Skip to main content
affpapa.org
RU EN
skill CX Codex

sumsub-api-auth — Claude Code skill: what it does, install

This skill signs Sumsub API requests with HMAC-SHA256 and helps diagnose 401 errors. Use it for integration work or one-off request checks.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add sumsub/agent-skills --skill sumsub-api-auth -a claude-code
Open on GitHub

What sumsub-api-auth does

The skill covers Sumsub API authentication with an App Token and secret key. It builds X-App-Token, X-App-Access-Ts, and X-App-Access-Sig, using the HTTP method, request path with its query string, and the exact request body for the HMAC-SHA256 signature.

It includes scripts/sumsub_sign.py, which prints authentication headers without making a network call, and scripts/sumsub_curl.sh, which signs and sends a request with curl. The guidance also checks common causes of 401, such as an incorrect timestamp, method, path, or body bytes. A sandbox App Token and secret key are required; production credentials must not be used with Claude.

What it helps with

  • sign a request to the Sumsub API
  • debug a 401 Unauthorized response
  • check authentication headers with curl
  • create a signature for JSON or multipart data

Example prompts for the agent

  • Sign a GET request to /resources/applicants/-/count and show the required headers.
  • Find the cause of the 401 Invalid signature response from api.sumsub.com.
  • Create a signing example for a POST request with query parameters and a JSON body.

How to install sumsub-api-auth

1Skills CLI (Vercel)

npx skills add sumsub/agent-skills --skill sumsub-api-auth -a claude-code

2Manually: put the files in place

~/.claude/skills/sumsub-api-auth/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/sumsub-api-auth/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about sumsub-api-auth

How do I install sumsub-api-auth in Claude Code?

Run npx skills add sumsub/agent-skills --skill sumsub-api-auth -a claude-code. The installed skill file is then available at ~/.claude/skills/sumsub-api-auth/SKILL.md.

What does sumsub-api-auth do?

It helps authenticate Sumsub API calls with an App Token, secret key, and HMAC-SHA256. The skill prepares the three auth headers and investigates common 401 causes.

What credentials does the skill require?

Use a sandbox SUMSUB_APP_TOKEN together with SUMSUB_SECRET_KEY. Store them in .env or .claude/settings.local.json; requests must use HTTPS.

Similar skills

All skills for Backend and APIs →
api-auth-key-management Samuel Berthe Design provider-side API key architecture with checksum prefixes, hashed storage, and zero-downtime rotation. Helpful when managing machine credentials and audit compliance. CX Codex +1 7,800installs api-auth-and-jwt-abuse yaklang A playbook for probing bearer tokens, API keys and claim trust. Useful when an API leans on JWT or request headers for identity. CX Codex +1 3,800installs twilio-security-api-auth official Twilio Walks you through Twilio's four auth methods and helps you wire up the right one before shipping API calls to production. CX Codex GP ChatGPT ★ 7,604repo stars better-auth-best-practices better-auth This skill guides Better Auth setup in TypeScript projects, covering the server, client, database, sessions, and plugins for email/password or OAuth flows. CX Codex +1 126,700installs better-auth-security-best-practices better-auth Hardens Better Auth deployments by configuring rate limits, CSRF rules, session caching, and OAuth token encryption. CX Codex +1 48,000installs convex-auth convex This skill adds passkey, OAuth, or password sign-in to a Convex app. Use it when auth needs to reach the server config, client hooks, and route guards. CX Codex +1 36,500installs

From the same set25

sumsub-manage-webhooks Handles Sumsub webhook subscriptions inside sandbox environments. It lets agents inspect and configure verification event triggers via shell scripts. CX Codex +1 1,200installs sumsub-create-poa-preset Creates and updates Sumsub Proof-of-Address presets through the API. Use it to define accepted documents, validity rules, and address checks. CX Codex +1 1,200installs sumsub-check-skills-version Compares your installed Sumsub agent-skills package against the published version and warns you when the skills are stale. Runs before Sumsub work. CX Codex +1 1,200installs sumsub-api-generic Finds and tests Sumsub API endpoints using an OpenAPI specification. Designed for developer tasks not handled by dedicated workflow skills. CX Codex +1 1,200installs sumsub-check-permissions Checks active Sumsub tenant permissions before executing write operations. It keeps agents from posting unsupported verification settings. CX Codex +1 1,200installs sumsub-conformance Walks a live Sumsub configuration and answers one question per requirement: is it collected, scored, enforced? Flags the items that are gathered and scored but never acted on. CX Codex +1 994installs sumsub-create-kyt-rules Configures Sumsub KYT transaction monitoring rules, risk tags, and scoring thresholds via sandbox API calls. Built for automated compliance setups. CX Codex +1 991installs sumsub-integrate-dint-websdk Adds Sumsub Device Intelligence to an existing WebSDK flow. Use it to bind device signals to an applicant and read device risk labels. CX Codex +1 980installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor