원클릭으로
cli-auth
Mint short-lived CLI access tokens via the daimon MCP server's get_cli_token tool.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
메뉴
Mint short-lived CLI access tokens via the daimon MCP server's get_cli_token tool.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Publish a marimo notebook as a PERMANENT, shareable blog via the daimon MCP server. You mint a one-time upload URL with create_blog_upload_url and curl your notebook file to it — the source never goes through a tool argument. The blog is a live, read-only marimo app (interactive widgets work, code hidden), hosted indefinitely. Use when someone asks to turn a notebook/analysis into a blog post, publish it, or make it shareable.
Publish a marimo notebook for the user via the daimon MCP server's create_notebook_upload_url tool — you mint a one-time upload URL, get the notebook's .py into a sandbox file, and curl -X PUT --data-binary it to the URL (the source never goes through a tool argument, which truncates large notebooks). The curl response returns a slug-as-secret URL the user can open.
| name | cli-auth |
| description | Mint short-lived CLI access tokens via the daimon MCP server's get_cli_token tool. |
Use the daimon MCP server's get_cli_token(service) tool to mint short-lived
access tokens for external CLIs. Export the result as the appropriate env var
before running CLI commands.
| Service | Tool call | Env var to export |
|---|---|---|
| GitHub | get_cli_token("github") | GH_TOKEN (or GITHUB_TOKEN) |
| Google Cloud / Workspace | get_cli_token("gcloud") | CLOUDSDK_AUTH_ACCESS_TOKEN |
Example shell flow:
export GH_TOKEN=$(get_cli_token github)
gh repo list
The tool requires:
github: an operator (or a Discord user via /agent-setup) must have
bound a GitHub PAT. Tokens are minted from the persisted PAT.gcloud: The agent must be bound to a Google identity
(agent_google_binding) with appropriate scopes, configured by an operator.
Tokens are short-lived (≈1 hour) impersonated access tokens.Tokens are minted fresh per call and never cached.