Individual skill
pachca-oauth
Авторизация от имени сотрудника в Пачке (OAuth 2.0 с PKCE): когда боту нужен собственный токен сотрудника, вкладка OAuth, адреса возврата и набор прав, ссылка на авторизацию, обмен кода на токен, проверка владельца токена, хранение токена каждого сотрудника, повторная авторизация, отзыв доступа, список проверок перед запуском. Когда: «бот от имени сотрудника», «авторизация от имени сотрудника», «OAuth в Пачке», «client_id и client_secret», «redirect URI», «обменять код на токен», «PKCE», «экран согласия моего бота», «кнопка Предоставить доступ», «сотрудник отозвал доступ», «токен сотрудника вернул 401 или 403», "Pachca OAuth", "act on behalf of a user", "authorization code flow", "exchange code for token", "my bot's OAuth consent screen", "per-user token for my bot". Not for: a bot acting as itself, webhooks, showcase, a leaked bot token → pachca-bots; MCP sign-in, a 401/403 from an MCP tool or the CLI → pachca; your own token in a script → pachca-api; revoking access on the All tokens tab → pachca-admin.
apps/docs/public/.well-known/skills/pachca-oauth/SKILL.md
Source commit 542014c04cf308d45040194e9290551570a1aee8
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- Yes
- Repository scan complete
- No
- Skill scan complete
- Yes
- Observed behavior
- Network or broad shell
- Last checked
- Nov 5, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 11
- Repository last updated
- Nov 6, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 18,738 bytesreferences/authorization-flow.mddoc · 13,458 bytesreferences/launch-checklist.mddoc · 7,522 bytes
Read excerpt
# Pachca: acting on behalf of an employee (OAuth)
An employee grants a bot their own rights on a consent screen. The bot gets a token per
employee and calls the API as that employee. For your own integration the OAuth client in
Pachca is always a bot: it is the **OAuth** tab of the bot card. A bot is the app. Two kinds of
client need no registration: the CLI login and MCP clients that sign in through the browser
with a client metadata document. Their tokens live an hour and renew themselves, unlike a bot's
employee token (→ `pachca`).
## When to use
- A bot needs the employee's own data or must act under their name: a digest of their chats,
a reminder set as them, their tracker tasks answered from Pachca.
- A service acts for many employees and each must agree and be able to revoke.