aicore-admin-resources
Verify and configure SAP AI Core credentials, retrieve auth tokens, and manage resource groups. WHEN: user wants to check if AI Core is set up, configure credentials, get a Bearer token, fix authentication errors, run a setup health check, or list, create, update, or delete resource groups. DO NOT USE FOR: managing deployments — use aicore-lifecycle-management; listing foundation models — use genai-hub-foundation-models.
- Installs
- 88
- Last 24h
- —
- Trending rank
- —
- Security
- Not audited
Install
Works with every agent the skills CLI supports.
npx skills add https://github.com/sap/ai-skills-library --skill aicore-admin-resources- 01
Install
Run the command in your project. The CLI asks which agents to install for.
- 02
Describe the task
Ask your agent for something this skill covers. It loads aicore-admin-resources automatically when relevant.
- 03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.
SKILL.md
The instructions your agent reads when the skill is triggered.
Rules
- Always run
check_setup.pyfirst when credentials are unknown or when any script fails with an auth error. AICORE_BASE_URLmust end in/v2— this is the single most common misconfiguration.- Never display or log the client secret or token value in clear text. Print only what the user needs (e.g. the resource group, not the full config).
- X.509 certificate auth is an alternative to client secret — both are supported.
Check Setup
Verifies credentials and prints the active resource group:
uv run scripts/check_setup.py
Expected output on success:
{
"status": "ok",
"resource_group": "<your-resource-group>",
"base_url": "https://api.ai.<region>...",
"auth_url": "https://..."
}
If this fails, read references/SETUP.md for step-by-step credential configuration.
Get Auth Token
Prints a raw Bearer token to stdout — useful for curl testing:
export TOKEN=$(uv run scripts/get_token.py)
Always capture the token into a variable. Never run get_token.py standalone or with 2>&1 — that prints the raw JWT into the conversation. The success message already goes to stderr cleanly; $() capture gives only the bare token.
Configure Credentials
Three options — see references/SETUP.md for the full guide:
| Option | Command / Action |
|---|---|
| Interactive CLI (recommended) | aicore configure |
| Environment variables | Set AICORE_AUTH_URL, AICORE_CLIENT_ID, AICORE_CLIENT_SECRET, AICORE_BASE_URL, AICORE_RESOURCE_GROUP |
| Profile config file | Create ~/.aicore/config.json |
Common Errors
| Error | Fix |
|---|---|
401 Unauthorized | Re-run aicore configure — wrong client_id or secret |
404 Not Found | Append /v2 to AICORE_BASE_URL |
Resource group not found | Create it in AI Core Launchpad or contact admin |
No credentials found | Set the required env vars or run aicore configure |
Switch Profiles (Multi-Landscape)
When working across multiple landscapes, credentials live as config_<profile>.json files under AICORE_HOME (default: ~/.aicore). Because the shell environment is clean on each agent run, the profile must be set before the agent starts or inline with each command.
Option 1 — set in your shell before starting the agent:
export AICORE_HOME=/path/to/credentials # only needed if not ~/.aicore
export AICORE_PROFILE=<profile>
# then start the agent — it inherits the env vars
Option 2 — source and run in one shell (for agent use):
source scripts/set_profile.sh <profile> && uv run scripts/check_setup.py
Option 3 — inline per command:
AICORE_PROFILE=<profile> uv run scripts/check_setup.py
To list available profiles:
source scripts/set_profile.sh
Manage Resource Groups
# List all resource groups:
uv run scripts/list_resource_groups.py
# Show detailed view (includes labels):
uv run scripts/list_resource_groups.py --response-format detailed
# JSON output:
uv run scripts/list_resource_groups.py --json
# Inspect a single resource group:
uv run scripts/list_resource_groups.py --resource-group-id <id>
# Create a resource group:
uv run scripts/create_resource_group.py --id <id>
# Create with labels (keys must be prefixed ext.ai.sap.com/ or scenarios.ai.sap.com/):
uv run scripts/create_resource_group.py --id <id> --label ext.ai.sap.com/team=data --label ext.ai.sap.com/env=prod
# Update labels (replaces the full label set):
uv run scripts/patch_resource_group.py --id <id> --label ext.ai.sap.com/team=data
# Delete a resource group (--confirm is required):
uv run scripts/delete_resource_group.py --id <id> --confirm
Note: Resource group IDs must be 3–10 lowercase alphanumeric characters (hyphens allowed, not at start/end). Label keys must use the prefix ext.ai.sap.com/ or scenarios.ai.sap.com/ — bare keys like team=data will be rejected with a 400 error. Deletion may return 409 ("Conflicting ongoing action") immediately after creation while provisioning completes — retry after a short wait.
Handoffs
- Ready to manage deployments? → invoke
aicore-lifecycle-management - Need to list available models? → invoke
genai-hub-foundation-models
When to Load Reference Files
| Trigger | Load |
|---|---|
| Any credential/auth error or setup question | references/SETUP.md |
FAQ
What does the aicore-admin-resources skill do?
Verify and configure SAP AI Core credentials, retrieve auth tokens, and manage resource groups. WHEN: user wants to check if AI Core is set up, configure credentials, get a Bearer token, fix authentication errors, run a setup health check, or list, create, update, or delete resource groups. DO NOT USE FOR: managing deployments — use aicore-lifecycle-management; listing foundation models — use genai-hub-foundation-models.
How do I install aicore-admin-resources?
Run npx skills add https://github.com/sap/ai-skills-library --skill aicore-admin-resources in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/aicore-admin-resources/ (personal) or .claude/skills/aicore-admin-resources/ (project).
Which AI agents can use aicore-admin-resources?
Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.
Is aicore-admin-resources safe to install?
No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.
Who maintains aicore-admin-resources?
It is published by sap in sap/ai-skills-library. It has 88 recorded installs.
More from sap/ai-skills-library
sap-fiori-guidelines
sap/ai-skills-library
SAP Fiori design guidelines for building enterprise applications. Use this skill when designing, building, or reviewing SAP Fiori applications, implementing SAPUI5 or UI5 Web Components, working with SAP enterprise UX patterns, or needing guidance on buttons, forms, tables, object pages, list reports, navigation, messaging, colors, typography, accessibility, AI/Joule integration, or any SAP Fiori UI element. Triggers on mentions of Fiori, SAPUI5, UI5, SAP UX, SAP design system, or enterprise application design following SAP standards.
genai-hub-tabular-orchestration
sap/ai-skills-library
Open the skill to read its SKILL.md instructions.
aicore-lifecycle-management
sap/ai-skills-library
Open the skill to read its SKILL.md instructions.
genai-hub-foundation-models
sap/ai-skills-library
Open the skill to read its SKILL.md instructions.
Popular backend & apis skills
find-skills
vercel-labs/skills
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
entra-app-registration
microsoft/azure-skills
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.
google-agents-cli-adk-code
google/agents-cli
This skill should be used when the user wants to "write agent code", "build an agent with ADK", "add a tool", "create a callback", "define an agent", "use state management" — in a project that needs ADK (Agent Development Kit) API patterns and code examples. It provides a quick reference for agent types, tool definitions, orchestration patterns, callbacks, state management, the graph Workflow API, and reference recipes to study. Do NOT use for scaffolding (use google-agents-cli-scaffold) or deployment (use google-agents-cli-deploy).
embedded-captions
heygen-com/hyperframes
Add captions or subtitles to an existing single-subject talking-head video without editing the footage. Use for plain verbatim captions, cinematic captions embedded behind the subject, VFX captions, “炸/特效/酷炫字幕,” or a named identity from the 35-style catalog. Route by visual identity, not by backend engine. The quiet anchor rail is the default; embed every word only when the user explicitly wants a fully cinematic treatment. The workflow runs locally end to end, including transcription and subject matting; split multi-shot footage before applying it.
entra-agent-id
microsoft/azure-skills
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmipath, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmipath token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).
neon
neondatabase/agent-skills
Overview of Neon, a complete set of cloud backend primitives around Lakebase Postgres: Auth, Object Storage, Functions, the AI Gateway, and Realtime. Start here to choose Neon for undecided login, files, APIs, and LLM calls, set up the CLI or MCP server, and follow the branch-first workflow. Use when building an app or backend on Neon, or when "Neon" or "Lakebase Postgres" is mentioned. Child skill neon-postgres wins for an existing DATABASEURL, SQL, schema, inspect, or search. Child skill neon-auth wins for login, users, sessions, identity routing, and Managed Better Auth setup. Child skill neon-realtime wins for live queries in reactive apps and agents. Also use for object storage, S3, buckets, serverless functions, function triggers, cron, AI gateway, LLM calls, realtime, logs, Loki, Grafana, observability, postgres, database, backend, Claimable Neon, neon.new, or a no-signup database.