Menü
Mint short-lived CLI access tokens via the daimon MCP server's get_cli_token tool.
Mit Codex oder Claude installieren Kopieren Sie diesen Prompt, fügen Sie ihn in Codex, Claude oder einen anderen Assistant ein und lassen Sie die Skill-Seite prüfen und installieren.
Basierend auf der SOC-Berufsklassifikation
Publish a marimo notebook as a PERMANENT, shareable blog via the daimon MCP server. You mint a one-time upload URL with create_blog_upload_url and curl your notebook file to it — the source never goes through a tool argument. The blog is a live, read-only marimo app (interactive widgets work, code hidden), hosted indefinitely. Use when someone asks to turn a notebook/analysis into a blog post, publish it, or make it shareable.
Publish a marimo notebook for the user via the daimon MCP server's create_notebook_upload_url tool — you mint a one-time upload URL, get the notebook's .py into a sandbox file, and curl -X PUT --data-binary it to the URL (the source never goes through a tool argument, which truncates large notebooks). The curl response returns a slug-as-secret URL the user can open.
| name | cli-auth |
| description | Mint short-lived CLI access tokens via the daimon MCP server's get_cli_token tool. |
Use the daimon MCP server's get_cli_token(service) tool to mint short-lived
access tokens for external CLIs. Export the result as the appropriate env var
before running CLI commands.
| Service | Tool call | Env var to export |
|---|---|---|
| GitHub | get_cli_token("github") | GH_TOKEN (or GITHUB_TOKEN) |
| Google Cloud / Workspace | get_cli_token("gcloud") | CLOUDSDK_AUTH_ACCESS_TOKEN |
Example shell flow:
export GH_TOKEN=$(get_cli_token github)
gh repo list
The tool requires:
github: an operator (or a Discord user via /agent-setup) must have
bound a GitHub PAT. Tokens are minted from the persisted PAT.gcloud: The agent must be bound to a Google identity
(agent_google_binding) with appropriate scopes, configured by an operator.
Tokens are short-lived (≈1 hour) impersonated access tokens.Tokens are minted fresh per call and never cached.