scalekit-auth

What This Skill Does

The scalekit-auth skill provides a robust, centralized, and secure mechanism for OpenClaw AI agents to handle OAuth 2.0 authentication. Instead of storing sensitive access tokens locally on your machine—which is a significant security risk—this skill integrates directly with Scalekit. It acts as a middleware that fetches fresh, valid access tokens on-demand. When an agent needs to perform an action on your behalf (such as reading emails via Gmail or posting messages in Slack), the skill automatically handles the token refresh lifecycle, ensuring your session remains active without exposing credentials. It supports multiple service integrations, allowing a single agent to manage various platforms simultaneously.

Installation

Installation is straightforward via the ClawHub CLI. First, execute 'clawhub install scalekit-auth' to pull the dependency into your project. Navigate to the created directory and run 'pip3 install -r requirements.txt' to install the necessary SDKs. Next, you must configure your environment variables. Sign up at Scalekit, retrieve your Client ID, Client Secret, and Environment URL from the Developer dashboard, and populate the 'skills/scalekit-auth/.env' file. Once the connection is defined in the Scalekit dashboard, you simply register the service with your agent, and you are ready to authenticate via the generated login link.

Use Cases

This skill is perfect for automation workflows where agents act as personal assistants. For example, use it to enable an agent to monitor your Gmail inbox for specific order confirmations, summarize them, and send a notification to your Slack workspace. It is also ideal for developer workflows, such as having an agent automatically fetch repository details from GitHub or create issues based on conversation context, all while maintaining strict adherence to secure token handling practices.

Example Prompts

1. "Configure my Gmail connection in Scalekit. The connection name is gmail_prod_882 and my unique identifier is agent_assistant."
2. "Can you check my latest unread messages from Gmail and summarize them for me?"
3. "Please authenticate my Slack workspace using the Scalekit integration so I can start posting status updates."

Tips & Limitations

Always ensure that your '.env' file is added to your '.gitignore' to prevent accidental exposure of your Scalekit credentials. The authorization links generated by the skill have a very short expiration time (usually 60 seconds), so ensure you are ready to click and authorize as soon as the prompt appears. Remember that this skill does not store your long-term refresh tokens locally; it delegates that responsibility entirely to the Scalekit cloud service. If you encounter issues, verify that your Redirect URI matches the settings in the Scalekit dashboard exactly, as mismatches will prevent the OAuth flow from completing successfully.