Machine-to-machine access tokens are JWTs signed by Scalekit. Your API verifies signatures using the published JWKS at /keys, then authorizes requests using the scopes embedded in each token. This cookbook ties those ideas together end to end.
Install the Scalekit Auth Stack plugin into your coding agent and paste one prompt. The agent scaffolds OAuth handling, token management, and connected account logic so you can start writing agent logic immediately.
When your customer’s identity provider pushes more users than your plan allows, SCIM won’t stop it. This cookbook shows how to track provisioned users per organization, block creation when the quota is hit, and notify admins — using two webhook events and a counter in your database.
As AI agents raise the velocity of code changes, the volume of open PRs on any team keeps growing. This recipe builds a Render Workflow that finds the five most-discussed open PRs in a repository, reads their diffs and comment threads, and generates a plain-language paragraph per PR — written for a team lead or manager. Each team member runs the same workflow with their own user ID; Scalekit’s token vault handles per-user GitHub OAuth so the agent acts as the right person every time.
Connecting an agent to two external APIs means handling two separate OAuth tokens, two authorization flows, and two different error surfaces. This recipe shows how Scalekit manages the OAuth lifecycle for both connectors, then demonstrates two patterns for calling those APIs: fetching a token and calling the REST API directly, versus letting Scalekit execute the call through a built-in action.
