跳到正文
cccskills
免费在 GitHub 公开

attio-install-auth

Set up REST authentication for an Attio integration by choosing a workspace API key or OAuth for multiple workspaces. Map required scopes to endpoints, protect and rotate tokens, and verify access with a read-only request.

中文简介正在准备中。当前显示英语简介。

原文查看原文说明

Choose and configure Attio REST authentication for a single workspace or multi-workspace OAuth app, including least-privilege scopes and a read-only verification. Use when connecting a service to Attio. Trigger with "Attio auth", "Attio API key", or "Attio OAuth setup".

实测评分 未实测

查看安装方法

适用场景

  • Choosing authentication for an Attio integration
  • Setting least-privilege API scopes by endpoint
  • Configuring OAuth for multiple Attio workspaces
  • Verifying Attio access without changing data

包含的文件(2)

  • SKILL.md3.7 KB
  • references/official-docs.md2.1 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Attio Authentication Setup

Overview

This skill selects the correct Attio access-token path, maps endpoint scopes, and proves the credential with a non-mutating request.

Prerequisites

  • The integration's workspace and tenancy model
  • Exact endpoints and operations the application will use
  • An approved secret store and rotation owner
  • Registered redirect URIs when OAuth is required

Tool Discipline

Use Read, Glob, and Grep to inspect the local auth wrapper, secret names, redirect configuration, and endpoint use. Use WebFetch only for current official Attio documentation. Use Write or Edit after the auth model and target files are confirmed.

Current Contract

  • Prefer OAuth 2.0 for an app that serves multiple Attio workspaces.
  • Use a manually generated workspace API key for one controlled workspace.
  • Both credential types can be sent as Authorization: Bearer <access_token>.
  • Required scopes are documented per endpoint and should be granted operation by operation.
  • Attio also supports Basic authentication with the token as username and an empty password, but Bearer is recommended.

Authentication

For OAuth, validate state, use the registered redirect URI exactly, exchange the code server-side, and encrypt the resulting token at rest. For a workspace key, create it in developer settings with the minimum scopes and store it only in the approved secret manager.

Instructions

  1. Classify the integration as single-workspace or multi-workspace.
  2. Inventory methods and endpoints, then derive scopes from their current reference pages.
  3. Define secret storage, tenant-to-token mapping, rotation, revocation, and audit ownership.
  4. Implement server-side credential injection without token logging.
  5. For OAuth, bind and verify state; never expose the client secret to browser code.
  6. Verify with one read-only endpoint and record only status, workspace alias, and granted scope names.

Approval Boundaries

Do not generate or broaden production credentials, modify redirect URIs, or migrate tenant tokens without the owning administrator's approval and a rollback plan.

Output

Return the chosen auth model, endpoint-to-scope map, secret reference, OAuth control evidence if applicable, read-only verification, and rotation owner.

Error Handling

ConditionResponse
Tenancy model is unclearStop before choosing a credential type.
OAuth state mismatchReject the callback and start a fresh authorization flow.
403 after verificationCompare the exact endpoint scopes; do not grant all scopes.
Token appears in logsRevoke or rotate it and scrub retained output.

Examples

Input:

tenancy=multiple-workspaces; endpoint=GET /v2/tasks; storage=encrypted-server-side

Expected handoff:

auth=oauth; state=verified; scopes=endpoint-derived; read-test=pass

Resources

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Add a synthetic-data CI gate for customer-owned Abridge integration code. Test consent handling, note-review handoffs, redaction, and rollback behavior with mocked vendor boundaries, without connecting CI to a live Abridge or EHR tenant.

中文简介正在准备中。当前显示英语简介。

  • Adding regression checks to an Abridge integration repository
  • Testing consent and note-release handling
  • Checking logs for sensitive data exposure
jeremylongshore/tons-of-skills-marketplace28692026年10月25日 更新

Triage Abridge recording, note review, Epic handoff, and access problems using observed symptoms and approved guidance. Identify the affected workflow stage, organize a minimal timeline, and prepare a redacted escalation record for the responsible team.

中文简介正在准备中。当前显示英语简介。

  • Separate recording problems from upload failures
  • Investigate note creation delays and editor issues
  • Identify the responsible team for Epic handoff failures
jeremylongshore/tons-of-skills-marketplace28692026年10月25日 更新

Map and review an Abridge clinical documentation workflow from consent and recording through draft review, evidence checks, edits, and final disposition. Keep clinician approval explicit, identify failure exits, and separate verified facts from tenant-specific details and pending approvals.

中文简介正在准备中。当前显示英语简介。

  • Map a clinical note workflow for a care setting
  • Check where consent and patient identity are verified
  • Review draft notes against linked evidence before sign-off
jeremylongshore/tons-of-skills-marketplace28692026年10月25日 更新

Audit how clinician-reviewed Abridge note sections map into Epic templates and downstream workflows. Use approved test records to document destinations, exceptions, evidence, rollback steps, and a go or no-go decision for a specific environment.

中文简介正在准备中。当前显示英语简介。

  • Checking Abridge note section mappings to Epic templates
  • Auditing a department’s approved documentation handoff
  • Preparing test evidence and a go or no-go decision
jeremylongshore/tons-of-skills-marketplace28692026年10月25日 更新

Review Abridge adoption and workflow value using local usage records, clinician feedback, and verified contract costs. Build an evidence based decision table covering adoption, quality, support burden, and options to expand, hold, or improve the rollout.

中文简介正在准备中。当前显示英语简介。

  • Reviewing adoption after an Abridge rollout
  • Preparing evidence for a renewal decision
  • Comparing workflow outcomes across care settings
jeremylongshore/tons-of-skills-marketplace28692026年10月25日 更新

Prepare a bounded support bundle for an Abridge issue using allowlisted operational details such as versions, coarse timestamps, and correlation references. Exclude recordings, transcripts, patient identifiers, credentials, and unrestricted logs, then document redactions and review details.

中文简介正在准备中。当前显示英语简介。

  • Preparing reviewed evidence for an Abridge support case
  • Documenting redactions and excluded data
  • Collecting approved operational details for an incident
jeremylongshore/tons-of-skills-marketplace28692026年10月25日 更新

查看 jeremylongshore 的全部技能

报告此技能的问题