Agent skill

JWT Auth

by aiskillstore in aiskillstore/marketplace

A skill your agent uses when implementing JWT authentication in FastAPI or Python projects.

No licenceAuto-check passedBackend & APIs

Install JWT Auth

skills CLI
$ npx skills add aiskillstore/marketplace --skill jwt-auth -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install aiskillstore/marketplace jwt-auth --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/aiskillstore/marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/awais68/jwt-auth .claude/skills/jwt-auth && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
jwt-auth
GitHub stars
430
Token cost
~1.2k tokens
SKILL.md length
279 words
Files
3 (incl. scripts)
Skills in repo
1,108
Repo updated
First seen
Licence
None found

At a glance

A skill your agent uses when implementing JWT authentication in FastAPI or Python projects.

  • Works in 4 steps: Generate Access Token → Protect Endpoint with Dependency → Role-Based Access Control → …
  • Implementing JWT authentication in FastAPI
  • SKILL.md covers Quick Reference, Core Workflows, Security Checklist and Token Structure, plus 5 more sections
  • Runs Python scripts from its folder; needs JWT_SECRET_KEY

What it does

JWT Auth is an agent skill from aiskillstore/marketplace. Use when implementing JWT authentication in FastAPI or Python projects. Triggers for: token generation, verification middleware, current user extraction, access token creation, token decoding, or role-based auth. NOT for: OAuth2 provider setup, OpenID Connect, or non-Python backends.

Its SKILL.md is about 1.2k tokens, which your agent loads only when the skill is triggered. The skill folder holds 3 other files, including scripts (for example `scripts/verify.py` and `skill-report.json`).

It sits in Backend & APIs, covering Authentication, OAuth and OpenID Connect and Authorization and RBAC. It works with Python and FastAPI. The repository describes itself as: Security-audited skills for Claude, Codex & Claude Code. One-click install, quality verified.

When your agent uses it

  • Implementing JWT authentication in FastAPI
  • Python projects
  • : token generation
  • Verification middleware

Example prompts

  • “/jwt-auth”

Requirements

  • Python 3
  • A credential in JWT_SECRET_KEY

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. Generate Access Token
  2. Protect Endpoint with Dependency
  3. Role-Based Access Control
  4. Extract User from JWT Payload

What it can do on your machine

Read from SKILL.md and the folder at commit ad8daf7. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Ships 1 file in scripts/ (Python), which the agent can run.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • JWT_SECRET_KEY

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

JWT Auth loads about 1.2k tokens when it runs. Until then it costs about 73 tokens; SKILL.md has 279 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~73
When it runs · the whole SKILL.md, loaded when a task matches
~1.2k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 279 words (~1,209 tokens).

“Expert implementation of JWT token generation, verification, and user extraction for FastAPI and Python applications.”

— opening of SKILL.md by aiskillstore
name
jwt-auth

Read the full SKILL.md on GitHub

Files

SKILL.md and 2 other files (scripts) in skills/awais68/jwt-auth of aiskillstore/marketplace.

  • SKILL.md
  • scripts/verify.py
  • skill-report.json

Open the folder on GitHubat commit ad8daf7

Compare with similar skills

JWT Auth next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

JWT Auth compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
JWT Auth this skillaiskillstore/marketplace430—~1.2kAutomated safety check: PassNone
Fastapi ItechmeatKilo-Org/kilo-marketplace190—~1.5kAutomated safety check: PassMIT
Fastapi Appccplugins/awesome-claude-code-plugins968—~1.1kAutomated safety check: NotesApache-2.0
Cookbook Authenticationdatabricks-solutions/databricks-apps-cookbook183—~1.8kAutomated safety check: PassCustom licence
Spring Boot Security JWTgiuseppe-trisciuoglio/developer-kit355—~3.9kAutomated safety check: NotesMIT
FastAPI ExpertJeffallan/claude-skills12k—~1.8kAutomated safety check: PassMIT

Similar skills

  • Fastapi Itechmeat

    Kilo-Org/kilo-marketplace

    FastAPI Python framework. An agent skill from Kilo-Org/kilo-marketplace.

    190 GitHub stars~1.5k tokensUpdated 10 days ago
    Backend & APIsAuto-check passed
  • Fastapi App

    ccplugins/awesome-claude-code-plugins

    Bootstrap a new FastAPI backend with async SQLAlchemy 2.0, asyncpg, Alembic, Pydantic v2, and no deprecated APIs.

    968 GitHub stars~1.1k tokensUpdated 1 mo ago
    Backend & APIsAuto-check: notes
  • Cookbook Authentication

    databricks-solutions/databricks-apps-cookbook

    Implement authentication in Databricks Apps: get current user info, on-behalf-of-user (OBO) auth, service principal auth, and OAuth patterns.

    183 GitHub stars~1.8k tokensUpdated 4 days ago
    Backend & APIsAuto-check passed
  • Spring Boot Security JWT

    giuseppe-trisciuoglio/developer-kit

    Provides JWT authentication and authorization patterns for Spring Boot 3.5.x covering token generation with JJWT, Bearer/cookie authentication, database/OAuth2 integration, and RBAC/permission-based…

    355 GitHub stars~3.9k tokensUpdated 28 days ago
    Backend & APIsAuto-check: notes
  • FastAPI Expert

    Jeffallan/claude-skills

    Builds async Python APIs with FastAPI and Pydantic V2, covering endpoints, JWT authentication, async SQLAlchemy, WebSockets and pytest checks against the OpenAPI docs.

    12k GitHub stars~1.8k tokensUpdated 5 days ago
    Backend & APIsAuto-check passed
  • Fastapi Init Skill

    jiushiwon/wg-skills

    FastAPI 项目一键初始化技能。面向零基础小白,提供环境探测、自动安装、完整 Web 骨架生成、SSE 流式框架、JWT 鉴权、统一响应封装、文件上传接口、一键启动/重启脚本、Swagger 文档,内置 MySQL(默认)/ PostgreSQL / MongoDB 数据库选择。用户只需说"帮我搭一个 FastAPI 项目"即可一条命令完成从零到跑的完整链路。触发词:"FastAPI…

    112 GitHub stars~1.8k tokensUpdated yesterday
    Backend & APIsAuto-check: notes

More from aiskillstore/marketplace

All 1,108 skills in this repo
  • Code Stats

    aiskillstore/marketplace

    Analyze codebase with tokei (fast line counts by language) and difft (semantic AST-aware diffs).

    430 GitHub starsUsed in 2 repos~697 tokens
    Auto-check: notes
  • File Search

    aiskillstore/marketplace

    Modern file and content search using fd, ripgrep (rg), and fzf.

    430 GitHub starsUsed in 2 repos~598 tokens
    Auto-check: notes
  • Data Processing

    aiskillstore/marketplace

    Process JSON with jq and YAML/TOML with yq. An agent skill from aiskillstore/marketplace.

    430 GitHub starsUsed in 1 repo~720 tokens
    Auto-check: notes
  • Doc Scanner

    aiskillstore/marketplace

    Scans for project documentation files (AGENTS.md, CLAUDE.md, GEMINI.md, COPILOT.md, CURSOR.md, WARP.md, and 15+ other formats) and synthesizes guidance.

    430 GitHub starsUsed in 1 repo~644 tokens
    Auto-check: notes
  • Find Replace

    aiskillstore/marketplace

    Modern find-and-replace using sd (simpler than sed) and batch replacement patterns.

    430 GitHub starsUsed in 1 repo~527 tokens
    Auto-check: notes
  • Investigating Codebases

    aiskillstore/marketplace

    Automatically activated when user asks how something works, wants to understand unfamiliar code, needs to explore a new codebase, or asks questions like "where is X implemented?", "how does Y…

    430 GitHub starsUsed in 1 repo~2.7k tokens
    Auto-check: notes

Works with

Categories

Questions about JWT Auth

What does JWT Auth do?

A skill your agent uses when implementing JWT authentication in FastAPI or Python projects. JWT Auth is an agent skill from aiskillstore/marketplace. Use when implementing JWT authentication in FastAPI or Python projects.

When should I use JWT Auth?

JWT Auth fits situations like: implementing JWT authentication in FastAPI; Python projects; : token generation; verification middleware.

How do I install JWT Auth in Claude Code?

Run `npx skills add aiskillstore/marketplace --skill jwt-auth -a claude-code`. Or copy the skill folder (skills/awais68/jwt-auth in aiskillstore/marketplace) into .claude/skills/jwt-auth in your project. Claude Code loads it when a task matches its description.

How do I install JWT Auth in Codex?

Run `npx skills add aiskillstore/marketplace --skill jwt-auth -a codex`. Or copy the skill folder (skills/awais68/jwt-auth in aiskillstore/marketplace) into .agents/skills/jwt-auth in your project. Codex loads it when a task matches its description.

Can I use JWT Auth in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add aiskillstore/marketplace --skill jwt-auth -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/jwt-auth, .gemini/skills/jwt-auth, .github/skills/jwt-auth and .opencode/skills/jwt-auth in your project.

What does JWT Auth need to run?

Going by SKILL.md and its folder, JWT Auth needs Python for the scripts in its folder and credentials named JWT_SECRET_KEY. Our summary lists: Python 3; A credential in JWT_SECRET_KEY.

Does JWT Auth access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is JWT Auth safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does JWT Auth use?

No licence was found for JWT Auth or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does JWT Auth use?

About 1.2k tokens (SKILL.md is roughly 4.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to JWT Auth?

Skills that share tags, products or a category with JWT Auth: Fastapi Itechmeat (Kilo-Org/kilo-marketplace, 190 stars), Fastapi App (ccplugins/awesome-claude-code-plugins, 968 stars), Cookbook Authentication (databricks-solutions/databricks-apps-cookbook, 183 stars) and Spring Boot Security JWT (giuseppe-trisciuoglio/developer-kit, 355 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains JWT Auth?

aiskillstore (a GitHub organization) maintains it in aiskillstore/marketplace, which has 430 GitHub stars. The repository holds 1,108 skills in this directory. The repository was last updated on October 7, 2026.

Source: aiskillstore/marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.