Skip to main content
affpapa.org
RU EN
skill Claude Code CX Codex Cursor

mtls-configuration — Claude Code skill: what it does, install

This skill configures mutual TLS for service-to-service communication. Use it for zero-trust networking, certificate management, or TLS debugging.

Install into Claude Code · Plugin marketplace All methods and platforms ↓ 
/plugin marketplace add wshobson/agents
/plugin install cloud-infrastructure@claude-code-workflows
Open on GitHub

What mtls-configuration does

The skill covers mTLS for protected communication between services. It explains the handshake through proxies or sidecars: both sides exchange certificates, verify them, and establish an encrypted channel. It also describes a certificate hierarchy with a Root CA, intermediate CAs, and workload certificates.

Its guidance includes moving from PERMISSIVE to STRICT, monitoring certificate expiry, rotating certificates and the CA, and logging TLS errors. Concrete templates and worked examples are kept in references/details.md. Multi-cluster communication is covered as well.

Install it when your project has service-to-service traffic that needs mTLS. It is a poor fit for an application without this communication model.

What it helps with

  • configure mTLS between services
  • design a CA hierarchy for workloads
  • move a service mesh from PERMISSIVE to STRICT
  • debug a TLS handshake failure
  • plan certificate and CA rotation

Example prompts for the agent

  • Configure mTLS for communication between services A and B through sidecar proxies.
  • Show how to move from PERMISSIVE to STRICT and verify the full certificate chain.
  • Investigate this TLS handshake error and suggest a certificate rotation plan.

How to install mtls-configuration

1Plugin marketplace

/plugin marketplace add wshobson/agents
/plugin install cloud-infrastructure@claude-code-workflows

This installs the whole cloud-infrastructure plugin with all its skills

2Skills CLI (Vercel)

npx skills add wshobson/agents --skill mtls-configuration -a claude-code

3Manually: put the files in place

~/.claude/skills/mtls-configuration/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/mtls-configuration/

From the same set213

The whole set →
typescript-advanced-types Seth Hobson Guides an agent through advanced TypeScript types, from generics to conditional and mapped types. Use it for typed libraries, API clients, or strict configuration objects. Claude Code CX Codex Cursor 92,169installs tailwind-design-system Seth Hobson Helps build design systems with Tailwind CSS v4, from theme tokens to component variants. Use it when a project needs shared UI patterns. Claude Code CX Codex Cursor 70,180installs brand-landingpage Travis D. Elliott This skill interviews you about the product and its visual direction, then builds a landing page through Stitch. Use it when there’s no established design yet. Claude Code CX Codex Cursor 39,476installs python-testing-patterns Seth Hobson This skill guides Python testing with pytest, fixtures and mocks. Use it when building a test suite or tracking down failing checks. Claude Code CX Codex Cursor 36,943installs python-performance-optimization Seth Hobson This skill profiles Python code to locate CPU and memory bottlenecks. Use it when an application responds slowly or consumes too many resources. Claude Code CX Codex Cursor 35,675installs nextjs-app-router-patterns Seth Hobson This skill covers Next.js App Router patterns for rendering, routing, and data fetching. Use it when starting an App Router project or moving from Pages Router. Claude Code CX Codex Cursor 32,529installs api-design-principles Seth Hobson Use this skill to plan or review REST and GraphQL APIs. It helps when writing a specification or setting API conventions for a team. Claude Code CX Codex Cursor 30,348installs code-review-excellence Seth Hobson This skill guides pull request reviews, catches logic and security issues, and helps teams give specific feedback. Use it for review standards or developer mentoring. Claude Code CX Codex Cursor 30,193installs

Similar

kyc-rules official anthropics Applies your firm's KYC/AML rules grid to a parsed onboarding record, assigns a risk rating, and routes the case — to doc request, enhanced due diligence, or decline. Works after kyc-doc-parse. Claude Code CX Codex Cursor +1 1,200installs git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. Claude Code 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. Claude Code CX Codex Cursor +1 56,300installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. Claude Code CX Codex Cursor +1 44,800installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. Claude Code CX Codex Cursor +1 52,200installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. Claude Code CX Codex Cursor +1 69,400installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

Questions about mtls-configuration

How do I install mtls-configuration in Claude Code?

Run npx skills add wshobson/agents --skill mtls-configuration -a claude-code. The skill file is placed at ~/.claude/skills/mtls-configuration/SKILL.md.

What does mtls-configuration do?

It guides mutual TLS setup for service-to-service communication, including the TLS handshake, certificate verification, CA hierarchy, and certificate rotation.

Which platforms support mtls-configuration?

The skill is listed for Claude Code, Codex, and Cursor. Templates and detailed worked examples are in references/details.md.

Source text

SKILL.md · MIT 
---
name: mtls-configuration
description: Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust networking, certificate management, or securing internal service communication.
---

# mTLS Configuration

Comprehensive guide to implementing mutual TLS for zero-trust service mesh communication.

## When to Use This Skill

- Implementing zero-trust networking
- Securing service-to-service communication
- Certificate rotation and management
- Debugging TLS handshake issues
- Compliance requirements (PCI-DSS, HIPAA)
- Multi-cluster secure communication

## Core Concepts

### 1. mTLS Flow

```
┌─────────┐                              ┌─────────┐
│ Service │                              │ Service │
│    A    │                              │    B    │
└────┬────┘                              └────┬────┘
     │                                        │
┌────┴────┐      TLS Handshake          ┌────┴────┐
│  Proxy  │◄───────────────────────────►│  Proxy  │
│(Sidecar)│  1. ClientHello             │(Sidecar)│
│         │  2. ServerHello + Cert      │         │
│         │  3. Client Cert             │         │
│         │  4. Verify Both Certs       │         │
│         │  5. Encrypted Channel       │         │
└─────────┘                              └─────────┘
```

### 2. Certificate Hierarchy

```
Root CA (Self-signed, long-lived)
    │
    ├── Intermediate CA (Cluster-level)
    │       │
    │       ├── Workload Cert (Service A)
    │       └── Workload Cert (Service B)
    │
    └── Intermediate CA (Multi-cluster)
            │
            └── Cross-cluster certs
```

## Templates and detailed worked examples

Full template library and detailed worked examples live in `references/details.md`. Read that file when you need the concrete templates.

## Best Practices

### Do's

- **Start with PERMISSIVE** - Migrate gradually to STRICT
- **Monitor certificate expiry** - Set up alerts
- **Use short-lived certs** - 24h or less for workloads
- **Rotate CA periodically** - Plan for CA rotation
- **Log TLS errors** - For debugging and audit

### Don'ts

- **Don't disable mTLS** - For convenience in production
- **Don't ignore cert expiry** - Automate rotation
- **Don't use self-signed certs** - Use proper CA hierarchy
- **Don't skip verification** - Verify the full chain

© Seth Hobson · MIT · wshobson/agents

See also

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor