> **Building with AI coding agents?** If you're using an AI coding agent, install the official Scalekit plugin. It gives your agent full awareness of the Scalekit API — reducing hallucinations and enabling faster, more accurate code generation.
>
> - **Claude Code**: `/plugin marketplace add scalekit-inc/claude-code-authstack` then `/plugin install <auth-type>@scalekit-auth-stack`
> - **GitHub Copilot CLI**: `copilot plugin marketplace add scalekit-inc/github-copilot-authstack` then `copilot plugin install <auth-type>@scalekit-auth-stack`
> - **Codex**: run the bash installer, restart, then open Plugin Directory and enable `<auth-type>`
> - **Skills CLI** (Windsurf, Cline, 40+ agents): `npx skills add scalekit-inc/skills --list` then `--skill <skill-name>`
>
> `<auth-type>` / `<skill-name>`: `agentkit`, `full-stack-auth`, `mcp-auth`, `modular-sso`, `modular-scim` — [Full setup guide](https://docs.scalekit.com/dev-kit/build-with-ai/)

---

# AgentKit launch checklist

Use this checklist before moving your AgentKit integration to production.

## Environment and credentials

- [ ] Switch to the production environment in the Scalekit dashboard
- [ ] Set `SCALEKIT_ENV_URL`, `SCALEKIT_CLIENT_ID`, and `SCALEKIT_CLIENT_SECRET` to production values, not dev or staging

## Connections

- [ ] All connectors your agent uses are configured in the production environment
- [ ] Each connection shows as active in the dashboard
- [ ] Connection names used in code match the names in the dashboard exactly

## Authorization and connected accounts

- [ ] End-to-end authorization flow tested with a real user account in production
- [ ] Connected accounts created and verified for at least one test user
- [ ] Magic link generation and redirect tested (OAuth connectors)
- [ ] Re-authorization flow tested: verify behavior when a token expires or is revoked

## Security

- [ ] MCP URLs are generated and consumed server-side only; never passed to or generated in client-side code
- [ ] `identifier` values passed to Tool Proxy are tied to authenticated users, not shared, static, or guessable
- [ ] Per-user MCP URLs are not cached longer than the session they were issued for

## Custom connector (if applicable)

- [ ] Connector definition promoted from Dev to Production (see [Managing connectors](/agentkit/bring-your-own-connector/managing-connectors))
- [ ] Auth pattern validated with a real connected account in production
- [ ] Tool Proxy calls return expected responses against the production upstream API

## Go live

- [ ] Custom domain configured and SSL verified (see [Custom domain](/agentkit/advanced/custom-domain))

---

## More Scalekit documentation

| Resource | What it contains | When to use it |
|----------|-----------------|----------------|
| [/llms.txt](/llms.txt) | Structured index with routing hints per product area | Start here — find which documentation set covers your topic before loading full content |
| [/llms-full.txt](/llms-full.txt) | Complete documentation for all Scalekit products in one file | Use when you need exhaustive context across multiple products or when the topic spans several areas |
| [sitemap-0.xml](https://docs.scalekit.com/sitemap-0.xml) | Full URL list of every documentation page | Use to discover specific page URLs you can fetch for targeted, page-level answers |