Agent skill · Auth0 (Okta)

Auth0 skill for Claude Code, Codex and Cursor

Adds or fixes Auth0 login, sessions, tokens, MFA and API protection in an app.

Officialname: auth0★ 54 (repo)pushed 2026-10-23Apache-2.0SKILL.md on GitHubchecked 2026-11-07

What it does, in the publisher's words

Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, passwordless passkey login (WebAuthn), SSO, Organizations, RBAC, custom domains, Universal Portals for hosted account and organization self-service, or Universal Login branding.

The description field of the SKILL.md. The agent reads only this at startup and decides from it when to load the full skill.

Install Auth0

The skills CLI copies the skill into the folder of each agent you pick (Claude Code, Codex, Cursor, Copilot, Gemini CLI, OpenCode, Windsurf...). Add -g for all projects. Needs Node.js 22.20+. docs

npx skills add auth0/agent-skills --skill auth0

This repo is a plugin marketplace. Inside Claude Code, add it and install the plugin that holds the skill (auth0), or copy only this skill into ~/.claude/skills. docs

/plugin marketplace add auth0/agent-skills
/plugin install <plugin>@auth0-agent-skills

# or only this skill:
npx skills add auth0/agent-skills --skill auth0 -a claude-code

Download the skill folder, zip it, then Customize > Skills > + > Create skill > Upload a skill. Code execution must be on (Settings > Capabilities). docs

git clone --depth 1 https://github.com/auth0/agent-skills.git /tmp/auth0-src
cp -r /tmp/auth0-src/plugins/auth0/skills/auth0 ./auth0
zip -r auth0.zip auth0

Codex reads skills from .agents/skills in the repo or ~/.agents/skills. Type $ in Codex to use one. docs

npx skills add auth0/agent-skills --skill auth0 -a codex

gh skill (GitHub CLI 2.90+, preview) installs it for Copilot in VS Code, the CLI and the cloud agent. Copilot also reads .github/skills and ~/.copilot/skills. docs

gh skill install auth0/agent-skills auth0

Cursor reads .cursor/skills, .agents/skills and ~/.cursor/skills (and .claude/skills). It does not install loose skills from a GitHub URL, so copy it in. docs

npx skills add auth0/agent-skills --skill auth0 -a cursor

Installs from the GitHub repo; --path picks this skill out of the repo. Default scope is user (all projects). docs

gemini skills install https://github.com/auth0/agent-skills.git --path plugins/auth0/skills/auth0

OpenCode reads .opencode/skills, ~/.config/opencode/skills and the Claude and .agents folders. docs

npx skills add auth0/agent-skills --skill auth0 -a opencode

Windsurf (now Devin Desktop) reads .devin/skills, .windsurf/skills and ~/.codeium/windsurf/skills. docs

npx skills add auth0/agent-skills --skill auth0 -a windsurf

Works with

Claude Code, Claude.ai and Claude Desktop, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf and other agents that read the open Agent Skills format.

Bundles 4 JavaScript/TypeScript scripts the agent can run, so it needs JavaScript and TypeScript on the machine. In the Claude apps, code execution must be on.

What's in the SKILL.md

38 sections

Step 1: Detect intent
If nothing clearly matches
Step 2: Detect framework
Tier 1 — Auth0 SDK already installed (strongest signal)
Node.js / JavaScript / TypeScript — check package.json → dependencies
Python — check requirements.txt or pyproject.toml
Java / Kotlin — check build.gradle or pom.xml
.NET — check *.csproj or NuGet.Config
PHP — check composer.json
Go — check go.mod
Mobile (native)
Tier 2 — Framework from non-Auth0 workspace dependencies
Tier 3 — Framework from the prompt
Variant disambiguation (web app vs API)
If nothing matched
Conflicts
Step 3: Detect tooling
Step 4: Load reference files
integrate
feature:mfa
feature:passkeys
feature:organizations
feature:enterprise-connect
feature:universal-portals
+ 14 more

Bundled files

159

agents/openai.yaml
assets/acul/js-templates/login-id.js
assets/acul/js-templates/login-password.js
assets/acul/react-templates/login-id.tsx
assets/acul/react-templates/login-password.tsx
assets/acul/theme-templates/globals.css
assets/acul/theme-templates/tailwind.config.ts
assets/acul/theme-templates/theme-provider.ts
assets/acul/theme-templates/tokens.css
assets/audit/report-template.html
assets/audit/report-template.md
assets/healthcheck/report-template.html
assets/healthcheck/report-template.md
references/feature-acul/index.md
references/feature-audit-pricing/index.md
references/feature-audit-remediation/index.md
references/feature-audit/index.md
references/feature-branding/index.md
references/feature-custom-domains/index.md
references/feature-custom-token-exchange/auth0-android.md
+ 139 more

Loaded only when the instructions point to them.

Facts

Skill name: auth0
Publisher: Auth0 (Okta) (official)
Repo: auth0/agent-skills
License: Apache-2.0
Version: 2.8.0
SKILL.md size: 2,373 words, 427 lines
Bundled files: 159, 4 scripts (JavaScript, TypeScript), 49 docs
Repo stars: 54 (as of 2026-10-24)
SKILL.md checked: 2026-11-07

Pairs with the Auth0 MCP server: the server gives the agent the tools, the skill teaches it how to use them.

Related security & auth skills

Security Best Practices Review · OpenAI
Security Threat Model · OpenAI
Sign In With Google (Web) · Google
Agentic Actions Auditor · Trail of Bits
CodeQL Scan · Trail of Bits
Constant-Time Analysis · Trail of Bits
Differential Security Review · Trail of Bits
Semgrep Rule Creator · Trail of Bits

FAQ

What does the auth0 skill do?+

Adds or fixes Auth0 login, sessions, tokens, MFA and API protection in an app. In its own SKILL.md, Auth0 (Okta) describes it as: "Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, passwordless passkey login (WebAuthn), SSO, Organizations, RBAC, custom..."

How do I install the auth0 skill?+

Run npx skills add auth0/agent-skills --skill auth0 and pick your agents, or use the tab for your agent above. In Claude Code the skill ends up in ~/.claude/skills/auth0/SKILL.md; in Codex and Cursor in .agents/skills/auth0/.

Does Auth0 work in Codex, Cursor and Copilot, or only Claude?+

It's a standard SKILL.md, so any agent that reads the Agent Skills format can use it: Claude Code, the Claude apps, Codex, GitHub Copilot, Cursor, Gemini CLI, OpenCode, Windsurf and more.

Who maintains Auth0?+

Auth0 (Okta), the company or project behind it, in the auth0/agent-skills repo on GitHub, last pushed 2026-10-23. License: Apache-2.0.

Read a skill's SKILL.md and scripts before you install it: skills aren't verified by any agent vendor. Claude skills marketplace · How to install skills · MCP servers