Agent Skills

cyrus-setup-claude-auth

devopscyrusagents

Configure Claude Code authentication for Cyrus — API key, OAuth token, or third-party provider.

Install

npx skills add https://github.com/cyrusagents/cyrus --skill cyrus-setup-claude-auth
SKILL.md

CRITICAL: Never use Read, Edit, or Write tools on ~/.cyrus/.env or any file inside ~/.cyrus/. Use only Bash commands (grep, printf >>, etc.) to interact with env files — secrets must never be read into the conversation context.

Setup Claude Auth

Configures Claude Code credentials so Cyrus can run AI sessions.

Step 1: Check Existing Auth

Check if credentials are already configured:

grep -c -E '^(ANTHROPIC_API_KEY|CLAUDE_CODE_OAUTH_TOKEN)=' ~/.cyrus/.env 2>/dev/null || echo "0"

If the count is >= 1, inform the user:

Claude Code authentication is already configured. Skipping this step. To reconfigure, remove the existing key from ~/.cyrus/.env and re-run this skill.

Skip to completion.

Step 2: Choose Auth Method

Ask the user:

How would you like to authenticate Claude Code?

  1. Current account (easiest) — use the credentials from your active claude CLI session
  2. API Key — from console.anthropic.com
  3. Separate OAuth token — run claude setup-token to generate a token for a specific account
  4. Third-Party Provider — Vertex AI, AWS Bedrock, Azure, etc.

Step 3: Configure Credentials

CRITICAL: Secrets must NEVER appear in the conversation. Do not explore ~/.claude/ looking for credential files. Use only the methods below.

Detect the OS for the right clipboard command:

uname -s

Option 1: Current Account

Check if claude is authenticated on this machine:

claude auth status

If authenticated, instruct the user to run claude setup-token which will output a token.

To capture it safely, append a placeholder line to the env file, then open it in a GUI window so the user can paste the token:

grep -q '^CLAUDE_CODE_OAUTH_TOKEN=' ~/.cyrus/.env || echo 'CLAUDE_CODE_OAUTH_TOKEN=' >> ~/.cyrus/.env

Then open the file in a separate window — use whatever GUI editor is available:

# macOS: VS Code if available, otherwise TextEdit
code --new-window ~/.cyrus/.env 2>/dev/null || open -a TextEdit ~/.cyrus/.env

# Linux
code ~/.cyrus/.env 2>/dev/null || xdg-open ~/.cyrus/.env

Tell the user:

  1. Run claude setup-token in a separate terminal
  2. Copy the token it outputs
  3. I've opened ~/.cyrus/.env — find the CLAUDE_CODE_OAUTH_TOKEN= line
  4. Paste the token right after the = (no spaces, no newline)
  5. Save and close the file

Option 2: API Key

Instruct the user to copy their API key from the Anthropic Console, then provide the appropriate command:

macOS:

printf 'ANTHROPIC_API_KEY=%s\n' "$(pbpaste)" >> ~/.cyrus/.env

Linux:

printf 'ANTHROPIC_API_KEY=%s\n' "$(xclip -selection clipboard -o)" >> ~/.cyrus/.env

Universal fallback:

read -s -p "Paste your Anthropic API key: " val && printf 'ANTHROPIC_API_KEY=%s\n' "$val" >> ~/.cyrus/.env && echo " ✓ Saved"

Option 3: Separate OAuth Token

This is for when the user wants to generate a token for a different account than the one currently logged in (e.g., running claude setup-token on another machine).

Append the placeholder, then open the file for the user to paste:

grep -q '^CLAUDE_CODE_OAUTH_TOKEN=' ~/.cyrus/.env || echo 'CLAUDE_CODE_OAUTH_TOKEN=' >> ~/.cyrus/.env

# macOS
code --new-window ~/.cyrus/.env 2>/dev/null || open -a TextEdit ~/.cyrus/.env
# Linux
code ~/.cyrus/.env 2>/dev/null || xdg-open ~/.cyrus/.env

Tell the user:

  1. On the other machine, run claude setup-token
  2. Copy the token it outputs
  3. I've opened ~/.cyrus/.env — find CLAUDE_CODE_OAUTH_TOKEN= and paste the token after the =
  4. Save and close

Option 4: Third-Party Provider

Inform the user:

For third-party providers, you'll need to set provider-specific environment variables. See Third-Party Integrations for details.

Common configurations:

AWS Bedrock:

CLAUDE_CODE_USE_BEDROCK=1
AWS_REGION=us-east-1

Google Vertex AI:

CLAUDE_CODE_USE_VERTEX=1
CLOUD_ML_REGION=us-east5
ANTHROPIC_VERTEX_PROJECT_ID=your-project-id

Guide the user to add the appropriate variables to ~/.cyrus/.env using the clipboard-to-env pattern.

Step 4: Verify

After the user runs the command, verify the key was written:

grep -c -E '^(ANTHROPIC_API_KEY|CLAUDE_CODE_OAUTH_TOKEN|CLAUDE_CODE_USE_BEDROCK|CLAUDE_CODE_USE_VERTEX)=' ~/.cyrus/.env

If the count is 0, the credential was not saved. Ask the user to try again.

Completion

✓ Claude Code authentication configured.

Related skills

azure-diagnosticsmicrosoft608KDebug Azure production issues on Azure using AppLens, Azure Monitor, resource health, and safe triage. WHEN: debug production issues, troubleshoot app service, app service high CPU, app service deployment failure, troubleshoot container apps, troubleshoot functions, troubleshoot AKS, VM RDP, Linux SSH, VM black screen, can't connect to VM, reset VM password, NSG or firewall blocking, kubectl cannot connect, kube-system/CoreDNS failures, pod pending, crashloop, node not ready, upgrade failures, aazure-preparemicrosoft608KPrepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azazure-aimicrosoft608KUse for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.azure-deploymicrosoft607KExecute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: \"run azd up\", \"run azd deploy\", \"execute deployment\",

Search skills and MCP servers

Fuzzy search across 23,137 skills and servers