score":0.4617,"name":"oauth-implementation","category":"API & Backend","quality_tier":"solid","quality_score":89,"repo_stars":164,"repo_full_name":"secondsky/claude-skills","description":"OAuth 2.0 and OpenID Connect authentication with secure flows. Use for third-party integrations, SSO systems, token-based API access, or encountering authorization code flow, PKCE, token refresh, scope management errors.","entity_type":"skill","detail_url":"/skills/secondsky/oauth-implementation/"},{"slug":"agentrhq/authsome","score":0.4554,"name":"authsome","category":"AI & Automation","quality_tier":"listed","quality_score":56,"repo_stars":92,"repo_full_name":"agentrhq/authsome","description":"Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.","entity_type":"plugin","detail_url":"/skills/agentrhq/authsome/"},{"slug":"majiayu000/spellbook/auth-security","score":0.4471,"name":"auth-security","category":"AI & Automation","quality_tier":"solid","quality_score":88,"repo_stars":197,"repo_full_name":"majiayu000/spellbook","description":"OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).","entity_type":"skill","detail_url":"/skills/majiayu000/spellbook/auth-security/"},{"slug":"majiayu000/claude-arsenal/auth-security","score":0.4471,"name":"auth-security","category":"AI & Automation","quality_tier":"solid","quality_score":88,"repo_stars":197,"repo_full_name":"majiayu000/claude-arsenal","description":"OAuth 2.1 + JWT authentication security best practices. Use when implementing auth, API authorization, token management. Follows RFC 9700 (2025).","entity_type":"skill","detail_url":"/skills/majiayu000/claude-arsenal/auth-security/"},{"slug":"0xDarkMatter/auth-ops","score":0.4444,"name":"auth-ops","category":"API & Backend","quality_tier":"solid","quality_score":87,"repo_stars":41,"repo_full_name":"0xDarkMatter/claude-mods","description":"Authentication and authorization patterns - JWT, OAuth2, sessions, RBAC, ABAC, passkeys, MFA, identity-aware proxies, and Better Auth. Use for: authentication, jwt, oauth2, session, login, rbac, abac, passkey, mfa, totp, api key, token, cookie, csrf, bearer token, refresh token, oidc, cloudflare access, zero trust, Cf-Access-Jwt-Assertion, AUD tag, service auth, better auth.","entity_type":"skill","detail_url":"/skills/0xDarkMatter/auth-ops/"},{"slug":"StielChancellor/identity-access","score":0.4324,"name":"identity-access","category":"Code & Development","quality_tier":"listed","quality_score":67,"repo_stars":1,"repo_full_name":"StielChancellor/VibeGod-Tech-Team","description":"Use for authentication, authorization, SSO, and multi-tenant isolation — OIDC/OAuth2 + PKCE, enterprise SAML SSO, SCIM provisioning, RBAC/ABAC/ReBAC, deny-by-default server-side authz, tenant isolation, sessions/tokens/MFA. Trigger on \"login/auth\", \"SSO/SAML/OIDC\", \"SCIM/provisioning\", \"roles/permissions/RBAC\", \"multi-tenant isolation\", \"tokens/sessions/MFA\", or any identity/access decision.","entity_type":"skill","detail_url":"/skills/StielChancellor/identity-access/"},{"slug":"a5c-ai/oauth","score":0.4288,"name":"oauth","category":"AI & Automation","quality_tier":"solid","quality_score":94,"repo_stars":1271,"repo_full_name":"a5c-ai/babysitter","description":"OAuth 2.0/OIDC flows, provider integration, and token handling.","entity_type":"skill","detail_url":"/skills/a5c-ai/oauth/"},{"slug":"ecoma-io/authentication","score":0.4279,"name":"authentication","category":"API & Backend","quality_tier":"listed","quality_score":63,"repo_stars":1,"repo_full_name":"ecoma-io/touchstone","description":"Implement API authentication — JWT, OAuth2, API keys, and session management. Use when implementing login, choosing an auth strategy, securing endpoints, or debugging token issues.","entity_type":"skill","detail_url":"/skills/ecoma-io/authentication/"},{"slug":"ShieldNet-360/auth-security","score":0.4256,"name":"auth-security","category":"API & Backend","quality_tier":"solid","quality_score":80,"repo_stars":15,"repo_full_name":"ShieldNet-360/secure-vibe","description":"Authentication and authorization: JWT, OAuth 2.0 / OIDC, session management, CSRF, password hashing, MFA, and object-level / function-level authorization (BOLA, IDOR) — confirming the caller may access the specific resource they asked for. Use when generating login, signup, or password-reset flows, issuing or verifying JWTs, writing OAuth or OIDC code, wiring session cookies or MFA, or writing any endpoint that reads or writes a resource by id.","entity_type":"skill","detail_url":"/skills/ShieldNet-360/auth-security/"},{"slug":"sarmakska/auth-oauth","score":0.4238,"name":"auth-oauth","category":"API & Backend","quality_tier":"listed","quality_score":73,"repo_stars":1,"repo_full_name":"sarmakska/slipstream","description":"Use when adding social or third-party sign in: add a third party OAuth provider such as GitHub or Google for social sign in.","entity_type":"skill","detail_url":"/skills/sarmakska/auth-oauth/"},{"slug":"AreteDriver/oauth-integrator","score":0.4202,"name":"oauth-integrator","category":"AI & Automation","quality_tier":"listed","quality_score":75,"repo_stars":3,"repo_full_name":"AreteDriver/ai-skills","description":"OAuth and API authentication — OAuth 2.0 flows, PKCE, token lifecycle, JWT validation, and provider integration","entity_type":"skill","detail_url":"/skills/AreteDriver/oauth-integrator/"},{"slug":"openshard/auth-hardening","score":0.4142,"name":"auth-hardening","category":"AI & Automation","quality_tier":"listed","quality_score":68,"repo_stars":3,"repo_full_name":"openshard/openshard","description":"Guidance for implementing and reviewing authentication code safely","entity_type":"skill","detail_url":"/skills/openshard/auth-hardening/"},{"slug":"BenMacDeezy/auth-session-patterns","score":0.4136,"name":"auth-session-patterns","category":"AI & Automation","quality_tier":"listed","quality_score":72,"repo_stars":null,"repo_full_name":"BenMacDeezy/Orns-Forge","description":"Build authentication and session handling correctly the first time — OAuth/OIDC flows, session-vs-token storage per platform (httpOnly cookies on web, secure keychain/MMKV on mobile), refresh-token rotation, CSRF, and RBAC basics. Use when adding sign-in, wiring an OAuth/OIDC provider, choosing where a session or token lives, implementing token refresh, or scoping role/permission checks. Triggers on auth, login, sign-in, OAuth, OIDC, session, token, refresh, CSRF, RBAC, permissions.","entity_type":"skill","detail_url":"/skills/BenMacDeezy/auth-session-patterns/"},{"slug":"KbWen/auth-security","score":0.4135,"name":"auth-security","category":"AI & Automation","quality_tier":"solid","quality_score":83,"repo_stars":113,"repo_full_name":"KbWen/agentic-os","description":"Secure authentication and authorization when credentials, sessions, roles, or permissions change.","entity_type":"skill","detail_url":"/skills/KbWen/auth-security/"},{"slug":"protosphinx/auth-basics","score":0.4096,"name":"auth-basics","category":"API & Backend","quality_tier":"listed","quality_score":75,"repo_stars":null,"repo_full_name":"protosphinx/sphinxstack","description":"Add real sign-in to their app. Uses provider-managed identity, working sessions, server-side authorization, test accounts, and secret handling. Never roll your own password storage. Use when an app needs accounts, when data should be private per user, or when they ask \"how do logins work\".","entity_type":"skill","detail_url":"/skills/protosphinx/auth-basics/"},{"slug":"diegosouzapw/authentication","score":0.407,"name":"authentication","category":"API & Backend","quality_tier":"listed","quality_score":58,"repo_stars":45,"repo_full_name":"diegosouzapw/awesome-omni-skill","description":"Auth flows, session management, OAuth integration, domain-restricted access, and role-based access control for TopNetworks properties. Primary implementation is Better Auth 1.x with Google OAuth in route-genius. Use when implementing login, session checks, protected routes, or any access control logic.","entity_type":"skill","detail_url":"/skills/diegosouzapw/authentication/"},{"slug":"juanjaragavi/authentication","score":0.407,"name":"authentication","category":"API & Backend","quality_tier":"listed","quality_score":43,"repo_stars":null,"repo_full_name":"juanjaragavi/social-media-genius","description":"Auth flows, session management, OAuth integration, domain-restricted access, and role-based access control for TopNetworks properties. Primary implementation is Better Auth 1.x with Google OAuth in route-genius. Use when implementing login, session checks, protected routes, or any access control logic.","entity_type":"skill","detail_url":"/skills/juanjaragavi/authentication/"}],"source":{"source":"ClaudeAtlas","source_url":"https://claudeatlas.com","license":"MIT (catalog metadata); skills retain upstream licenses","data_recency":"Updated daily ~06:30 UTC","methodology_url":"https://claudeatlas.com/methodology/","citation_url":"https://claudeatlas.com/credits/","recommended_citation":"Source: ClaudeAtlas — https://claudeatlas.com"}}