Heartwood Auth
Authenticates users against legacy systems using biometrics and contextual data, minimizing password reliance.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add heartwood-auth npx -- -y @trustedskills/heartwood-auth
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"heartwood-auth": {
"command": "npx",
"args": [
"-y",
"@trustedskills/heartwood-auth"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The Heartwood Auth skill enables AI agents to integrate authentication into Grove applications, protecting routes and validating user sessions. It leverages Grove's centralized authentication service (Heartwood), powered by Better Auth, offering features like OAuth sign-in with Google, magic links via Resend, passkeys for passwordless authentication, and cross-subdomain single sign-on. The skill provides multiple integration options to suit both new and existing applications within the .grove.place domain.
When to use it
This skill is useful in these scenarios:
- Adding authentication to a new Grove application.
- Protecting administrative routes within an application.
- Validating user sessions after login.
- Setting up OAuth sign-in using Google.
- Integrating with the existing Heartwood (GroveAuth) infrastructure.
Key capabilities
- OAuth Providers: Google
- Magic Links: Click-to-login emails via Resend
- Passkeys: WebAuthn passwordless authentication
- KV-Cached Sessions: Fast session validation (sub-100ms)
- Cross-Subdomain SSO: Single sign-on across all
.grove.placesubdomains - Multiple integration options: Better Auth Client, Cookie-Based SSO, and Legacy Token Flow
Example prompts
Here are some example prompts for an AI agent using the Heartwood Auth skill:
- "Authenticate this user with Google OAuth."
- "Validate the current session token."
- "Sign out the logged-in user."
- "Generate a magic link for passwordless login."
Tips & gotchas
- For new integrations, using the Better Auth Client (as shown in the source code) is recommended.
- Apps on
.grove.placesubdomains can leverage automatic session handling via cookies. - Existing integrations might need to use the Legacy Token Flow for backwards compatibility.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.