MCPInstall

auth0-quickstart

by auth0 OfficialAI & Agents

Use when adding Auth0 authentication to any app and unsure which SDK or skill to use. Detects the project's framework and routes to the right setup workflow — use this as the entry point even if the user just says "add login to my app" or "set up Auth0" without naming a framework.

Installs
2.7K
Last 24h
—
Trending rank
—
Security
Not audited

Install

Works with every agent the skills CLI supports.

npx skills add https://github.com/auth0/agent-skills --skill auth0-quickstart
  1. 01

    Install

    Run the command in your project. The CLI asks which agents to install for.

  2. 02

    Describe the task

    Ask your agent for something this skill covers. It loads auth0-quickstart automatically when relevant.

  3. 03

    Review the result

    The agent follows the SKILL.md steps, scripts and references bundled with the skill.

SKILL.md

The instructions your agent reads when the skill is triggered.

Auth0 Quickstart

Detect your framework and get started with Auth0 authentication.


Step 1: Detect Your Framework

Run this command to identify your framework:

# Check package.json dependencies (Node.js projects)
cat package.json | grep -E "react|next|vue|nuxt|angular|express|fastify|@nestjs|expo"

# Or check project files
ls -la | grep -E "angular.json|vue.config.js|next.config|app.json|Package.swift|build.gradle"

Framework Detection Table:

FrameworkDetectionSkill to Use
React (Vite/CRA)"react" in package.json, no Next.jsauth0-react
Next.js"next" in package.jsonauth0-nextjs
Vue.js"vue" in package.json, no Nuxtauth0-vue
Nuxt"nuxt" in package.jsonauth0-nuxt
Angularangular.json exists or "@angular/core"auth0-angular
Express.js"express" in package.jsonauth0-express
Fastify (web app)"fastify" in package.json, has @fastify/viewauth0-fastify
Fastify (API)"fastify" in package.json, no view engineauth0-fastify-api
React Native"react-native" or "expo" in package.jsonauth0-react-native
Flask"flask" in requirements.txt, Pipfile, or pyproject.tomlauth0-flask
Node.js API"express-oauth2-jwt-bearer" in package.jsonexpress-oauth2-jwt-bearer
ASP.NET Core web app*.csproj exists, has Views/ or Pages/ folderauth0-aspnetcore-authentication

Don't see your framework? See Tier 2 Frameworks below.


Step 2: Auth0 Account Setup

Install Auth0 CLI

macOS/Linux:

brew install auth0/auth0-cli/auth0

Windows:

scoop install auth0
# Or: choco install auth0-cli

Full installation guide: See CLI Reference

Login to Auth0

auth0 login

This opens your browser to authenticate with Auth0.


Step 3: Create Auth0 Application

Choose application type based on your framework:

Single Page Applications (React, Vue, Angular):

auth0 apps create --name "My App" --type spa \
  --auth-method None \
  --callbacks "http://localhost:3000" \
  --logout-urls "http://localhost:3000" \
  --metadata "created_by=agent_skills"

Regular Web Apps (Next.js, Nuxt, Express, Fastify):

auth0 apps create --name "My App" --type regular \
  --callbacks "http://localhost:3000/api/auth/callback" \
  --logout-urls "http://localhost:3000" \
  --metadata "created_by=agent_skills"

Native Apps (React Native):

auth0 apps create --name "My App" --type native \
  --auth-method None \
  --callbacks "myapp://callback" \
  --logout-urls "myapp://logout" \
  --metadata "created_by=agent_skills"

Get your credentials:

auth0 apps list          # Find your app
auth0 apps show <app-id> # Get client ID and secret

More CLI commands: See CLI Reference

Apply Branding (Optional)

After creating your application, apply branding so the Auth0 Universal Login page matches your app:

auth0 ul update \
  --accent "#YOUR_BRAND_COLOR" \
  --background "#YOUR_BACKGROUND_COLOR" \
  --logo "https://your-app.com/logo.png" \
  --favicon "https://your-app.com/favicon.ico"

This ensures users see your app's branding on the login screen instead of the default Auth0 branding. You can also use the acul-screen-generator skill for full custom login screen design.


Step 4: Use Framework-Specific Skill

Based on your framework detection, use the appropriate skill:

Tier 1 Frameworks (Dedicated Skills)

Frontend:

  • auth0-react - React SPAs (Vite, Create React App)
  • auth0-nextjs - Next.js (App Router and Pages Router)
  • auth0-vue - Vue.js 3 applications
  • auth0-nuxt - Nuxt 3/4 applications
  • auth0-angular - Angular 12+ applications

Backend:

  • auth0-express - Express.js web applications
  • auth0-flask - Flask web applications
  • auth0-fastify - Fastify web applications
  • auth0-fastify-api - Fastify API authentication
  • express-oauth2-jwt-bearer - Node.js/Express API JWT Bearer validation
  • auth0-aspnetcore-authentication - ASP.NET Core MVC, Razor Pages, Blazor Server web applications

Mobile:

  • auth0-react-native - React Native and Expo (iOS/Android)

Tier 2 Frameworks (Use Auth0 Docs)

Not yet available as separate skills. Use Auth0 documentation:

Frontend:

Backend:

Mobile:


Migration from Other Providers

Migrating from another auth provider? Use the auth0-migration skill.

The migration skill covers:

  • User export from Firebase, Cognito, Supabase, Clerk, etc.
  • Bulk import to Auth0
  • Code migration patterns (before/after examples)
  • JWT validation updates
  • Gradual migration strategies

Reference Documentation

Environment Variables

Framework-specific environment variable setup:

  • Vite, Create React App, Angular
  • Next.js, Express
  • React Native, Expo

Auth0 Concepts

Core concepts and troubleshooting:

  • Application Types
  • Key Terms
  • OAuth Flows
  • Troubleshooting
  • Security Best Practices

CLI Commands

Complete Auth0 CLI reference:

  • CLI Installation
  • Creating Applications
  • User Management
  • Testing & Debugging
  • Command Quick Reference

Common Mistakes

MistakeFix
Wrong application typeSPAs need "Single Page Application", server apps need "Regular Web Application", mobile needs "Native"
Callback URL not configuredAdd your app's callback URL to Allowed Callback URLs in Auth0 Dashboard
Using wrong credentialsClient Secret only needed for Regular Web Apps, not SPAs
Hardcoding credentials in codeAlways use environment variables, never commit secrets to git
Not testing locally firstSet up localhost URLs in Auth0 before deploying to production
Mixing application typesDon't use SPA SDK for server-side apps or vice versa

Related Skills

Core Integration

  • auth0-migration - Migrate from other auth providers

SDK Skills

  • auth0-spa-js - SPA integration
  • auth0-react - React SPA integration
  • auth0-nextjs - Next.js integration
  • auth0-vue - Vue.js integration
  • auth0-nuxt - Nuxt 3/4 integration
  • auth0-angular - Angular integration
  • auth0-express - Express.js integration
  • auth0-flask - Flask web app integration
  • auth0-fastify - Fastify web app integration
  • auth0-fastify-api - Fastify API integration
  • express-oauth2-jwt-bearer - Node.js/Express API JWT Bearer validation
  • auth0-react-native - React Native CLI (bare workflow) integration
  • auth0-expo - Expo (managed workflow) integration
  • auth0-android - Android (Kotlin/Java) integration
  • auth0-swift - iOS/macOS (Swift) integration
  • auth0-fastapi-api - FastAPI API authentication
  • auth0-aspnetcore-authentication - ASP.NET Core web app authentication
  • auth0-aspnetcore-api - ASP.NET Core API authentication

Advanced Features

  • auth0-mfa - Multi-Factor Authentication

References

FAQ

What does the auth0-quickstart skill do?

Use when adding Auth0 authentication to any app and unsure which SDK or skill to use. Detects the project's framework and routes to the right setup workflow — use this as the entry point even if the user just says "add login to my app" or "set up Auth0" without naming a framework.

How do I install auth0-quickstart?

Run npx skills add https://github.com/auth0/agent-skills --skill auth0-quickstart in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/auth0-quickstart/ (personal) or .claude/skills/auth0-quickstart/ (project).

Which AI agents can use auth0-quickstart?

Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.

Is auth0-quickstart safe to install?

No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.

Who maintains auth0-quickstart?

It is published by auth0 in auth0/agent-skills, and it is an official skill from the maker of the technology it covers. It has 2,657 recorded installs.

More from auth0/agent-skills

View all →

auth0

auth0/agent-skills

Use when adding, fixing, or improving how an app authenticates users or protects an API, or when using or configuring any Auth0 feature — signing users in and out, sessions and tokens, guarding routes and endpoints, MFA, passwordless passkey login (WebAuthn), SSO, Organizations, RBAC, custom domains, Universal Portals for hosted account and organization self-service, or Universal Login branding. Also use to audit a tenant's health, security, and plan fit (CheckMate), to debug why an auth flow fails, to migrate from another auth provider, or to set up the Vercel native integration. Covers any web, mobile, or backend framework and every Auth0 SDK, tool, and API. Use even if the user never mentions Auth0.

Backend & APIs5.3K installs

auth0-nextjs

auth0/agent-skills

Use when adding Auth0 login, logout, protected pages, or middleware to a Next.js application. Supports App Router and Pages Router with @auth0/nextjs-auth0 — use even if the user says "add login to my Next.js app" or "protect my Next.js routes".

OfficialFrontend & Design1.6K installs

auth0-react

auth0/agent-skills

Use when adding Auth0 login, logout, protected routes, or user sessions to a React SPA. Integrates @auth0/auth0-react — use even if the user says "add login to my React app" or "protect my React routes" without naming the SDK.

OfficialFrontend & Design1.5K installs

auth0-react-native

auth0/agent-skills

Use when adding Auth0 login, logout, or biometric auth to a bare React Native app (not Expo). Integrates react-native-auth0 with native deep linking.

OfficialFrontend & Design963 installs

auth0-express

auth0/agent-skills

Use when adding session-based login, logout, or protected routes to an Express.js web application. Integrates express-openid-connect — use even if the user says "add login to my Express app" or "protect my Express routes".

OfficialBackend & APIs816 installs

auth0-mfa

auth0/agent-skills

Use when adding MFA or step-up authentication to an app — requiring users to verify with a second factor (TOTP, SMS, passkey, push) for login or before a sensitive action. Also use for adaptive/risk-based MFA or compliance requirements like HIPAA or PCI-DSS, even if the user just says "add two-factor auth" or "require MFA before this action".

OfficialBackend & APIs811 installs

Popular ai & agents skills

View category →

google-agents-cli-publish

google/agents-cli

This skill should be used when the user wants to "publish an agent", "publish my ADK agent", "register an agent with Gemini", "publish to Gemini" (formerly Gemini Enterprise), or needs guidance on the agents-cli publish gemini command. Also use when the user wants to "manage agents in Agent Registry", "list/update/delete registered agents", or "register an MCP server". Covers ADK vs A2A registration modes, programmatic and interactive usage, flag reference, auto-detection from deployment metadata, Agent Registry fleet management, and troubleshooting. Part of the agents-cli skills suite. Do NOT use for deployment (use google-agents-cli-deploy).

AI & Agents513.9K installs

google-agents-cli-eval

google/agents-cli

This skill should be used when the user wants to "run an evaluation", "evaluate my agent", "evaluate my ADK agent", "write an eval dataset", "analyze eval failures", "compare eval results", "optimize agent", or needs guidance on the Gemini platform eval methodology and the Quality Flywheel. Covers eval metrics, dataset schema, LLM-as-judge scoring, and common failure causes. Applies to any agents-cli project, whatever framework the agent is written in. Do NOT use for agent API code patterns (ADK: use google-agents-cli-adk-code), deployment (use google-agents-cli-deploy), or project scaffolding (use google-agents-cli-scaffold).

AI & Agents513.5K installs

skill-creator

anthropics/skills

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.

OfficialAI & Agents416.4K installs

codex-pet

prime-skills/runcomfy-agent-skills

Codex Pet generator on RunComfy. Build a Codex-compatible Codex Pet spritesheet.webp + pet.json from a single reference image, drop it into ${CODEXHOME:-$HOME/.codex}/pets/ / and Codex picks it up as a custom Codex Pet next to the 8 built-ins. This skill produces the exact Codex Pet atlas Codex expects (1536x1872 PNG/WebP, 8 cols x 9 rows, 192x208 cells, 9 animation states — idle, running-right, running-left, waving, jumping, failed, waiting, running, review). Calls OpenAI GPT Image 2 edit ONCE via the local RunComfy CLI as runcomfy run openai/gpt-image-2/edit to produce a canonical Codex Pet pose, then assembles all 9 animation rows programmatically with ImageMagick micro-transforms — no Codex Pro, no $imagegen, no OPENAIAPIKEY required, only RUNCOMFYTOKEN. Triggers on "codex pet", "create codex pet", "make codex pet", "hatch codex pet", "/hatch image", "desktop pet codex", "codex pets", "spritesheet.webp", or any explicit ask to build a custom pet for OpenAI Codex.

AI & Agents402.1K installs

full-output-enforcement

leonxlnx/taste-skill

Overrides default LLM truncation behavior. Enforces complete code generation, bans placeholder patterns, and handles token-limit splits cleanly. Apply to any task requiring exhaustive, unabridged output.

AI & Agents401K installs

executing-plans

obra/superpowers

Use when executing an implementation plan in the current session as the implementer yourself — your human partner chose inline execution, or no subagent tool is available

AI & Agents245.7K installs