# wendy-aaa-interop

This skill explains how Wendy services divide identity, authorization, and credential issuance. Use it when changing integrations between the SaaS and self-hosted stacks.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · ★ 62
- Author: wendylabsinc
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/wendylabsinc/claude-skills/tree/HEAD/wendy-aaa-interop/SKILL.md
- Updated: 2026-10-22
- HTML: https://affpapa.org/en/nevibecode/skills/wendy-aaa-interop

## What it does

The skill maps responsibilities across `wendy-auth`, Wendy Cloud, `pki-core`, and `wendy-proxy`: which service identifies a principal, grants permissions, issues certificates, or enforces limits. It also covers two credential forms, signed artifacts that carry authority, and how `correlation_id` travels through service calls and audit records.

It draws a clear limit around the security guarantees. A compromised cloud service can raise the permissions of a legitimate principal, but only within the platform cap. That distinction matters when describing the threat model. Every interop change must also preserve the ability to run the Wendy stack without SaaS, or add that path where it is missing.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add wendylabsinc/claude-skills --skill wendy-aaa-interop -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/wendy-aaa-interop/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/wendy-aaa-interop/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add wendylabsinc/claude-skills --skill wendy-aaa-interop -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/wendy-aaa-interop/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add wendylabsinc/claude-skills --skill wendy-aaa-interop -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/wendy-aaa-interop/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install wendylabsinc/claude-skills wendy-aaa-interop
```

2. **Manually: put the files in place**
- File: `.github/skills/wendy-aaa-interop/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add wendylabsinc/claude-skills --skill wendy-aaa-interop -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/wendylabsinc/claude-skills --path wendy-aaa-interop
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/wendy-aaa-interop/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add wendylabsinc/claude-skills --skill wendy-aaa-interop -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/wendylabsinc/claude-skills/tree/HEAD/wendy-aaa-interop/SKILL.md

## When to use it
- assign authentication, authorization, and certificate issuance to the right services
- check which authority each credential form carries
- trace signed requests as they pass between services
- keep `correlation_id` consistent across calls and audit records
- preserve a self-hosted path during interop changes

## Example prompts
- Explain which Wendy services handle authentication, authorization, and certificate issuance.
- Check which credentials are used for direct operator access to a device.
- Review this interop change and show how it can run without SaaS.

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [wendylabsinc/claude-skills](https://affpapa.org/en/nevibecode/by/wendylabsinc/claude-skills.md) — 25 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md