Duende Agent Skills

Partner, reviewed

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

Plugin · by duendesoftware · runs in Claude Code, Cowork, claude.ai · 24 skills, 2 agents · listed 2026-03-31

Claude Code

claude plugin install duende-agent-skills

Source

Skills (24)

Skill aspnetcore-authentication

ASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication, authentication schemes, challenge/forbid flows, and external identity provider…

Any agent
```
npx skills add duendesoftware/duende-skills --skill aspnetcore-authentication
```
Skill aspnetcore-authorization

ASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations, scope-based authorization for APIs, authorization middleware configuration, and…

Any agent
```
npx skills add duendesoftware/duende-skills --skill aspnetcore-authorization
```
Skill claims-authorization

Claims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation, claim type mapping, token claim filtering, extension grant validators, and…

Any agent
```
npx skills add duendesoftware/duende-skills --skill claims-authorization
```
Skill duende-bff

Duende BFF (Backend for Frontend) security framework for securing SPAs. Covers session management, API endpoint proxying, token management, anti-forgery protection, and integration with…

Any agent
```
npx skills add duendesoftware/duende-skills --skill duende-bff
```
Skill identity-security-hardening

Security hardening for Duende IdentityServer deployments including signing key rotation, HTTPS enforcement, CORS configuration, CSP headers, rate limiting, token lifetime tuning, and security audit…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identity-security-hardening
```
Skill identity-testing-patterns

Testing patterns for IdentityServer-based systems including integration testing with WebApplicationFactory, mock token issuance, test authority configuration, protocol response validation, and…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identity-testing-patterns
```
Skill identityserver-api-protection

Protecting APIs with Duende IdentityServer: JWT bearer authentication, reference token introspection, scope-based authorization, DPoP/mTLS proof-of-possession validation, local API authentication…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-api-protection
```
Skill identityserver-aspire

Orchestrate Duende IdentityServer in .NET Aspire AppHost — dependency graphs, authority URL wiring, health checks, and multi-instance.

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-aspire
```
Skill identityserver-configuration

Configure Duende IdentityServer including client definitions, API resources, identity resources, scopes, signing credentials, and server-side sessions.

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-configuration
```
Skill identityserver-dcr

Configuring Dynamic Client Registration (DCR) in Duende IdentityServer: endpoint setup, authorization policies, custom validation with DynamicClientRegistrationValidator, software statement…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-dcr
```
Skill identityserver-deployment

Guide for deploying Duende IdentityServer to production, covering reverse proxy configuration, data protection, health checks, distributed caching, multi-instance deployment, OpenTelemetry…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-deployment
```
Skill identityserver-hosting-setup

Setting up and hosting Duende IdentityServer in ASP.NET Core applications, including DI registration, middleware pipeline, hosting patterns, essential options, license configuration, and ASP.NET…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-hosting-setup
```
Skill identityserver-key-management

Managing cryptographic signing keys in Duende IdentityServer, including automatic key management, KeyManagementOptions, data protection at rest, static key configuration, migration from static to…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-key-management
```
Skill identityserver-saml

Configuring Duende IdentityServer as a SAML 2.0 Identity Provider (IdP): service provider registration, SSO and SLO flows, claim mappings, extensibility interfaces, and production deployment patterns.

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-saml
```
Skill identityserver-sessions-providers

Guide for configuring server-side sessions, session management and querying, inactivity timeout, dynamic identity providers, and CIBA (Client Initiated Backchannel Authentication) in Duende…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-sessions-providers
```
Skill identityserver-stores

Implement and customize Duende IdentityServer stores including configuration store, operational store, and Entity Framework Core integration.

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-stores
```
Skill identityserver-token-lifecycle

Guide for implementing token types, refresh token management, token exchange (RFC 8693), extension grants, IProfileService claims customization, and token lifetime best practices in Duende…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-token-lifecycle
```
Skill identityserver-token-security

Advanced token security features in Duende IdentityServer including DPoP, mTLS certificate binding, Pushed Authorization Requests (PAR), JWT Secured Authorization Requests (JAR), and FAPI 2.0…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-token-security
```
Skill identityserver-ui-flows

Guide for building login, logout, consent, error, and federation gateway UI pages in Duende IdentityServer, including IIdentityServerInteractionService usage, external provider integration, and Home…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-ui-flows
```
Skill identityserver-upgrade-v7-to-v8

Migrating Duende IdentityServer from v7.4 to v8.0: breaking changes, API replacements (ICache→HybridCache, IClock→TimeProvider), CancellationToken additions, EF migrations, and step-by-step upgrade…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-upgrade-v7-to-v8
```
Skill identityserver-usermanagement

Setting up Duende User Management with IdentityServer: passwordless authentication (OTP, TOTP, passkeys), storage configuration, user lifecycle, and migration from ASP.NET Identity.

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver-usermanagement
```
Skill identityserver4-migration

Migrating from IdentityServer4 to Duende IdentityServer v8. Covers NuGet package replacement, namespace changes, API surface changes, EF Core database schema migrations, .NET target framework…

Any agent
```
npx skills add duendesoftware/duende-skills --skill identityserver4-migration
```
Skill oauth-oidc-protocols

OAuth 2.0 and OpenID Connect protocol fundamentals including authorization code flow with PKCE, client credentials, refresh tokens, discovery documents, JWKS, and token introspection.

Any agent
```
npx skills add duendesoftware/duende-skills --skill oauth-oidc-protocols
```
Skill token-management

Token management patterns using Duende.AccessTokenManagement. Covers client credential token caching, user token refresh, token storage, HttpClientFactory integration, DPoP support, and common…

Any agent
```
npx skills add duendesoftware/duende-skills --skill token-management
```

Agents (2)

Agent identity-server-specialist

Expert in Duende IdentityServer configuration, deployment, and troubleshooting. Specializes in client configuration, token issuance flows, store customization, signing key management, and protocol…
Agent oauth-oidc-specialist

Expert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance. Specializes in flow selection, token security, protocol-level debugging, and standards…

From Anthropic's public plugin directory, read on 2026-10-16. Find a skill by task.