Individual skill

pachca-oauth

Авторизация от имени сотрудника в Пачке (OAuth 2.0 с PKCE): когда боту нужен собственный токен сотрудника, вкладка OAuth, адреса возврата и набор прав, ссылка на авторизацию, обмен кода на токен, проверка владельца токена, хранение токена каждого сотрудника, повторная авторизация, отзыв доступа, список проверок перед запуском. Когда: «бот от имени сотрудника», «авторизация от имени сотрудника», «OAuth в Пачке», «client_id и client_secret», «redirect URI», «обменять код на токен», «PKCE», «экран согласия моего бота», «кнопка Предоставить доступ», «сотрудник отозвал доступ», «токен сотрудника вернул 401 или 403», "Pachca OAuth", "act on behalf of a user", "authorization code flow", "exchange code for token", "my bot's OAuth consent screen", "per-user token for my bot". Not for: a bot acting as itself, webhooks, showcase, a leaked bot token → pachca-bots; MCP sign-in, a 401/403 from an MCP tool or the CLI → pachca; your own token in a script → pachca-api; revoking access on the All tokens tab → pachca-admin.

apps/docs/public/.well-known/skills/pachca-oauth/SKILL.md

Read pinned source

Source commit 542014c04cf308d45040194e9290551570a1aee8

What was checked

Matches the observed repository HEAD
Yes
Scanner rules are current
Yes
Repository scan complete
No
Skill scan complete
Yes
Observed behavior
Network or broad shell
Last checked
Nov 5, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings)
11
Repository last updated
Nov 6, 2026
License
MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files
Read excerpt

# Pachca: acting on behalf of an employee (OAuth)

An employee grants a bot their own rights on a consent screen. The bot gets a token per
employee and calls the API as that employee. For your own integration the OAuth client in
Pachca is always a bot: it is the **OAuth** tab of the bot card. A bot is the app. Two kinds of
client need no registration: the CLI login and MCP clients that sign in through the browser
with a client metadata document. Their tokens live an hour and renew themselves, unlike a bot's
employee token (→ `pachca`).

## When to use

- A bot needs the employee's own data or must act under their name: a digest of their chats,
  a reminder set as them, their tracker tasks answered from Pachca.
- A service acts for many employees and each must agree and be able to revoke.