Official agent skill

Auth

by vercel in vercel/vercel-plugin

Authentication integration guidance — Clerk (native Vercel Marketplace), Better Auth, Descope, and Auth0 setup for Next.js applications, plus Sign in with Vercel, Vercel Passport, and Vercel KMS.

OfficialCustom licenceAuto-check: notesBackend & APIs

Install Auth

skills CLI
$ npx skills add vercel/vercel-plugin --skill auth -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install vercel/vercel-plugin auth --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/vercel/vercel-plugin.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/auth .claude/skills/auth && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
auth
GitHub stars
301
Token cost
~6.4k tokens
SKILL.md length
1,469 words
Files
2
Skills in repo
38
Repo updated
First seen
Licence
Custom licence

At a glance

Authentication integration guidance — Clerk (native Vercel Marketplace), Better Auth, Descope, and Auth0 setup for Next.js applications, plus Sign in with Vercel, Vercel Passport, and Vercel KMS.

  • Works in 8 steps: Detect framework (Next.js App/Pages… → Install better-auth plus the DB driver.… → Create lib/auth.ts (server) and… → …
  • Implementing user authentication
  • SKILL.md covers Clerk (Recommended — Native…, Better Auth (Self-Hosted) and Descope
  • Calls npx, vercel and npm; reaches vercel.com and mcp.better-auth.com; needs CLERK_SECRET_KEY and NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY

What it does

Auth is an agent skill from vercel/vercel-plugin, published by the product's own GitHub organization. Authentication integration guidance — Clerk (native Vercel Marketplace), Better Auth, Descope, and Auth0 setup for Next.js applications, plus Sign in with Vercel, Vercel Passport, and Vercel KMS. Covers server config, route handlers, proxy.ts auth patterns, sign-in/sign-up flows, and Marketplace provisioning. Use when implementing user authentication, sessions, protected routes, or protecting deployments.

Its SKILL.md is about 6.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file.

It sits in Backend & APIs, covering Authentication and Deployment. It works with Vercel, Next.js, Better Auth and Auth0. The repository describes itself as: Comprehensive Vercel ecosystem plugin — relational knowledge graph, skills for every major product, specialized agents, and Vercel conventions. Turns any AI agent into a Vercel…

When your agent uses it

  • Implementing user authentication
  • Protected routes
  • Protecting deployments

Example prompts

  • “/auth”

Requirements

  • Node.js
  • A credential in CLERK_SECRET_KEY
  • A credential in NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY

Workflow steps

8 steps, taken from the first numbered list in SKILL.md.

  1. Detect framework (Next.js App/Pages Router, SvelteKit, Nuxt, Hono…), database/ORM (prisma/schema.prisma, drizzle.config.ts, pg…
  2. Install better-auth plus the DB driver. Provision Postgres from the Marketplace if the project has no database.
  3. Create lib/auth.ts (server) and lib/auth-client.ts (client).
  4. Mount the route handler at app/api/auth/[...all]/route.ts.
  5. Migrate with npx auth@latest migrate (built-in adapter) or generate + the ORM's migrate (Prisma/Drizzle).
  6. Protect routes: cookie check in proxy.ts, real getSession() in pages/route handlers.
  7. Verify GET /api/auth/ok returns { "status": "ok" }, then run a sign-up → sign-in → getSession() pass.
  8. Re-run migrate after every plugin change.

What it can do on your machine

Read from SKILL.md and the folder at commit 82fa491. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    Shell commands in SKILL.md call:

    • npx
    • vercel
    • npm

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Hosts in commands or code, which the agent is likely to contact:

    • vercel.com
    • mcp.better-auth.com
    • api.vercel.com
    • kms.vercel.com

    Also links to:

    • better-auth.com
    • clerk.com
    • github.com
    • docs.descope.com
    • auth0.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names these keys or tokens, usually read from environment variables:

    • CLERK_SECRET_KEY
    • NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY
    • BETTER_AUTH_SECRET
    • GITHUB_CLIENT_SECRET
    • VERCEL_CLIENT_SECRET
    • AUTH0_SECRET
    • AUTH0_CLIENT_SECRET

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Auth loads about 6.4k tokens when it runs. Until then it costs about 103 tokens; SKILL.md has 1,469 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~103
When it runs · the whole SKILL.md, loaded when a task matches
~6.4k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check: notes

The automated check noted patterns worth knowing about, such as sudo or a known installer.

  • NoteMentions a .env fileSKILL.md:248
    Add routing env vars to `.env.local`:

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

Its licence (Custom licence) doesn't allow us to republish the file, so here is its outline and opening line. It has 1,469 words (~6,368 tokens).

“You are an expert in authentication for Vercel-deployed applications — covering Clerk (native Vercel Marketplace integration), Better Auth (self-hosted, with data in your own database), Descope, and Auth0 for application sign-in, plus Vercel's own primitives: Sign in with Vercel (OAuth/OIDC…”

— opening of SKILL.md by vercel, Custom licence
name
auth
metadata.priority
6
metadata.docs
https://authjs.dev/getting-started, https://nextjs.org/docs/app/guides/authentication, https://better-auth.com/llms.txt
metadata.sitemap
https://authjs.dev/sitemap.xml
metadata.pathPatterns
proxy.ts, proxy.js, src/proxy.ts, src/proxy.js, middleware.ts, middleware.js, src/middleware.ts, src/middleware.js, clerk.config.*, app/sign-in/**…
metadata.bashPatterns
\bnpm\s+(install|i|add)\s+[^\n]*@clerk/nextjs\b, \bpnpm\s+(install|i|add)\s+[^\n]*@clerk/nextjs\b, \bbun\s+(install|i|add)\s+[^\n]*@clerk/nextjs\b…
metadata.importPatterns
@vercel/kms, better-auth
retrieval.aliases
authentication, login system, sign in, auth flow, sign in with vercel, passport, kms
retrieval.intents
add auth, protect routes, manage sessions, implement login, secure api endpoints
retrieval.entities
NextAuth, Auth.js, Better Auth, betterAuth, authClient, JWT, OAuth, session, middleware, getServerSession, Vercel Passport, Okta, Microsoft Entra ID, Vercel…
retrieval.examples
add login to my app, protect this route with auth, set up NextAuth, set up Better Auth, add better auth to my next app

Read the full SKILL.md on GitHub

Files

SKILL.md and 1 other file in skills/auth of vercel/vercel-plugin.

  • SKILL.md
  • .vercel.approvers

Open the folder on GitHubat commit 82fa491

Compare with similar skills

Auth next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Auth compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Auth this skillvercel/vercel-plugin301—~6.4kAutomated safety check: NotesCustom licence
Deploy Verceljohnku2011/boilerplates-with-ai-skills240—~660Automated safety check: NotesMIT
Workosusenotra/notra255—~6.2kAutomated safety check: PassAGPL-3.0
Lunora Setup Authanolilab/lunora283—~2kAutomated safety check: PassCustom licence
Better Authgiuseppe-trisciuoglio/developer-kit355—~2.4kAutomated safety check: NotesMIT
Better Autheinverne/dotfiles121—~4kAutomated safety check: NotesMIT

Similar skills

  • Deploy Vercel

    johnku2011/boilerplates-with-ai-skills

    A skill your agent uses when deploying or configuring this project on Vercel — env vars, build settings, serverless limits, and production checks for Next.js or Express.

    240 GitHub stars~660 tokensUpdated 1 mo ago
    Backend & APIsAuto-check: notes
  • Workos

    usenotra/notra

    A skill your agent uses when the user asks for a WorkOS docs URL, term, or dashboard field (Sign-in endpoint, initiateloginuri, Redirect URI, WORKOS env vars), or is implementing, debugging, or…

    255 GitHub stars~6.2k tokensUpdated today
    Backend & APIsAuto-check passed
  • Lunora Setup Auth

    anolilab/lunora

    Adds authentication to a Lunora app. An agent skill from anolilab/lunora.

    283 GitHub stars~2k tokensUpdated today
    Backend & APIsAuto-check passed
  • Better Auth

    giuseppe-trisciuoglio/developer-kit

    Provides Better Auth integration patterns for NestJS backend and Next.js frontend with Drizzle ORM and PostgreSQL.

    355 GitHub stars~2.4k tokensUpdated 27 days ago
    Backend & APIsAuto-check: notes
  • Better Auth

    einverne/dotfiles

    Guide for implementing Better Auth - a framework-agnostic authentication and authorization framework for TypeScript.

    121 GitHub stars~4k tokensUpdated 28 days ago
    Backend & APIsAuto-check: notes
  • Configuring Better Auth

    aiskillstore/marketplace

    Implement OAuth 2.1 / OIDC authentication using Better Auth with MCP assistance.

    430 GitHub stars~1.9k tokensUpdated today
    Backend & APIsAuto-check passed

More from vercel/vercel-plugin

All 38 skills in this repo
  • Deployments Cicd

    vercel/vercel-plugin

    Official

    Vercel deployment and CI/CD expert guidance. An agent skill from vercel/vercel-plugin.

    301 GitHub starsUsed in 1 repo~3k tokens
    Auto-check passed
  • Plugin Audit

    vercel/vercel-plugin

    Official

    Audit vercel-plugin performance on real-world projects. An agent skill from vercel/vercel-plugin.

    301 GitHub stars~739 tokensUpdated today
    Auto-check passed
  • Vercel CLI

    vercel/vercel-plugin

    Official

    Vercel CLI expert guidance. An agent skill from vercel/vercel-plugin.

    301 GitHub starsUsed in 1 repo~2.5k tokens
    Auto-check passed
  • AI Gateway

    vercel/vercel-plugin

    Official

    Vercel AI Gateway guidance for setup, model discovery, authentication, routing, fallbacks, virtual models, evaluation models, BYOK, budgets, spend reporting, observability, compatible APIs, and…

    301 GitHub stars~4.4k tokensUpdated today
    Auto-check: notes
  • Vercel Services

    vercel/vercel-plugin

    Official

    Configure and troubleshoot Vercel Services for multiple frontends and backends in one project.

    301 GitHub stars~3k tokensUpdated today
    Auto-check passed
  • Official

    Access and test Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection.

    301 GitHub stars~1.9k tokensUpdated today
    Auto-check: notes

Categories

Questions about Auth

What does Auth do?

Authentication integration guidance — Clerk (native Vercel Marketplace), Better Auth, Descope, and Auth0 setup for Next.js applications, plus Sign in with Vercel, Vercel Passport, and Vercel KMS. Auth is an agent skill from vercel/vercel-plugin, published by the product's own GitHub organization.js applications, plus Sign in with Vercel, Vercel Passport, and Vercel KMS.

When should I use Auth?

Auth fits situations like: implementing user authentication; protected routes; protecting deployments.

How do I install Auth in Claude Code?

Run `npx skills add vercel/vercel-plugin --skill auth -a claude-code`. Or copy the skill folder (skills/auth in vercel/vercel-plugin) into .claude/skills/auth in your project. Claude Code loads it when a task matches its description.

How do I install Auth in Codex?

Run `npx skills add vercel/vercel-plugin --skill auth -a codex`. Or copy the skill folder (skills/auth in vercel/vercel-plugin) into .agents/skills/auth in your project. Codex loads it when a task matches its description.

Can I use Auth in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add vercel/vercel-plugin --skill auth -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/auth, .gemini/skills/auth, .github/skills/auth and .opencode/skills/auth in your project.

What does Auth need to run?

Going by SKILL.md and its folder, Auth needs the command-line tools its instructions call (npx, vercel and npm) and credentials named CLERK_SECRET_KEY, NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY, BETTER_AUTH_SECRET and GITHUB_CLIENT_SECRET. Our summary lists: Node.js; A credential in CLERK_SECRET_KEY; A credential in NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY.

Does Auth access the network?

SKILL.md names 9 domains. In commands or code: vercel.com, mcp.better-auth.com, api.vercel.com and kms.vercel.com; the agent is likely to contact these when it follows the instructions. As links in the text: better-auth.com, clerk.com, github.com, docs.descope.com and auth0.com. This is read from the text; nothing was executed.

Is Auth safe to install?

Our automated static check of SKILL.md found notes only (mentions a .env file), nothing it rates as a warning. It is not a guarantee. Review the folder before installing.

What licence does Auth use?

Auth has a licence file (the repository's licence) that doesn't match a standard licence. Read it on GitHub before reusing the skill.

How many tokens does Auth use?

About 6.4k tokens (SKILL.md is roughly 25k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Auth?

Skills that share tags, products or a category with Auth: Deploy Vercel (johnku2011/boilerplates-with-ai-skills, 240 stars), Workos (usenotra/notra, 255 stars), Lunora Setup Auth (anolilab/lunora, 283 stars) and Better Auth (giuseppe-trisciuoglio/developer-kit, 355 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Auth?

vercel (a GitHub organization, an official publisher) maintains it in vercel/vercel-plugin, which has 301 GitHub stars. The repository holds 38 skills in this directory. The repository was last updated on October 6, 2026.

Source: vercel/vercel-plugin on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.