| name | aphrody-credentials |
| description | Before calling aphrody MCP tools that need auth, classify credentials as direct token (OAuth/PAT/bearer/service account) vs paid metered API key. Prefer Grok auth, direct tokens, and keyless docs paths. Use when using aphrody MCP, .env secrets, Context7, Gemini, voice, or Adobe tools.
|
| version | 1.0.0 |
| author | awesome-grok-build |
aphrody-credentials
Run before aphrody MCP calls that might incur cost.
Audit command
bash scripts/aphrody-env-audit.sh
Preference order
- Grok session auth —
~/.grok/auth.json / browser login; do not duplicate with XAI_API_KEY in .env unless headless CI requires it.
- Direct tokens —
X_BEARER_TOKEN, X_ACCESS_TOKEN+secret, GITHUB_PERSONAL_ACCESS_TOKEN, OAuth client creds.
- Service account file —
GOOGLE_APPLICATION_CREDENTIALS path to JSON (GCP ADC), not GOOGLE_API_KEY when both exist.
- Free services —
CONTEXT7_API_KEY is gratuit (Context7); use context7_* and docs_auto_search with .env loaded.
- Keyless locals —
microsoft_docs_*, re_*, universal_web_fetch, coding_style_guide (no extra billing).
- Paid metered —
ELEVENLABS_*, OPENAI_*, GEMINI_*/GOOGLE_API_KEY, Firefly/Photoshop — confirm before use.
Always keep ~/aphrody/.env sourced in the shell (~/.bashrc) for aphrody MCP.
Quick classification
| Pattern | Kind |
|---|
*_TOKEN, *_BEARER, *_PAT, OAuth secrets | direct_token |
GOOGLE_APPLICATION_CREDENTIALS | service_account |
CONTEXT7_API_KEY | free (Context7 — gratuit) |
*_API_KEY (Gemini, Google, ElevenLabs, OpenAI, xAI) | paid_api — verify |
MCP tool routing (no paid key path)
| Need | Tool |
|---|
| Microsoft / Azure / .NET | mcp__aphrody__microsoft_docs_search |
| General library docs | mcp__aphrody__docs_auto_search, mcp__aphrody__context7_query_docs |
| Public URL | mcp__aphrody__universal_web_fetch |
| Binary RE | mcp__aphrody__re_triage |
Keep aphrody plugin fully enabled; gate usage by credential class, not by disabling the plugin.
