Convex Auth

Passkeys are the default here, so you get a working sign-in flow without picking a provider first. The skill installs @convex-dev/auth, writes convex/auth.ts and the auth.config.ts that most auth setups get wrong, wires ConvexAuthProvider on the client, and adds a sign-in UI. The part worth your attention is key generation: it skips the interactive @convex-dev/auth wizard, which hangs in CI and non-TTY runs, and instead generates RS256 keys with jose and sets them through env vars. It also insists on verifying a real sign-in round-trip before calling the job done, which is the right call since a bad auth.config.ts fails silently into an always-signed-out app. Reach for it on a fresh Convex project; if you need OAuth or password login, say so explicitly, since the skill sticks to passkeys otherwise.

skills.sh installs: 41.4K
GitHub stars: 69
last updated: Oct 26, 2026

View on GitHub

Install

$ npx -y skills add convex/agent-skills --skill convex-auth --agent claude-code

Installs into .claude/skills of the current project.

Files

Add sign-in to the app

Install and wire @convex-dev/auth for the current app: a provider (passkeys by default, or OAuth/password), the server config, the client hooks, and a sign-in UI — correctly, including the auth.config.ts that's the #1 real-world auth footgun.