Machine-to-machine access tokens are JWTs signed by Scalekit. Your API verifies signatures using the published JWKS at /keys, then authorizes requests using the scopes embedded in each token. This cookbook ties those ideas together end to end.
Install the Scalekit Auth Stack plugin into your coding agent and paste one prompt. The agent scaffolds OAuth handling, token management, and connected account logic so you can start writing agent logic immediately.
When your customer’s identity provider pushes more users than your plan allows, SCIM won’t stop it. This cookbook shows how to track provisioned users per organization, block creation when the quota is hit, and notify admins — using two webhook events and a counter in your database.
Build a GitHub PR summarizer that ranks the most-discussed pull requests in a repository and writes plain-language summaries. The secure version of this recipe binds each GitHub connection to a server-side session and never accepts a user ID from the browser.
Connecting an agent to two external APIs means handling two separate OAuth tokens, two authorization flows, and two different error surfaces. This recipe shows how Scalekit manages the OAuth lifecycle for both connectors, then demonstrates two patterns for calling those APIs: fetching a token and calling the REST API directly, versus letting Scalekit execute the call through a built-in action.
