duende-skills

How to start

1. Paste the command into Claude Code and press Enter.
2. Restart Claude Code so the plugin loads.
3. Just ask Claude. Its skills step in when your request fits.

What it adds

2 agents · 24 skills

Agents Claude hands work to these

• identity-server-specialistExpert in Duende IdentityServer configuration, deployment, and troubleshooting. Specializes in client configuration, token issuance flows, store customization,…
• oauth-oidc-specialistExpert in OAuth 2.0 and OpenID Connect protocol specifications, security best practices, and compliance. Specializes in flow selection, token security, protoco…

Skills Claude loads these when the task fits

• aspnetcore-authenticationASP.NET Core authentication middleware configuration including OpenID Connect, JWT Bearer, cookie authentication, authentication schemes, challenge/forbid flow…
• aspnetcore-authorizationASP.NET Core authorization patterns including policy-based authorization, IAuthorizationHandler implementations, scope-based authorization for APIs, authorizat…
• claims-authorizationClaims transformation and profile service patterns for Duende IdentityServer — IProfileService, IClaimsTransformation, claim type mapping, token claim filterin…
• duende-bffDuende BFF (Backend for Frontend) security framework for securing SPAs. Covers session management, API endpoint proxying, token management, anti-forgery protec…
• identity-security-hardeningSecurity hardening for Duende IdentityServer deployments including signing key rotation, HTTPS enforcement, CORS configuration, CSP headers, rate limiting, tok…
• identity-testing-patternsTesting patterns for IdentityServer-based systems including integration testing with WebApplicationFactory, mock token issuance, test authority configuration,…
• identityserver-api-protectionProtecting APIs with Duende IdentityServer: JWT bearer authentication, reference token introspection, scope-based authorization, DPoP/mTLS proof-of-possession…
• identityserver-aspireOrchestrate Duende IdentityServer in .NET Aspire AppHost — dependency graphs, authority URL wiring, health checks, and multi-instance.
• identityserver-configurationConfigure Duende IdentityServer including client definitions, API resources, identity resources, scopes, signing credentials, and server-side sessions. Covers…
• identityserver-dcrConfiguring Dynamic Client Registration (DCR) in Duende IdentityServer: endpoint setup, authorization policies, custom validation with DynamicClientRegistratio…
• identityserver-deploymentGuide for deploying Duende IdentityServer to production, covering reverse proxy configuration, data protection, health checks, distributed caching, multi-insta…
• identityserver-hosting-setupSetting up and hosting Duende IdentityServer in ASP.NET Core applications, including DI registration, middleware pipeline, hosting patterns, essential options,…
• …and 12 more in the source.

Read from the plugin's own files in DuendeSoftware/duende-skills, 26 Oct 2026.

What it needs

No keys or settings: its files ask for none.