claims
// Claims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.
$ git log --oneline --stat
stars:18,689
forks:3.6k
updated:February 28, 2026
SKILL.mdreadonly
SKILL.md Frontmatter
nameclaims
descriptionClaims-based authorization for agents and operations. Grant, revoke, and verify permissions for secure multi-agent coordination. Use when: permission management, access control, secure operations, authorization checks. Skip when: open access, no security requirements, single-agent local work.
Claims Authorization Skill
Purpose
Claims-based authorization for secure agent operations and access control.
Claim Types
| Claim | Description |
|---|---|
read | Read file access |
write | Write file access |
execute | Command execution |
spawn | Agent spawning |
memory | Memory access |
network | Network access |
admin | Administrative operations |
Commands
Check Claim
npx claude-flow claims check --agent agent-123 --claim write
Grant Claim
npx claude-flow claims grant --agent agent-123 --claim write --scope "/src/**"
Revoke Claim
npx claude-flow claims revoke --agent agent-123 --claim write
List Claims
npx claude-flow claims list --agent agent-123
Scope Patterns
| Pattern | Description |
|---|---|
* | All resources |
/src/** | All files in src |
/config/*.toml | TOML files in config |
memory:patterns | Patterns namespace |
Security Levels
| Level | Claims |
|---|---|
minimal | read only |
standard | read, write, execute |
elevated | + spawn, memory |
admin | all claims |
Best Practices
- Follow principle of least privilege
- Scope claims to specific resources
- Audit claim usage regularly
- Revoke claims when no longer needed