zz-access

Issues, replaces, and revokes personal platform access tokens and configures client setup.

Updated Sep 11, 2026
One-click install
npx skills add https://github.com/zhixuan312/zz-stack --skill zz-access-zhixuan312
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: zz-access
Source: https://github.com/zhixuan312/zz-stack/tree/main/catalog/zz/zz-access/skills/zz-access
Command: npx skills add https://github.com/zhixuan312/zz-stack --skill zz-access-zhixuan312

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? When a platform access token leaks, gets committed, or stops authenticating, you need to revoke it fast and issue a replacement without touching anyone else's credentials. This Skill guides an agent through managing the access of the person in front of it — tokens, active team, and client install — on the zz-stack platform. ## Core Features & Use Cases - Token lifecycle management: Issue personal access tokens with pat_issue, list them masked with pat_list, and revoke compromised ones immediately with pat_revoke before minting a replacement. - Team context control: Show which team a user is acting as with team_mine and switch it with team_switch, so documents land in the correct team's store. - Client onboarding: Print a per-person Claude Code install with client_setup, pairing it with a token exported as ZZ_TOKEN so the credential never enters a committable file. - Use Case: A developer realizes their token appeared in a screen recording. The agent lists their tokens, revokes the exposed id, confirms it is dead, and issues a replacement under the same label. ## Quick Start Ask the agent to revoke my leaked platform token and issue me a replacement, then show my client setup commands.

Frequently Asked Questions about zz-access

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I revoke a leaked platform access token?▼

List your tokens with pat_list to find the id, revoke it immediately with pat_revoke passing the id as confirm, then issue a replacement with pat_issue. Revocation comes first, before any discussion or replacement.

How do I recover a lost access token?▼

A lost token cannot be recovered because it is shown only once at issuance. Instead, issue a replacement with pat_issue under the same label, which retires the old token automatically.

Why does my tool call return 401 or fail to authenticate?▼

Run whoami to see how you were resolved and what your token is scoped to. Your tool list reflects your authority, so a missing tool means you lack permission rather than the platform being broken.

Can I issue a token for automation or a service account?▼

Automation tokens with expiry are an administrator act handled by the zz-admin skill, not this one. If those tools are not in your list, ask an administrator rather than substituting an open-ended personal token in a script.

How do I know which team my documents are being written to?▼

Use team_mine to list your teams and see the active one, and team_switch to change it. A team-bound token always acts inside its bound team and ignores the active-team setting.