Stytch agent skills for Claude Code, Cursor and RevampKey

5 ready-made playbooks that teach an AI agent how to do real Stytch work: which tools to call, what to check first, and when to stop and ask you.

Download RevampKey, free I have it: connect Stytch

Connect Stytch once and all 5 skills install themselves and stay up to date. Mac, Windows and Linux.

All 5 Stytch skills

Each skill is one job. You ask in plain words and the agent loads the skill that matches, then follows its steps.

Start hereAsks before writing21 Stytch tools

Use the Stytch connector safely

Guides your AI assistant through confirming the right Stytch project and environment, reading before writing, and asking your approval before any create, update or delete.

Use it when

Connecting Stytch to an AI assistant for the first time
Checking which Stytch projects and redirect URLs are set up before a change
Recovering from a sign-in or permission error in the Stytch connector

Tools it uses

listProjects
getAllRedirectURLs
getAllPublicTokens
getPasswordStrengthConfig
getConsumerSDKConfig
getB2BSDKConfig
getAllEmailTemplates
createProject
createRedirectURL
createPublicToken
createSecret
createEmailTemplate
updateRedirectURL
updateEmailTemplate
setPasswordStrengthConfig
updateConsumerSDKConfig
updateB2BSDKConfig
deleteRedirectURL
deletePublicToken
deleteSecret
deleteEmailTemplate

Example

Before I change anything, show me which Stytch project and environment you are working in, and list the redirect URLs on the one I pick.

You have two projects: Acme Web (live) and Acme Staging (test). I'm using Acme Web in live, which is the one you named. It has 3 redirect URLs. I'll propose any change to them as a draft and wait for your explicit yes before I touch anything.

Use in RevampKeyRead the full skill →

Asks before writing10 Stytch tools

Review your Stytch auth security baseline with AI

Reviews your Stytch password policy, SDK settings and secret and token lifecycle against a security baseline, returning prioritised recommendations. It proposes changes and waits for your approval before applying any.

Use it when

Before launching a consumer or B2B app to production
After a suspected secret leak or a team member leaving
When tightening password rules or session settings

Tools it uses

getConsumerSDKConfig
updateConsumerSDKConfig
getB2BSDKConfig
updateB2BSDKConfig
getPasswordStrengthConfig
setPasswordStrengthConfig
getAllPublicTokens
deletePublicToken
deleteSecret
createSecret

Example

Review the security of my live Stytch project for our consumer app and tell me what to fix first.

Reviewed the live project's password policy, consumer SDK settings and public tokens. Two items to act on now: a minimum password length below the baseline, and an allowed origin that still points to a development host. Three tokens look unused and need your confirmation before deletion. Nothing has been changed; the proposed updates are waiting for your approval.

Use in RevampKeyRead the full skill →

Asks before writing5 Stytch tools

Keep Stytch email templates in version control

Compares your repository's Stytch email templates with the live workspace, shows drift, and drafts updates. It asks for approval before uploading, updating or deleting any template.

Use it when

Your email templates live in git and you want them to match Stytch
Someone edited a template in the dashboard and you need to know before overwriting it
You are about to publish template changes across environments and want a checked diff first

Tools it uses

listProjects
getAllEmailTemplates
createEmailTemplate
updateEmailTemplate
deleteEmailTemplate

Example

Compare my repo's Stytch email templates with the live test project and tell me what's different.

I found 4 templates in scope. Three are identical. The magic link template in your repo is newer than the live copy, so I've drafted an update and will apply it only after you approve. The password reset template has changed on both sides since the last sync, so I've stopped and shown both versions for you to choose. Nothing has been uploaded yet.

Use in RevampKeyRead the full skill →

Asks before writing17 Stytch tools

Audit your Stytch project setup with AI

Reviews your Stytch projects, public tokens, redirect URLs and SDK configs for leftovers and risky settings before you go live. It only reads and reports, and it never changes anything.

Use it when

Before launching a Stytch-backed app to production
After a team member leaves and you want to check what they left behind
When you suspect localhost or wildcard redirect URLs are still live

Tools it uses

listProjects
getAllRedirectURLs
getAllPublicTokens
getConsumerSDKConfig
getB2BSDKConfig
getPasswordStrengthConfig
createSecret
deleteSecret
createProject
createRedirectURL
updateRedirectURL
deleteRedirectURL
createPublicToken
deletePublicToken
setPasswordStrengthConfig
updateConsumerSDKConfig
updateB2BSDKConfig

Example

Audit my Stytch live project and tell me what's risky before we launch.

Live project 'acme-prod' has 2 high-risk findings and 1 medium. Two redirect URLs point at localhost:3000, and one is a wildcard that matches every path on the app domain. One public token appears unused in current config, so confirm before removing it. The consumer SDK has magic links enabled but the app only uses OAuth. No changes made.

Use in RevampKeyRead the full skill →

Asks before writing8 Stytch tools

Migrate Stytch redirect URLs and public tokens with AI

Plans a domain or callback change across Stytch redirect URLs and public tokens so sign-in keeps working through cutover. It shows every create, update or delete as a table and waits for your approval before changing anything.

Use it when

You are moving your app to a new domain and need the callback URLs updated
You are renaming a login callback path without breaking active users
You want to retire old redirect URLs safely after a launch

Tools it uses

listProjects
getAllRedirectURLs
getAllPublicTokens
createRedirectURL
deleteRedirectURL
updateRedirectURL
createPublicToken
deletePublicToken

Example

We're moving from auth.oldapp.com to app.newapp.com next Tuesday. Plan the redirect URL and public token changes so sign-in doesn't break during cutover.

Your production project has 9 redirect URLs and 3 public tokens. Four redirect URLs point at the old domain. My plan adds the 4 new URLs first, keeps the old ones until your app deploy is confirmed, then retires them after your approval. I have not changed anything yet. Here is the change table for your review.

Use in RevampKeyRead the full skill →

Get all 5 without copying a file

RevampKey adds the skills when you connect Stytch, updates them for you and removes them when you disconnect.

Download RevampKey

How Stytch skills work

Connect Stytch
The Stytch MCP server gives the agent its tools.
Ask in plain words
“Review the security of my live Stytch project for our consumer app and tell me what to fix first.” Each SKILL.md says when it applies, so only the one that fits is loaded.
Approve any change
The agent calls the tools in order, checks its work, and shows you any change before it makes it.

How to install Stytch skills

In RevampKey the skills install themselves when you connect Stytch. In other tools each skill is one folder with a SKILL.md file, and you also need the Stytch MCP server connected there.

About 1 minute · nothing to copy

Download RevampKey for Mac, Windows or Linux and sign in.
Open Connectors and connect Stytch. All 5 skills come with it and stay up to date; they go away when you remove the connector.
Ask in plain language, for example “Review the security of my live Stytch project for our consumer app and tell me what to fix first.”
Download RevampKeyConnect Stytch · 1 click
Get RevampKey to connect Stytch
RevampKey is a free desktop app for Mac, Windows and Linux. Install it, sign in, and Stytch is one click away with its skills already attached.
Download RevampKey
Not now? Use the skills in your current tool
for s in essentials auth-security-baseline email-template-version-control project-setup-audit redirect-url-migration; do curl -fsSL --create-dirs -o .claude/skills/stytch-$s/SKILL.md https://revampkey.com/marketplace/stytch/skills/$s/SKILL.md done
Other tools

Into this project’s .claude/skills folder

Connect the Stytch MCP server in Claude Code.

Run this in your project folder to add all 5 skills:

for s in essentials auth-security-baseline email-template-version-control project-setup-audit redirect-url-migration; do
  curl -fsSL --create-dirs -o .claude/skills/stytch-$s/SKILL.md https://revampkey.com/marketplace/stytch/skills/$s/SKILL.md
done

Ask in plain language, for example “Review the security of my live Stytch project for our consumer app and tell me what to fix first.”

Into the shared .agents/skills folder

Connect the Stytch MCP server in Cursor.

Run this in your project folder to add all 5 skills:

for s in essentials auth-security-baseline email-template-version-control project-setup-audit redirect-url-migration; do
  curl -fsSL --create-dirs -o .agents/skills/stytch-$s/SKILL.md https://revampkey.com/marketplace/stytch/skills/$s/SKILL.md
done

Ask in plain language, for example “Review the security of my live Stytch project for our consumer app and tell me what to fix first.”

Into the shared .agents/skills folder

Connect the Stytch MCP server in Codex.

Run this in your project folder to add all 5 skills:

for s in essentials auth-security-baseline email-template-version-control project-setup-audit redirect-url-migration; do
  curl -fsSL --create-dirs -o .agents/skills/stytch-$s/SKILL.md https://revampkey.com/marketplace/stytch/skills/$s/SKILL.md
done

Ask in plain language, for example “Review the security of my live Stytch project for our consumer app and tell me what to fix first.”

Into the shared .agents/skills folder

Connect the Stytch MCP server in VS Code.

Run this in your project folder to add all 5 skills:

for s in essentials auth-security-baseline email-template-version-control project-setup-audit redirect-url-migration; do
  curl -fsSL --create-dirs -o .agents/skills/stytch-$s/SKILL.md https://revampkey.com/marketplace/stytch/skills/$s/SKILL.md
done

Ask in plain language, for example “Review the security of my live Stytch project for our consumer app and tell me what to fix first.”

RevampKey or copy the files?

In RevampKey

One click when you connect Stytch
Updated for you when a skill improves
Removed when you disconnect
The MCP server is set up for you
800+ other connectors, same way

Download free

Copy into your project

One command per project
Run it again to get updates
You connect the Stytch MCP server yourself
Works in Claude Code, Cursor, Codex and VS Code

See the command

Stytch skills FAQ

What is a Stytch agent skill?

A SKILL.md file: a short playbook an AI agent loads when your request matches it. Each Stytch skill describes one job, which Stytch tools to use in which order, what to check first and when to stop and ask you.

Do the Stytch skills change anything on their own?

The others tell the agent to show you the change and wait for a yes before it creates, edits or deletes anything in Stytch.

Which tools can use these skills?

Any agent that reads the open Agent Skills format: Claude Code, Cursor, Codex, VS Code with Copilot and RevampKey. In RevampKey they are attached when you connect Stytch; elsewhere you copy the folders into your project or skills directory.

Do I need the Stytch MCP server too?

Yes. The skills tell the agent how to do the work; the Stytch MCP server gives it the tools to do it. The Stytch MCP setup guide covers every client.

Stytch MCP server setup · This page as Markdown

Put Stytch’s best workflows in your agent

Download RevampKey, connect Stytch and ask your first question in about a minute.

Download RevampKey Connect Stytch · 1 click

All 5 Stytch skills

Use the Stytch connector safely

Use it when

Tools it uses

Review your Stytch auth security baseline with AI

Use it when

Tools it uses

Keep Stytch email templates in version control

Use it when

Tools it uses

Audit your Stytch project setup with AI

Use it when

Tools it uses

Migrate Stytch redirect URLs and public tokens with AI

Use it when

Tools it uses

Get all 5 without copying a file

How Stytch skills work

How to install Stytch skills

RevampKey or copy the files?

In RevampKey

Copy into your project

Stytch skills FAQ

Put Stytch’s best workflows in your agent

Skills for related tools