Agent skill

Soundcloud API Auth

by soundcloud in soundcloud/api

Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage.

No licenceAuto-check passedBackend & APIs

Install Soundcloud API Auth

skills CLI
$ npx skills add soundcloud/api --skill soundcloud-api-auth -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install soundcloud/api soundcloud-api-auth --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/soundcloud/api.git skills-src && mkdir -p .claude/skills && cp -r skills-src/.cursor/skills/soundcloud-api-auth .claude/skills/soundcloud-api-auth && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
soundcloud-api-auth
GitHub stars
257
Token cost
~562 tokens
SKILL.md length
136 words
Files
1
Skills in repo
3
Repo updated
First seen
Licence
None found

At a glance

Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage.

  • Works in 4 steps: Generate code_verifier (43–128 chars)… → Redirect user to authorize URL with… → Exchange code at token endpoint with… → …
  • Obtaining tokens
  • SKILL.md covers Endpoints, Authorization Code + PKCE…, Client Credentials (public… and Refresh (single-use refresh…, plus 2 more sections
  • Calls curl; reaches secure.soundcloud.com and api.soundcloud.com; needs BASE64_CLIENT_ID_SECRET and REFRESH_TOKEN

What it does

Soundcloud API Auth is an agent skill from soundcloud/api. Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage. Use when adding login, obtaining tokens, or fixing 401 auth errors.

Its SKILL.md is about 560 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

It sits in Backend & APIs, covering OAuth and OpenID Connect and Authorization and RBAC. The repository describes itself as: A public repo for our Developer Community to engage about bugs and feature requests on our Public API.

When your agent uses it

  • Obtaining tokens
  • Fixing 401 auth errors

Example prompts

  • “Use the soundcloud-api-auth skill to implement SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token…”
  • “/soundcloud-api-auth”

Requirements

  • A credential in BASE64_CLIENT_ID_SECRET
  • A credential in REFRESH_TOKEN

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. Generate code_verifier (43–128 chars) and code_challenge = BASE64URL(SHA256(verifier))
  2. Redirect user to authorize URL with response_type=code, client_id, redirect_uri, code_challenge, code_challenge_method=S256, state
  3. Exchange code at token endpoint with grant_type=authorization_code, code_verifier, redirect_uri
  4. Store access_token, refresh_token, expires_in securely (server-side or httpOnly cookie — never in client-visible storage for secrets)

What it can do on your machine

Read from SKILL.md and the folder at commit 33092b8. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • curl

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Hosts in commands or code, which the agent is likely to contact:

    • secure.soundcloud.com
    • api.soundcloud.com

    Also links to:

    • soundcloud.com
    • developers.soundcloud.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • BASE64_CLIENT_ID_SECRET
    • REFRESH_TOKEN
    • CLIENT_SECRET

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Soundcloud API Auth loads about 562 tokens when it runs. Until then it costs about 59 tokens; SKILL.md has 136 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~59
When it runs · the whole SKILL.md, loaded when a task matches
~562

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Without a licence we can't republish the file, so here is its outline and opening line. It has 136 words (~562 tokens).

name
soundcloud-api-auth

Read the full SKILL.md on GitHub

Files

Just SKILL.md in .cursor/skills/soundcloud-api-auth of soundcloud/api.

Open the folder on GitHubat commit 33092b8

Compare with similar skills

Soundcloud API Auth next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Soundcloud API Auth compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Soundcloud API Auth this skillsoundcloud/api257—~562Automated safety check: PassNone
Cognitoitsmostafa/aws-agent-skills1.2k1 repos~2.3kAutomated safety check: PassMIT
Auth Implementation Patternsynulihao/AgentSkillOS6179 repos~4.4kAutomated safety check: PassNone
Passport Developmenttrypostit/trypost676—~1.9kAutomated safety check: PassMIT
Frontmcp Auth UIagentfront/frontmcp146—~3.7kAutomated safety check: PassApache-2.0
Supercheck Security Authsupercheck-io/supercheck215—~1.2kAutomated safety check: PassAGPL-3.0

Similar skills

  • Cognito

    itsmostafa/aws-agent-skills

    AWS Cognito user authentication and authorization service. An agent skill from itsmostafa/aws-agent-skills.

    1.2k GitHub starsUsed in 1 repo~2.3k tokens
    Backend & APIsAuto-check passed
  • Auth Implementation Patterns

    ynulihao/AgentSkillOS

    Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems.

    617 GitHub starsUsed in 9 repos~4.4k tokens
    Backend & APIsAuto-check passed
  • Passport Development

    trypostit/trypost

    Develops OAuth2 API authentication with Laravel Passport. An agent skill from trypostit/trypost.

    676 GitHub stars~1.9k tokensUpdated today
    Backend & APIsAuto-check passed
  • Frontmcp Auth UI

    agentfront/frontmcp

    A skill your agent uses when customizing, branding, or replacing the built-in FrontMCP OAuth pages (the login, consent, federated-select, incremental-authorization, and error pages) with your own…

    146 GitHub stars~3.7k tokensUpdated today
    Backend & APIsAuto-check passed
  • Supercheck Security Auth

    supercheck-io/supercheck

    Work on Supercheck authentication, RBAC, tenant isolation, sessions, API and trigger keys, invitations, project membership, project variables, OAuth, super-admin behavior, SSRF, or…

    215 GitHub stars~1.2k tokensUpdated today
    Backend & APIsAuto-check passed
  • Authentication

    codewithmukesh/dotnet-claude-kit

    Authentication and authorization for ASP.NET Core. An agent skill from codewithmukesh/dotnet-claude-kit.

    751 GitHub starsUsed in 1 repo~1.9k tokens
    Backend & APIsAuto-check passed

More from soundcloud/api

  • Implements SoundCloud discovery endpoints — track search, related tracks, and related artists — with URN path parameters and linkedpartitioning pagination.

    257 GitHub stars~449 tokensUpdated 7 days ago
    Auto-check passed
  • Integrates applications with the SoundCloud HTTP API using OAuth 2.1, OpenAPI, and developer docs.

    257 GitHub stars~787 tokensUpdated 7 days ago
    Auto-check passed

Categories

Questions about Soundcloud API Auth

What does Soundcloud API Auth do?

Implements SoundCloud OAuth 2.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage. Soundcloud API Auth is an agent skill from soundcloud/api.1 flows — Authorization Code with PKCE and Client Credentials — including token refresh and secure credential storage.

When should I use Soundcloud API Auth?

Soundcloud API Auth fits situations like: obtaining tokens; fixing 401 auth errors.

How do I install Soundcloud API Auth in Claude Code?

Run `npx skills add soundcloud/api --skill soundcloud-api-auth -a claude-code`. Or copy the skill folder (.cursor/skills/soundcloud-api-auth in soundcloud/api) into .claude/skills/soundcloud-api-auth in your project. Claude Code loads it when a task matches its description.

How do I install Soundcloud API Auth in Codex?

Run `npx skills add soundcloud/api --skill soundcloud-api-auth -a codex`. Or copy the skill folder (.cursor/skills/soundcloud-api-auth in soundcloud/api) into .agents/skills/soundcloud-api-auth in your project. Codex loads it when a task matches its description.

Can I use Soundcloud API Auth in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add soundcloud/api --skill soundcloud-api-auth -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/soundcloud-api-auth, .gemini/skills/soundcloud-api-auth, .github/skills/soundcloud-api-auth and .opencode/skills/soundcloud-api-auth in your project.

What does Soundcloud API Auth need to run?

Going by SKILL.md and its folder, Soundcloud API Auth needs the command-line tools its instructions call (curl) and credentials named BASE64_CLIENT_ID_SECRET, REFRESH_TOKEN and CLIENT_SECRET. Our summary lists: A credential in BASE64_CLIENT_ID_SECRET; A credential in REFRESH_TOKEN.

Does Soundcloud API Auth access the network?

SKILL.md names 4 domains. In commands or code: secure.soundcloud.com and api.soundcloud.com; the agent is likely to contact these when it follows the instructions. As links in the text: soundcloud.com and developers.soundcloud.com. This is read from the text; nothing was executed.

Is Soundcloud API Auth safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Soundcloud API Auth use?

No licence was found for Soundcloud API Auth or its repository. Without one, default copyright applies: ask the author before reusing or redistributing it.

How many tokens does Soundcloud API Auth use?

About 562 tokens (SKILL.md is roughly 2.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Soundcloud API Auth?

Skills that share tags, products or a category with Soundcloud API Auth: Cognito (itsmostafa/aws-agent-skills, 1.2k stars), Auth Implementation Patterns (ynulihao/AgentSkillOS, 617 stars), Passport Development (trypostit/trypost, 676 stars) and Frontmcp Auth UI (agentfront/frontmcp, 146 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Soundcloud API Auth?

soundcloud (a GitHub organization) maintains it in soundcloud/api, which has 257 GitHub stars. The repository holds 3 skills in this directory. The repository was last updated on September 30, 2026.

Source: soundcloud/api on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.