deploy

README.md

@@ -0,0 +1,11 @@
+# okta-management-openapi-agent
+
+Generated A2APack agent for Okta Admin Management API.
+
+- Source OpenAPI: https://raw.githubusercontent.com/okta/okta-management-openapi-spec/master/dist/current/management-minimal.yaml
+- Generated operations: 500
+- Main skill: `auto`
+- Routing mode: DeepAgents subagents across 33 route groups
+
+The generated code is intentionally editable. Tune prompts, operation
+grouping, auth names, and safety policy before publishing serious agents.

a2a.yaml

@@ -0,0 +1,12 @@
+name: okta-management-openapi-agent
+version: 2026.06.2
+entrypoint: agent:OktaManagementOpenapiAgent
+description: Identity management API for users, groups, apps, orgs, and admin workflows.
+runtime:
+  resources:
+    cpu: 200m
+    memory: 512Mi
+  egress:
+    allow_hosts:
+    - '{youroktadomain}'
+    deny_internet_by_default: true

requirements.txt

@@ -0,0 +1,7 @@
+# a2a-pack is installed by the platform base image.
+deepagents>=0.5.0
+langchain>=0.3
+langchain-openai>=0.2
+langchain-core>=0.3
+langgraph>=0.6
+httpx>=0.27

skills/agent-pools/SKILL.md

@@ -0,0 +1,155 @@
+---
+name: agent-pools-routes
+description: Handle 14 OpenAPI operation(s) under /api/v1/agentPools for the agentPools route group.
+---
+
+# agentPools API Routes
+
+Handle 14 OpenAPI operation(s) under /api/v1/agentPools for the agentPools route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_agent_pools
+
+- Operation ID: `list_agent_pools`
+- Route: `GET /api/v1/agentPools`
+- Mode: READ
+- Summary: List all agent pools
+- Parameters:
+  - `limitPerPoolType` in `query`
+  - `poolType` in `query`
+  - `after` in `query`
+
+### list_agent_pools_updates
+
+- Operation ID: `list_agent_pools_updates`
+- Route: `GET /api/v1/agentPools/{poolId}/updates`
+- Mode: READ
+- Summary: List all agent pool updates
+- Parameters:
+  - `poolId` in `path` required
+  - `scheduled` in `query`
+
+### create_agent_pools_update
+
+- Operation ID: `create_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates`
+- Mode: WRITE
+- Summary: Create an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+- Body: JSON request body accepted.
+
+### get_agent_pools_update_settings
+
+- Operation ID: `get_agent_pools_update_settings`
+- Route: `GET /api/v1/agentPools/{poolId}/updates/settings`
+- Mode: READ
+- Summary: Retrieve an agent pool update's settings
+- Parameters:
+  - `poolId` in `path` required
+
+### update_agent_pools_update_settings
+
+- Operation ID: `update_agent_pools_update_settings`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/settings`
+- Mode: WRITE
+- Summary: Update an agent pool update settings
+- Parameters:
+  - `poolId` in `path` required
+- Body: JSON request body accepted.
+
+### get_agent_pools_update_instance
+
+- Operation ID: `get_agent_pools_update_instance`
+- Route: `GET /api/v1/agentPools/{poolId}/updates/{updateId}`
+- Mode: READ
+- Summary: Retrieve an agent pool update by ID
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### update_agent_pools_update
+
+- Operation ID: `update_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}`
+- Mode: WRITE
+- Summary: Update an agent pool update by ID
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_agent_pools_update
+
+- Operation ID: `delete_agent_pools_update`
+- Route: `DELETE /api/v1/agentPools/{poolId}/updates/{updateId}`
+- Mode: WRITE
+- Summary: Delete an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### activate_agent_pools_update
+
+- Operation ID: `activate_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}/activate`
+- Mode: WRITE
+- Summary: Activate an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### deactivate_agent_pools_update
+
+- Operation ID: `deactivate_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### pause_agent_pools_update
+
+- Operation ID: `pause_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}/pause`
+- Mode: WRITE
+- Summary: Pause an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### resume_agent_pools_update
+
+- Operation ID: `resume_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}/resume`
+- Mode: WRITE
+- Summary: Resume an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### retry_agent_pools_update
+
+- Operation ID: `retry_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}/retry`
+- Mode: WRITE
+- Summary: Retry an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required
+
+### stop_agent_pools_update
+
+- Operation ID: `stop_agent_pools_update`
+- Route: `POST /api/v1/agentPools/{poolId}/updates/{updateId}/stop`
+- Mode: WRITE
+- Summary: Stop an agent pool update
+- Parameters:
+  - `poolId` in `path` required
+  - `updateId` in `path` required

skills/api-tokens/SKILL.md

@@ -0,0 +1,56 @@
+---
+name: api-tokens-routes
+description: Handle 5 OpenAPI operation(s) under /api/v1/api-tokens for the api tokens route group.
+---
+
+# api tokens API Routes
+
+Handle 5 OpenAPI operation(s) under /api/v1/api-tokens for the api tokens route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_api_tokens
+
+- Operation ID: `list_api_tokens`
+- Route: `GET /api/v1/api-tokens`
+- Mode: READ
+- Summary: List all API token metadata
+
+### revoke_current_api_token
+
+- Operation ID: `revoke_current_api_token`
+- Route: `DELETE /api/v1/api-tokens/current`
+- Mode: WRITE
+- Summary: Revoke the current API token
+
+### get_api_token
+
+- Operation ID: `get_api_token`
+- Route: `GET /api/v1/api-tokens/{apiTokenId}`
+- Mode: READ
+- Summary: Retrieve an API token's metadata
+- Parameters:
+  - `apiTokenId` in `path` required
+
+### upsert_api_token
+
+- Operation ID: `upsert_api_token`
+- Route: `PUT /api/v1/api-tokens/{apiTokenId}`
+- Mode: WRITE
+- Summary: Upsert an API token network condition
+- Parameters:
+  - `apiTokenId` in `path` required
+- Body: JSON request body accepted.
+
+### revoke_api_token
+
+- Operation ID: `revoke_api_token`
+- Route: `DELETE /api/v1/api-tokens/{apiTokenId}`
+- Mode: WRITE
+- Summary: Revoke an API token
+- Parameters:
+  - `apiTokenId` in `path` required

skills/apps/SKILL.md

@@ -0,0 +1,812 @@
+---
+name: apps-routes
+description: Handle 77 OpenAPI operation(s) under /api/v1/apps for the apps route group.
+---
+
+# apps API Routes
+
+Handle 77 OpenAPI operation(s) under /api/v1/apps for the apps route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_applications
+
+- Operation ID: `list_applications`
+- Route: `GET /api/v1/apps`
+- Mode: READ
+- Summary: List all applications
+- Parameters:
+  - `q` in `query`
+  - `after` in `query`
+  - `useOptimization` in `query`
+  - `alwaysIncludeVpnSettings` in `query`
+  - `limit` in `query`
+  - `filter` in `query`
+  - `expand` in `query`
+  - `includeNonDeleted` in `query`
+
+### create_application
+
+- Operation ID: `create_application`
+- Route: `POST /api/v1/apps`
+- Mode: WRITE
+- Summary: Create an application
+- Parameters:
+  - `activate` in `query`
+  - `OktaAccessGateway-Agent` in `header`
+- Body: JSON request body accepted.
+
+### get_application
+
+- Operation ID: `get_application`
+- Route: `GET /api/v1/apps/{appId}`
+- Mode: READ
+- Summary: Retrieve an application
+- Parameters:
+  - `appId` in `path` required
+  - `expand` in `query`
+
+### replace_application
+
+- Operation ID: `replace_application`
+- Route: `PUT /api/v1/apps/{appId}`
+- Mode: WRITE
+- Summary: Replace an application
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_application
+
+- Operation ID: `delete_application`
+- Route: `DELETE /api/v1/apps/{appId}`
+- Mode: WRITE
+- Summary: Delete an application
+- Parameters:
+  - `appId` in `path` required
+
+### get_default_provisioning_connection_for_application
+
+- Operation ID: `get_default_provisioning_connection_for_application`
+- Route: `GET /api/v1/apps/{appId}/connections/default`
+- Mode: READ
+- Summary: Retrieve the default provisioning connection
+- Parameters:
+  - `appId` in `path` required
+
+### update_default_provisioning_connection_for_application
+
+- Operation ID: `update_default_provisioning_connection_for_application`
+- Route: `POST /api/v1/apps/{appId}/connections/default`
+- Mode: WRITE
+- Summary: Update the default provisioning connection
+- Parameters:
+  - `appId` in `path` required
+  - `activate` in `query`
+- Body: JSON request body accepted.
+
+### get_user_provisioning_connection_jwks
+
+- Operation ID: `get_user_provisioning_connection_jwks`
+- Route: `GET /api/v1/apps/{appId}/connections/default/jwks`
+- Mode: READ
+- Summary: Retrieve a JSON Web Key Set (JWKS) for the default provisioning connection
+- Parameters:
+  - `appId` in `path` required
+
+### activate_default_provisioning_connection_for_application
+
+- Operation ID: `activate_default_provisioning_connection_for_application`
+- Route: `POST /api/v1/apps/{appId}/connections/default/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate the default provisioning connection
+- Parameters:
+  - `appId` in `path` required
+
+### deactivate_default_provisioning_connection_for_application
+
+- Operation ID: `deactivate_default_provisioning_connection_for_application`
+- Route: `POST /api/v1/apps/{appId}/connections/default/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate the default provisioning connection
+- Parameters:
+  - `appId` in `path` required
+
+### list_csrs_for_application
+
+- Operation ID: `list_csrs_for_application`
+- Route: `GET /api/v1/apps/{appId}/credentials/csrs`
+- Mode: READ
+- Summary: List all certificate signing requests
+- Parameters:
+  - `appId` in `path` required
+
+### generate_csr_for_application
+
+- Operation ID: `generate_csr_for_application`
+- Route: `POST /api/v1/apps/{appId}/credentials/csrs`
+- Mode: WRITE
+- Summary: Generate a certificate signing request
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_csr_for_application
+
+- Operation ID: `get_csr_for_application`
+- Route: `GET /api/v1/apps/{appId}/credentials/csrs/{csrId}`
+- Mode: READ
+- Summary: Retrieve a certificate signing request
+- Parameters:
+  - `appId` in `path` required
+  - `csrId` in `path` required
+
+### revoke_csr_from_application
+
+- Operation ID: `revoke_csr_from_application`
+- Route: `DELETE /api/v1/apps/{appId}/credentials/csrs/{csrId}`
+- Mode: WRITE
+- Summary: Revoke a certificate signing request
+- Parameters:
+  - `appId` in `path` required
+  - `csrId` in `path` required
+
+### publish_csr_from_application
+
+- Operation ID: `publish_csr_from_application`
+- Route: `POST /api/v1/apps/{appId}/credentials/csrs/{csrId}/lifecycle/publish`
+- Mode: WRITE
+- Summary: Publish a certificate signing request
+- Parameters:
+  - `appId` in `path` required
+  - `csrId` in `path` required
+- Body: JSON request body accepted.
+
+### list_jwk
+
+- Operation ID: `list_jwk`
+- Route: `GET /api/v1/apps/{appId}/credentials/jwks`
+- Mode: READ
+- Summary: List all the OAuth 2.0 client JSON Web Keys
+- Parameters:
+  - `appId` in `path` required
+
+### add_jwk
+
+- Operation ID: `add_jwk`
+- Route: `POST /api/v1/apps/{appId}/credentials/jwks`
+- Mode: WRITE
+- Summary: Add a JSON Web Key
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_jwk
+
+- Operation ID: `get_jwk`
+- Route: `GET /api/v1/apps/{appId}/credentials/jwks/{keyId}`
+- Mode: READ
+- Summary: Retrieve an OAuth 2.0 client JSON Web Key
+- Parameters:
+  - `appId` in `path` required
+  - `keyId` in `path` required
+
+### deletejwk
+
+- Operation ID: `deletejwk`
+- Route: `DELETE /api/v1/apps/{appId}/credentials/jwks/{keyId}`
+- Mode: WRITE
+- Summary: Delete an OAuth 2.0 client JSON Web Key
+- Parameters:
+  - `appId` in `path` required
+  - `keyId` in `path` required
+
+### activate_o_auth2_client_json_web_key
+
+- Operation ID: `activate_o_auth2_client_json_web_key`
+- Route: `POST /api/v1/apps/{appId}/credentials/jwks/{keyId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an OAuth 2.0 client JSON Web Key
+- Parameters:
+  - `appId` in `path` required
+  - `keyId` in `path` required
+
+### deactivate_o_auth2_client_json_web_key
+
+- Operation ID: `deactivate_o_auth2_client_json_web_key`
+- Route: `POST /api/v1/apps/{appId}/credentials/jwks/{keyId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an OAuth 2.0 client JSON Web Key
+- Parameters:
+  - `appId` in `path` required
+  - `keyId` in `path` required
+
+### list_application_keys
+
+- Operation ID: `list_application_keys`
+- Route: `GET /api/v1/apps/{appId}/credentials/keys`
+- Mode: READ
+- Summary: List all key credentials
+- Parameters:
+  - `appId` in `path` required
+
+### generate_application_key
+
+- Operation ID: `generate_application_key`
+- Route: `POST /api/v1/apps/{appId}/credentials/keys/generate`
+- Mode: WRITE
+- Summary: Generate a key credential
+- Parameters:
+  - `appId` in `path` required
+  - `validityYears` in `query` required
+
+### get_application_key
+
+- Operation ID: `get_application_key`
+- Route: `GET /api/v1/apps/{appId}/credentials/keys/{keyId}`
+- Mode: READ
+- Summary: Retrieve a key credential
+- Parameters:
+  - `appId` in `path` required
+  - `keyId` in `path` required
+
+### clone_application_key
+
+- Operation ID: `clone_application_key`
+- Route: `POST /api/v1/apps/{appId}/credentials/keys/{keyId}/clone`
+- Mode: WRITE
+- Summary: Clone a key credential
+- Parameters:
+  - `appId` in `path` required
+  - `keyId` in `path` required
+  - `targetAid` in `query` required
+
+### list_o_auth2_client_secrets
+
+- Operation ID: `list_o_auth2_client_secrets`
+- Route: `GET /api/v1/apps/{appId}/credentials/secrets`
+- Mode: READ
+- Summary: List all OAuth 2.0 client secrets
+- Parameters:
+  - `appId` in `path` required
+
+### create_o_auth2_client_secret
+
+- Operation ID: `create_o_auth2_client_secret`
+- Route: `POST /api/v1/apps/{appId}/credentials/secrets`
+- Mode: WRITE
+- Summary: Create an OAuth 2.0 client secret
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_o_auth2_client_secret
+
+- Operation ID: `get_o_auth2_client_secret`
+- Route: `GET /api/v1/apps/{appId}/credentials/secrets/{secretId}`
+- Mode: READ
+- Summary: Retrieve an OAuth 2.0 client secret
+- Parameters:
+  - `appId` in `path` required
+  - `secretId` in `path` required
+
+### delete_o_auth2_client_secret
+
+- Operation ID: `delete_o_auth2_client_secret`
+- Route: `DELETE /api/v1/apps/{appId}/credentials/secrets/{secretId}`
+- Mode: WRITE
+- Summary: Delete an OAuth 2.0 client secret
+- Parameters:
+  - `appId` in `path` required
+  - `secretId` in `path` required
+
+### activate_o_auth2_client_secret
+
+- Operation ID: `activate_o_auth2_client_secret`
+- Route: `POST /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an OAuth 2.0 client secret
+- Parameters:
+  - `appId` in `path` required
+  - `secretId` in `path` required
+
+### deactivate_o_auth2_client_secret
+
+- Operation ID: `deactivate_o_auth2_client_secret`
+- Route: `POST /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an OAuth 2.0 client secret
+- Parameters:
+  - `appId` in `path` required
+  - `secretId` in `path` required
+
+### get_all_cross_app_access_connections
+
+- Operation ID: `get_all_cross_app_access_connections`
+- Route: `GET /api/v1/apps/{appId}/cwo/connections`
+- Mode: READ
+- Summary: Retrieve all Cross App Access connections
+- Parameters:
+  - `appId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+  - `status` in `query`
+  - `requestingAppId` in `query`
+  - `resourceAppId` in `query`
+  - `activeAppsOnly` in `query`
+  - `requestingAppName` in `query`
+  - `resourceAppName` in `query`
+
+### create_cross_app_access_connection
+
+- Operation ID: `create_cross_app_access_connection`
+- Route: `POST /api/v1/apps/{appId}/cwo/connections`
+- Mode: WRITE
+- Summary: Create a Cross App Access connection
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_cross_app_access_connection
+
+- Operation ID: `get_cross_app_access_connection`
+- Route: `GET /api/v1/apps/{appId}/cwo/connections/{connectionId}`
+- Mode: READ
+- Summary: Retrieve a Cross App Access connection
+- Parameters:
+  - `appId` in `path` required
+  - `connectionId` in `path` required
+
+### update_cross_app_access_connection
+
+- Operation ID: `update_cross_app_access_connection`
+- Route: `PATCH /api/v1/apps/{appId}/cwo/connections/{connectionId}`
+- Mode: WRITE
+- Summary: Update a Cross App Access connection
+- Parameters:
+  - `appId` in `path` required
+  - `connectionId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_cross_app_access_connection
+
+- Operation ID: `delete_cross_app_access_connection`
+- Route: `DELETE /api/v1/apps/{appId}/cwo/connections/{connectionId}`
+- Mode: WRITE
+- Summary: Delete a Cross App Access connection
+- Parameters:
+  - `appId` in `path` required
+  - `connectionId` in `path` required
+
+### list_features_for_application
+
+- Operation ID: `list_features_for_application`
+- Route: `GET /api/v1/apps/{appId}/features`
+- Mode: READ
+- Summary: List all features
+- Parameters:
+  - `appId` in `path` required
+
+### get_feature_for_application
+
+- Operation ID: `get_feature_for_application`
+- Route: `GET /api/v1/apps/{appId}/features/{featureName}`
+- Mode: READ
+- Summary: Retrieve a feature
+- Parameters:
+  - `appId` in `path` required
+  - `featureName` in `path` required
+
+### update_feature_for_application
+
+- Operation ID: `update_feature_for_application`
+- Route: `PUT /api/v1/apps/{appId}/features/{featureName}`
+- Mode: WRITE
+- Summary: Update a feature
+- Parameters:
+  - `appId` in `path` required
+  - `featureName` in `path` required
+- Body: JSON request body accepted.
+
+### list_federated_claims
+
+- Operation ID: `list_federated_claims`
+- Route: `GET /api/v1/apps/{appId}/federated-claims`
+- Mode: READ
+- Summary: List all configured federated claims
+- Parameters:
+  - `appId` in `path` required
+
+### create_federated_claim
+
+- Operation ID: `create_federated_claim`
+- Route: `POST /api/v1/apps/{appId}/federated-claims`
+- Mode: WRITE
+- Summary: Create a federated claim
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_federated_claim
+
+- Operation ID: `get_federated_claim`
+- Route: `GET /api/v1/apps/{appId}/federated-claims/{claimId}`
+- Mode: READ
+- Summary: Retrieve a federated claim
+- Parameters:
+  - `appId` in `path` required
+  - `claimId` in `path` required
+
+### replace_federated_claim
+
+- Operation ID: `replace_federated_claim`
+- Route: `PUT /api/v1/apps/{appId}/federated-claims/{claimId}`
+- Mode: WRITE
+- Summary: Replace a federated claim
+- Parameters:
+  - `appId` in `path` required
+  - `claimId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_federated_claim
+
+- Operation ID: `delete_federated_claim`
+- Route: `DELETE /api/v1/apps/{appId}/federated-claims/{claimId}`
+- Mode: WRITE
+- Summary: Delete a federated claim
+- Parameters:
+  - `appId` in `path` required
+  - `claimId` in `path` required
+
+### list_scope_consent_grants
+
+- Operation ID: `list_scope_consent_grants`
+- Route: `GET /api/v1/apps/{appId}/grants`
+- Mode: READ
+- Summary: List all app grants
+- Parameters:
+  - `appId` in `path` required
+  - `expand` in `query`
+
+### grant_consent_to_scope
+
+- Operation ID: `grant_consent_to_scope`
+- Route: `POST /api/v1/apps/{appId}/grants`
+- Mode: WRITE
+- Summary: Grant consent to scope
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_scope_consent_grant
+
+- Operation ID: `get_scope_consent_grant`
+- Route: `GET /api/v1/apps/{appId}/grants/{grantId}`
+- Mode: READ
+- Summary: Retrieve an app grant
+- Parameters:
+  - `appId` in `path` required
+  - `grantId` in `path` required
+  - `expand` in `query`
+
+### revoke_scope_consent_grant
+
+- Operation ID: `revoke_scope_consent_grant`
+- Route: `DELETE /api/v1/apps/{appId}/grants/{grantId}`
+- Mode: WRITE
+- Summary: Revoke an app grant
+- Parameters:
+  - `appId` in `path` required
+  - `grantId` in `path` required
+
+### list_group_push_mappings
+
+- Operation ID: `list_group_push_mappings`
+- Route: `GET /api/v1/apps/{appId}/group-push/mappings`
+- Mode: READ
+- Summary: List all group push mappings
+- Parameters:
+  - `appId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+  - `lastUpdated` in `query`
+  - `sourceGroupId` in `query`
+  - `status` in `query`
+
+### create_group_push_mapping
+
+- Operation ID: `create_group_push_mapping`
+- Route: `POST /api/v1/apps/{appId}/group-push/mappings`
+- Mode: WRITE
+- Summary: Create a group push mapping
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_group_push_mapping
+
+- Operation ID: `get_group_push_mapping`
+- Route: `GET /api/v1/apps/{appId}/group-push/mappings/{mappingId}`
+- Mode: READ
+- Summary: Retrieve a group push mapping
+- Parameters:
+  - `appId` in `path` required
+  - `mappingId` in `path` required
+
+### update_group_push_mapping
+
+- Operation ID: `update_group_push_mapping`
+- Route: `PATCH /api/v1/apps/{appId}/group-push/mappings/{mappingId}`
+- Mode: WRITE
+- Summary: Update a group push mapping
+- Parameters:
+  - `appId` in `path` required
+  - `mappingId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_group_push_mapping
+
+- Operation ID: `delete_group_push_mapping`
+- Route: `DELETE /api/v1/apps/{appId}/group-push/mappings/{mappingId}`
+- Mode: WRITE
+- Summary: Delete a group push mapping
+- Parameters:
+  - `appId` in `path` required
+  - `mappingId` in `path` required
+  - `deleteTargetGroup` in `query` required
+
+### list_application_group_assignments
+
+- Operation ID: `list_application_group_assignments`
+- Route: `GET /api/v1/apps/{appId}/groups`
+- Mode: READ
+- Summary: List all application groups
+- Parameters:
+  - `appId` in `path` required
+  - `q` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `expand` in `query`
+
+### get_application_group_assignment
+
+- Operation ID: `get_application_group_assignment`
+- Route: `GET /api/v1/apps/{appId}/groups/{groupId}`
+- Mode: READ
+- Summary: Retrieve an application group
+- Parameters:
+  - `appId` in `path` required
+  - `groupId` in `path` required
+  - `expand` in `query`
+
+### assign_group_to_application
+
+- Operation ID: `assign_group_to_application`
+- Route: `PUT /api/v1/apps/{appId}/groups/{groupId}`
+- Mode: WRITE
+- Summary: Assign an application group
+- Parameters:
+  - `appId` in `path` required
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### update_group_assignment_to_application
+
+- Operation ID: `update_group_assignment_to_application`
+- Route: `PATCH /api/v1/apps/{appId}/groups/{groupId}`
+- Mode: WRITE
+- Summary: Update an application group
+- Parameters:
+  - `appId` in `path` required
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### unassign_application_from_group
+
+- Operation ID: `unassign_application_from_group`
+- Route: `DELETE /api/v1/apps/{appId}/groups/{groupId}`
+- Mode: WRITE
+- Summary: Unassign an application group
+- Parameters:
+  - `appId` in `path` required
+  - `groupId` in `path` required
+
+### list_interclient_allowed_applications
+
+- Operation ID: `list_interclient_allowed_applications`
+- Route: `GET /api/v1/apps/{appId}/interclient-allowed-apps`
+- Mode: READ
+- Summary: List all allowed apps for a target app
+- Parameters:
+  - `appId` in `path` required
+
+### create_interclient_trust_mapping
+
+- Operation ID: `create_interclient_trust_mapping`
+- Route: `POST /api/v1/apps/{appId}/interclient-allowed-apps`
+- Mode: WRITE
+- Summary: Create an allowed app mapping for a target app
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_interclient_trust_mapping
+
+- Operation ID: `delete_interclient_trust_mapping`
+- Route: `DELETE /api/v1/apps/{appId}/interclient-allowed-apps/{allowedAppId}`
+- Mode: WRITE
+- Summary: Delete an interclient trust mapping
+- Parameters:
+  - `appId` in `path` required
+  - `allowedAppId` in `path` required
+
+### list_interclient_target_applications
+
+- Operation ID: `list_interclient_target_applications`
+- Route: `GET /api/v1/apps/{appId}/interclient-target-apps`
+- Mode: READ
+- Summary: List all target apps for an allowed app
+- Parameters:
+  - `appId` in `path` required
+
+### activate_application
+
+- Operation ID: `activate_application`
+- Route: `POST /api/v1/apps/{appId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an application
+- Parameters:
+  - `appId` in `path` required
+
+### deactivate_application
+
+- Operation ID: `deactivate_application`
+- Route: `POST /api/v1/apps/{appId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an application
+- Parameters:
+  - `appId` in `path` required
+
+### upload_application_logo
+
+- Operation ID: `upload_application_logo`
+- Route: `POST /api/v1/apps/{appId}/logo`
+- Mode: WRITE
+- Summary: Upload an application logo
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### assign_application_policy
+
+- Operation ID: `assign_application_policy`
+- Route: `PUT /api/v1/apps/{appId}/policies/{policyId}`
+- Mode: WRITE
+- Summary: Assign an app sign-in policy
+- Parameters:
+  - `appId` in `path` required
+  - `policyId` in `path` required
+
+### preview_sam_lmetadata_for_application
+
+- Operation ID: `preview_sam_lmetadata_for_application`
+- Route: `GET /api/v1/apps/{appId}/sso/saml/metadata`
+- Mode: READ
+- Summary: Preview the application SAML metadata
+- Parameters:
+  - `appId` in `path` required
+  - `kid` in `query` required
+
+### list_o_auth2_tokens_for_application
+
+- Operation ID: `list_o_auth2_tokens_for_application`
+- Route: `GET /api/v1/apps/{appId}/tokens`
+- Mode: READ
+- Summary: List all application refresh tokens
+- Parameters:
+  - `appId` in `path` required
+  - `expand` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+
+### revoke_o_auth2_tokens_for_application
+
+- Operation ID: `revoke_o_auth2_tokens_for_application`
+- Route: `DELETE /api/v1/apps/{appId}/tokens`
+- Mode: WRITE
+- Summary: Revoke all application tokens
+- Parameters:
+  - `appId` in `path` required
+
+### get_o_auth2_token_for_application
+
+- Operation ID: `get_o_auth2_token_for_application`
+- Route: `GET /api/v1/apps/{appId}/tokens/{tokenId}`
+- Mode: READ
+- Summary: Retrieve an application token
+- Parameters:
+  - `appId` in `path` required
+  - `tokenId` in `path` required
+  - `expand` in `query`
+
+### revoke_o_auth2_token_for_application
+
+- Operation ID: `revoke_o_auth2_token_for_application`
+- Route: `DELETE /api/v1/apps/{appId}/tokens/{tokenId}`
+- Mode: WRITE
+- Summary: Revoke an application token
+- Parameters:
+  - `appId` in `path` required
+  - `tokenId` in `path` required
+
+### list_application_users
+
+- Operation ID: `list_application_users`
+- Route: `GET /api/v1/apps/{appId}/users`
+- Mode: READ
+- Summary: List all application users
+- Parameters:
+  - `appId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+  - `q` in `query`
+  - `expand` in `query`
+
+### assign_user_to_application
+
+- Operation ID: `assign_user_to_application`
+- Route: `POST /api/v1/apps/{appId}/users`
+- Mode: WRITE
+- Summary: Assign an application user
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_application_user
+
+- Operation ID: `get_application_user`
+- Route: `GET /api/v1/apps/{appId}/users/{userId}`
+- Mode: READ
+- Summary: Retrieve an application user
+- Parameters:
+  - `appId` in `path` required
+  - `userId` in `path` required
+  - `expand` in `query`
+
+### update_application_user
+
+- Operation ID: `update_application_user`
+- Route: `POST /api/v1/apps/{appId}/users/{userId}`
+- Mode: WRITE
+- Summary: Update an application user
+- Parameters:
+  - `appId` in `path` required
+  - `userId` in `path` required
+- Body: JSON request body accepted.
+
+### unassign_user_from_application
+
+- Operation ID: `unassign_user_from_application`
+- Route: `DELETE /api/v1/apps/{appId}/users/{userId}`
+- Mode: WRITE
+- Summary: Unassign an application user
+- Parameters:
+  - `appId` in `path` required
+  - `userId` in `path` required
+  - `sendEmail` in `query`
+
+### verify_provisioning_connection_for_application
+
+- Operation ID: `verify_provisioning_connection_for_application`
+- Route: `POST /api/v1/apps/{appName}/{appId}/oauth2/callback`
+- Mode: WRITE
+- Summary: Verify the provisioning connection
+- Parameters:
+  - `appName` in `path` required
+  - `appId` in `path` required
+  - `code` in `query`
+  - `state` in `query`

skills/authenticators/SKILL.md

@@ -0,0 +1,189 @@
+---
+name: authenticators-routes
+description: Handle 18 OpenAPI operation(s) under /api/v1/authenticators for the authenticators route group.
+---
+
+# authenticators API Routes
+
+Handle 18 OpenAPI operation(s) under /api/v1/authenticators for the authenticators route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_authenticators
+
+- Operation ID: `list_authenticators`
+- Route: `GET /api/v1/authenticators`
+- Mode: READ
+- Summary: List all authenticators
+
+### create_authenticator
+
+- Operation ID: `create_authenticator`
+- Route: `POST /api/v1/authenticators`
+- Mode: WRITE
+- Summary: Create an authenticator
+- Parameters:
+  - `activate` in `query`
+- Body: JSON request body accepted.
+
+### get_authenticator
+
+- Operation ID: `get_authenticator`
+- Route: `GET /api/v1/authenticators/{authenticatorId}`
+- Mode: READ
+- Summary: Retrieve an authenticator
+- Parameters:
+  - `authenticatorId` in `path` required
+
+### replace_authenticator
+
+- Operation ID: `replace_authenticator`
+- Route: `PUT /api/v1/authenticators/{authenticatorId}`
+- Mode: WRITE
+- Summary: Replace an authenticator
+- Parameters:
+  - `authenticatorId` in `path` required
+- Body: JSON request body accepted.
+
+### list_all_custom_aagui_ds
+
+- Operation ID: `list_all_custom_aagui_ds`
+- Route: `GET /api/v1/authenticators/{authenticatorId}/aaguids`
+- Mode: READ
+- Summary: List all custom AAGUIDs
+- Parameters:
+  - `authenticatorId` in `path` required
+
+### create_custom_aaguid
+
+- Operation ID: `create_custom_aaguid`
+- Route: `POST /api/v1/authenticators/{authenticatorId}/aaguids`
+- Mode: WRITE
+- Summary: Create a custom AAGUID
+- Parameters:
+  - `authenticatorId` in `path` required
+- Body: JSON request body accepted.
+
+### get_custom_aaguid
+
+- Operation ID: `get_custom_aaguid`
+- Route: `GET /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid}`
+- Mode: READ
+- Summary: Retrieve a custom AAGUID
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `aaguid` in `path` required
+
+### replace_custom_aaguid
+
+- Operation ID: `replace_custom_aaguid`
+- Route: `PUT /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid}`
+- Mode: WRITE
+- Summary: Replace a custom AAGUID
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `aaguid` in `path` required
+- Body: JSON request body accepted.
+
+### update_custom_aaguid
+
+- Operation ID: `update_custom_aaguid`
+- Route: `PATCH /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid}`
+- Mode: WRITE
+- Summary: Update a custom AAGUID
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `aaguid` in `path` required
+- Body: JSON request body accepted.
+
+### delete_custom_aaguid
+
+- Operation ID: `delete_custom_aaguid`
+- Route: `DELETE /api/v1/authenticators/{authenticatorId}/aaguids/{aaguid}`
+- Mode: WRITE
+- Summary: Delete a custom AAGUID
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `aaguid` in `path` required
+
+### activate_authenticator
+
+- Operation ID: `activate_authenticator`
+- Route: `POST /api/v1/authenticators/{authenticatorId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an authenticator
+- Parameters:
+  - `authenticatorId` in `path` required
+
+### deactivate_authenticator
+
+- Operation ID: `deactivate_authenticator`
+- Route: `POST /api/v1/authenticators/{authenticatorId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an authenticator
+- Parameters:
+  - `authenticatorId` in `path` required
+
+### list_authenticator_methods
+
+- Operation ID: `list_authenticator_methods`
+- Route: `GET /api/v1/authenticators/{authenticatorId}/methods`
+- Mode: READ
+- Summary: List all methods of an authenticator
+- Parameters:
+  - `authenticatorId` in `path` required
+
+### get_authenticator_method
+
+- Operation ID: `get_authenticator_method`
+- Route: `GET /api/v1/authenticators/{authenticatorId}/methods/{methodType}`
+- Mode: READ
+- Summary: Retrieve an authenticator method
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `methodType` in `path` required
+
+### replace_authenticator_method
+
+- Operation ID: `replace_authenticator_method`
+- Route: `PUT /api/v1/authenticators/{authenticatorId}/methods/{methodType}`
+- Mode: WRITE
+- Summary: Replace an authenticator method
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `methodType` in `path` required
+- Body: JSON request body accepted.
+
+### activate_authenticator_method
+
+- Operation ID: `activate_authenticator_method`
+- Route: `POST /api/v1/authenticators/{authenticatorId}/methods/{methodType}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an authenticator method
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `methodType` in `path` required
+
+### deactivate_authenticator_method
+
+- Operation ID: `deactivate_authenticator_method`
+- Route: `POST /api/v1/authenticators/{authenticatorId}/methods/{methodType}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an authenticator method
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `methodType` in `path` required
+
+### verify_rp_id_domain
+
+- Operation ID: `verify_rp_id_domain`
+- Route: `POST /api/v1/authenticators/{authenticatorId}/methods/{webAuthnMethodType}/verify-rp-id-domain`
+- Mode: WRITE
+- Summary: Verify a Relying Party ID domain
+- Parameters:
+  - `authenticatorId` in `path` required
+  - `webAuthnMethodType` in `path` required

skills/authorization-servers/SKILL.md

@@ -0,0 +1,506 @@
+---
+name: authorization-servers-routes
+description: Handle 48 OpenAPI operation(s) under /api/v1/authorizationServers for the authorizationServers route group.
+---
+
+# authorizationServers API Routes
+
+Handle 48 OpenAPI operation(s) under /api/v1/authorizationServers for the authorizationServers route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_authorization_servers
+
+- Operation ID: `list_authorization_servers`
+- Route: `GET /api/v1/authorizationServers`
+- Mode: READ
+- Summary: List all authorization servers
+- Parameters:
+  - `q` in `query`
+  - `limit` in `query`
+  - `after` in `query`
+
+### create_authorization_server
+
+- Operation ID: `create_authorization_server`
+- Route: `POST /api/v1/authorizationServers`
+- Mode: WRITE
+- Summary: Create an authorization server
+- Body: JSON request body accepted.
+
+### get_authorization_server
+
+- Operation ID: `get_authorization_server`
+- Route: `GET /api/v1/authorizationServers/{authServerId}`
+- Mode: READ
+- Summary: Retrieve an authorization server
+- Parameters:
+  - `authServerId` in `path` required
+
+### replace_authorization_server
+
+- Operation ID: `replace_authorization_server`
+- Route: `PUT /api/v1/authorizationServers/{authServerId}`
+- Mode: WRITE
+- Summary: Replace an authorization server
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_authorization_server
+
+- Operation ID: `delete_authorization_server`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}`
+- Mode: WRITE
+- Summary: Delete an authorization server
+- Parameters:
+  - `authServerId` in `path` required
+
+### list_associated_servers_by_trusted_type
+
+- Operation ID: `list_associated_servers_by_trusted_type`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/associatedServers`
+- Mode: READ
+- Summary: List all associated authorization servers
+- Parameters:
+  - `authServerId` in `path` required
+  - `trusted` in `query`
+  - `q` in `query`
+  - `limit` in `query`
+  - `after` in `query`
+
+### create_associated_servers
+
+- Operation ID: `create_associated_servers`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/associatedServers`
+- Mode: WRITE
+- Summary: Create an associated authorization server
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_associated_server
+
+- Operation ID: `delete_associated_server`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/associatedServers/{associatedServerId}`
+- Mode: WRITE
+- Summary: Delete an associated authorization server
+- Parameters:
+  - `authServerId` in `path` required
+  - `associatedServerId` in `path` required
+
+### list_o_auth2_claims
+
+- Operation ID: `list_o_auth2_claims`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/claims`
+- Mode: READ
+- Summary: List all custom token claims
+- Parameters:
+  - `authServerId` in `path` required
+
+### create_o_auth2_claim
+
+- Operation ID: `create_o_auth2_claim`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/claims`
+- Mode: WRITE
+- Summary: Create a custom token claim
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### get_o_auth2_claim
+
+- Operation ID: `get_o_auth2_claim`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/claims/{claimId}`
+- Mode: READ
+- Summary: Retrieve a custom token claim
+- Parameters:
+  - `authServerId` in `path` required
+  - `claimId` in `path` required
+
+### replace_o_auth2_claim
+
+- Operation ID: `replace_o_auth2_claim`
+- Route: `PUT /api/v1/authorizationServers/{authServerId}/claims/{claimId}`
+- Mode: WRITE
+- Summary: Replace a custom token claim
+- Parameters:
+  - `authServerId` in `path` required
+  - `claimId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_o_auth2_claim
+
+- Operation ID: `delete_o_auth2_claim`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/claims/{claimId}`
+- Mode: WRITE
+- Summary: Delete a custom token claim
+- Parameters:
+  - `authServerId` in `path` required
+  - `claimId` in `path` required
+
+### list_o_auth2_clients_for_authorization_server
+
+- Operation ID: `list_o_auth2_clients_for_authorization_server`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/clients`
+- Mode: READ
+- Summary: List all client resources for an authorization server
+- Parameters:
+  - `authServerId` in `path` required
+
+### list_refresh_tokens_for_authorization_server_and_client
+
+- Operation ID: `list_refresh_tokens_for_authorization_server_and_client`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens`
+- Mode: READ
+- Summary: List all refresh tokens for a client
+- Parameters:
+  - `authServerId` in `path` required
+  - `clientId` in `path` required
+  - `expand` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+
+### revoke_refresh_tokens_for_authorization_server_and_client
+
+- Operation ID: `revoke_refresh_tokens_for_authorization_server_and_client`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens`
+- Mode: WRITE
+- Summary: Revoke all refresh tokens for a client
+- Parameters:
+  - `authServerId` in `path` required
+  - `clientId` in `path` required
+
+### get_refresh_token_for_authorization_server_and_client
+
+- Operation ID: `get_refresh_token_for_authorization_server_and_client`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId}`
+- Mode: READ
+- Summary: Retrieve a refresh token for a client
+- Parameters:
+  - `authServerId` in `path` required
+  - `clientId` in `path` required
+  - `tokenId` in `path` required
+  - `expand` in `query`
+
+### revoke_refresh_token_for_authorization_server_and_client
+
+- Operation ID: `revoke_refresh_token_for_authorization_server_and_client`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/clients/{clientId}/tokens/{tokenId}`
+- Mode: WRITE
+- Summary: Revoke a refresh token for a client
+- Parameters:
+  - `authServerId` in `path` required
+  - `clientId` in `path` required
+  - `tokenId` in `path` required
+
+### list_authorization_server_keys
+
+- Operation ID: `list_authorization_server_keys`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/credentials/keys`
+- Mode: READ
+- Summary: List all credential keys
+- Parameters:
+  - `authServerId` in `path` required
+
+### get_authorization_server_key
+
+- Operation ID: `get_authorization_server_key`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/credentials/keys/{keyId}`
+- Mode: READ
+- Summary: Retrieve an authorization server key
+- Parameters:
+  - `authServerId` in `path` required
+  - `keyId` in `path` required
+
+### rotate_authorization_server_keys
+
+- Operation ID: `rotate_authorization_server_keys`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/credentials/lifecycle/keyRotate`
+- Mode: WRITE
+- Summary: Rotate all credential keys
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### activate_authorization_server
+
+- Operation ID: `activate_authorization_server`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an authorization server
+- Parameters:
+  - `authServerId` in `path` required
+
+### deactivate_authorization_server
+
+- Operation ID: `deactivate_authorization_server`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an authorization server
+- Parameters:
+  - `authServerId` in `path` required
+
+### list_authorization_server_policies
+
+- Operation ID: `list_authorization_server_policies`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/policies`
+- Mode: READ
+- Summary: List all policies
+- Parameters:
+  - `authServerId` in `path` required
+
+### create_authorization_server_policy
+
+- Operation ID: `create_authorization_server_policy`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/policies`
+- Mode: WRITE
+- Summary: Create a policy
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### get_authorization_server_policy
+
+- Operation ID: `get_authorization_server_policy`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}`
+- Mode: READ
+- Summary: Retrieve a policy
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+
+### replace_authorization_server_policy
+
+- Operation ID: `replace_authorization_server_policy`
+- Route: `PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}`
+- Mode: WRITE
+- Summary: Replace a policy
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_authorization_server_policy
+
+- Operation ID: `delete_authorization_server_policy`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/policies/{policyId}`
+- Mode: WRITE
+- Summary: Delete a policy
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+
+### activate_authorization_server_policy
+
+- Operation ID: `activate_authorization_server_policy`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a policy
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+
+### deactivate_authorization_server_policy
+
+- Operation ID: `deactivate_authorization_server_policy`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a policy
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+
+### list_authorization_server_policy_rules
+
+- Operation ID: `list_authorization_server_policy_rules`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules`
+- Mode: READ
+- Summary: List all policy rules
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+
+### create_authorization_server_policy_rule
+
+- Operation ID: `create_authorization_server_policy_rule`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules`
+- Mode: WRITE
+- Summary: Create a policy rule
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+- Body: JSON request body accepted.
+
+### get_authorization_server_policy_rule
+
+- Operation ID: `get_authorization_server_policy_rule`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}`
+- Mode: READ
+- Summary: Retrieve a policy rule
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+  - `ruleId` in `path` required
+
+### replace_authorization_server_policy_rule
+
+- Operation ID: `replace_authorization_server_policy_rule`
+- Route: `PUT /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}`
+- Mode: WRITE
+- Summary: Replace a policy rule
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+  - `ruleId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_authorization_server_policy_rule
+
+- Operation ID: `delete_authorization_server_policy_rule`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}`
+- Mode: WRITE
+- Summary: Delete a policy rule
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+  - `ruleId` in `path` required
+
+### activate_authorization_server_policy_rule
+
+- Operation ID: `activate_authorization_server_policy_rule`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a policy rule
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+  - `ruleId` in `path` required
+
+### deactivate_authorization_server_policy_rule
+
+- Operation ID: `deactivate_authorization_server_policy_rule`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/policies/{policyId}/rules/{ruleId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a policy rule
+- Parameters:
+  - `authServerId` in `path` required
+  - `policyId` in `path` required
+  - `ruleId` in `path` required
+
+### list_o_auth2_resource_server_json_web_keys
+
+- Operation ID: `list_o_auth2_resource_server_json_web_keys`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys`
+- Mode: READ
+- Summary: List all Custom Authorization Server Public JSON Web Keys
+- Parameters:
+  - `authServerId` in `path` required
+
+### add_o_auth2_resource_server_json_web_key
+
+- Operation ID: `add_o_auth2_resource_server_json_web_key`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys`
+- Mode: WRITE
+- Summary: Add a JSON Web Key
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### get_o_auth2_resource_server_json_web_key
+
+- Operation ID: `get_o_auth2_resource_server_json_web_key`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}`
+- Mode: READ
+- Summary: Retrieve a Custom Authorization Server Public JSON Web Key
+- Parameters:
+  - `authServerId` in `path` required
+  - `keyId` in `path` required
+
+### delete_o_auth2_resource_server_json_web_key
+
+- Operation ID: `delete_o_auth2_resource_server_json_web_key`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}`
+- Mode: WRITE
+- Summary: Delete a Custom Authorization Server Public JSON Web Key
+- Parameters:
+  - `authServerId` in `path` required
+  - `keyId` in `path` required
+
+### activate_o_auth2_resource_server_json_web_key
+
+- Operation ID: `activate_o_auth2_resource_server_json_web_key`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a Custom Authorization Server Public JSON Web Key
+- Parameters:
+  - `authServerId` in `path` required
+  - `keyId` in `path` required
+
+### deactivate_o_auth2_resource_server_json_web_key
+
+- Operation ID: `deactivate_o_auth2_resource_server_json_web_key`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/resourceservercredentials/keys/{keyId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a Custom Authorization Server Public JSON Web Key
+- Parameters:
+  - `authServerId` in `path` required
+  - `keyId` in `path` required
+
+### list_o_auth2_scopes
+
+- Operation ID: `list_o_auth2_scopes`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/scopes`
+- Mode: READ
+- Summary: List all custom token scopes
+- Parameters:
+  - `authServerId` in `path` required
+  - `q` in `query`
+  - `filter` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+
+### create_o_auth2_scope
+
+- Operation ID: `create_o_auth2_scope`
+- Route: `POST /api/v1/authorizationServers/{authServerId}/scopes`
+- Mode: WRITE
+- Summary: Create a custom token scope
+- Parameters:
+  - `authServerId` in `path` required
+- Body: JSON request body accepted.
+
+### get_o_auth2_scope
+
+- Operation ID: `get_o_auth2_scope`
+- Route: `GET /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}`
+- Mode: READ
+- Summary: Retrieve a custom token scope
+- Parameters:
+  - `authServerId` in `path` required
+  - `scopeId` in `path` required
+
+### replace_o_auth2_scope
+
+- Operation ID: `replace_o_auth2_scope`
+- Route: `PUT /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}`
+- Mode: WRITE
+- Summary: Replace a custom token scope
+- Parameters:
+  - `authServerId` in `path` required
+  - `scopeId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_o_auth2_scope
+
+- Operation ID: `delete_o_auth2_scope`
+- Route: `DELETE /api/v1/authorizationServers/{authServerId}/scopes/{scopeId}`
+- Mode: WRITE
+- Summary: Delete a custom token scope
+- Parameters:
+  - `authServerId` in `path` required
+  - `scopeId` in `path` required

skills/behaviors/SKILL.md

@@ -0,0 +1,75 @@
+---
+name: behaviors-routes
+description: Handle 7 OpenAPI operation(s) under /api/v1/behaviors for the behaviors route group.
+---
+
+# behaviors API Routes
+
+Handle 7 OpenAPI operation(s) under /api/v1/behaviors for the behaviors route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_behavior_detection_rules
+
+- Operation ID: `list_behavior_detection_rules`
+- Route: `GET /api/v1/behaviors`
+- Mode: READ
+- Summary: List all behavior detection rules
+
+### create_behavior_detection_rule
+
+- Operation ID: `create_behavior_detection_rule`
+- Route: `POST /api/v1/behaviors`
+- Mode: WRITE
+- Summary: Create a behavior detection rule
+- Body: JSON request body accepted.
+
+### get_behavior_detection_rule
+
+- Operation ID: `get_behavior_detection_rule`
+- Route: `GET /api/v1/behaviors/{behaviorId}`
+- Mode: READ
+- Summary: Retrieve a behavior detection rule
+- Parameters:
+  - `behaviorId` in `path` required
+
+### replace_behavior_detection_rule
+
+- Operation ID: `replace_behavior_detection_rule`
+- Route: `PUT /api/v1/behaviors/{behaviorId}`
+- Mode: WRITE
+- Summary: Replace a behavior detection rule
+- Parameters:
+  - `behaviorId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_behavior_detection_rule
+
+- Operation ID: `delete_behavior_detection_rule`
+- Route: `DELETE /api/v1/behaviors/{behaviorId}`
+- Mode: WRITE
+- Summary: Delete a behavior detection rule
+- Parameters:
+  - `behaviorId` in `path` required
+
+### activate_behavior_detection_rule
+
+- Operation ID: `activate_behavior_detection_rule`
+- Route: `POST /api/v1/behaviors/{behaviorId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a behavior detection rule
+- Parameters:
+  - `behaviorId` in `path` required
+
+### deactivate_behavior_detection_rule
+
+- Operation ID: `deactivate_behavior_detection_rule`
+- Route: `POST /api/v1/behaviors/{behaviorId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a behavior detection rule
+- Parameters:
+  - `behaviorId` in `path` required

skills/bot-protection/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: bot-protection-routes
+description: Handle 2 OpenAPI operation(s) under /api/v1/bot-protection/configuration for the bot protection route group.
+---
+
+# bot protection API Routes
+
+Handle 2 OpenAPI operation(s) under /api/v1/bot-protection/configuration for the bot protection route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### get_bot_protection_configuration
+
+- Operation ID: `get_bot_protection_configuration`
+- Route: `GET /api/v1/bot-protection/configuration`
+- Mode: READ
+- Summary: Retrieve the bot protection configuration
+
+### update_bot_protection_configuration
+
+- Operation ID: `update_bot_protection_configuration`
+- Route: `POST /api/v1/bot-protection/configuration`
+- Mode: WRITE
+- Summary: Update the bot protection configuration
+- Body: JSON request body accepted.

skills/brands/SKILL.md

@@ -0,0 +1,540 @@
+---
+name: brands-routes
+description: Handle 52 OpenAPI operation(s) under /api/v1/brands for the brands route group.
+---
+
+# brands API Routes
+
+Handle 52 OpenAPI operation(s) under /api/v1/brands for the brands route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_brands
+
+- Operation ID: `list_brands`
+- Route: `GET /api/v1/brands`
+- Mode: READ
+- Summary: List all brands
+- Parameters:
+  - `expand` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `q` in `query`
+
+### create_brand
+
+- Operation ID: `create_brand`
+- Route: `POST /api/v1/brands`
+- Mode: WRITE
+- Summary: Create a brand
+- Body: JSON request body accepted.
+
+### get_brand
+
+- Operation ID: `get_brand`
+- Route: `GET /api/v1/brands/{brandId}`
+- Mode: READ
+- Summary: Retrieve a brand
+- Parameters:
+  - `brandId` in `path` required
+  - `expand` in `query`
+
+### replace_brand
+
+- Operation ID: `replace_brand`
+- Route: `PUT /api/v1/brands/{brandId}`
+- Mode: WRITE
+- Summary: Replace a brand
+- Parameters:
+  - `brandId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_brand
+
+- Operation ID: `delete_brand`
+- Route: `DELETE /api/v1/brands/{brandId}`
+- Mode: WRITE
+- Summary: Delete a brand
+- Parameters:
+  - `brandId` in `path` required
+
+### list_brand_domains
+
+- Operation ID: `list_brand_domains`
+- Route: `GET /api/v1/brands/{brandId}/domains`
+- Mode: READ
+- Summary: List all domains associated with a brand
+- Parameters:
+  - `brandId` in `path` required
+
+### get_error_page
+
+- Operation ID: `get_error_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/error`
+- Mode: READ
+- Summary: Retrieve the error page sub-resources
+- Parameters:
+  - `brandId` in `path` required
+  - `expand` in `query`
+
+### get_customized_error_page
+
+- Operation ID: `get_customized_error_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/error/customized`
+- Mode: READ
+- Summary: Retrieve the customized error page
+- Parameters:
+  - `brandId` in `path` required
+
+### replace_customized_error_page
+
+- Operation ID: `replace_customized_error_page`
+- Route: `PUT /api/v1/brands/{brandId}/pages/error/customized`
+- Mode: WRITE
+- Summary: Replace the customized error page
+- Parameters:
+  - `brandId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_customized_error_page
+
+- Operation ID: `delete_customized_error_page`
+- Route: `DELETE /api/v1/brands/{brandId}/pages/error/customized`
+- Mode: WRITE
+- Summary: Delete the customized error page
+- Parameters:
+  - `brandId` in `path` required
+
+### get_default_error_page
+
+- Operation ID: `get_default_error_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/error/default`
+- Mode: READ
+- Summary: Retrieve the default error page
+- Parameters:
+  - `brandId` in `path` required
+
+### get_preview_error_page
+
+- Operation ID: `get_preview_error_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/error/preview`
+- Mode: READ
+- Summary: Retrieve the preview error page preview
+- Parameters:
+  - `brandId` in `path` required
+
+### replace_preview_error_page
+
+- Operation ID: `replace_preview_error_page`
+- Route: `PUT /api/v1/brands/{brandId}/pages/error/preview`
+- Mode: WRITE
+- Summary: Replace the preview error page
+- Parameters:
+  - `brandId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_preview_error_page
+
+- Operation ID: `delete_preview_error_page`
+- Route: `DELETE /api/v1/brands/{brandId}/pages/error/preview`
+- Mode: WRITE
+- Summary: Delete the preview error page
+- Parameters:
+  - `brandId` in `path` required
+
+### get_sign_in_page
+
+- Operation ID: `get_sign_in_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/sign-in`
+- Mode: READ
+- Summary: Retrieve the sign-in page sub-resources
+- Parameters:
+  - `brandId` in `path` required
+  - `expand` in `query`
+
+### get_customized_sign_in_page
+
+- Operation ID: `get_customized_sign_in_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/sign-in/customized`
+- Mode: READ
+- Summary: Retrieve the customized sign-in page
+- Parameters:
+  - `brandId` in `path` required
+
+### replace_customized_sign_in_page
+
+- Operation ID: `replace_customized_sign_in_page`
+- Route: `PUT /api/v1/brands/{brandId}/pages/sign-in/customized`
+- Mode: WRITE
+- Summary: Replace the customized sign-in page
+- Parameters:
+  - `brandId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_customized_sign_in_page
+
+- Operation ID: `delete_customized_sign_in_page`
+- Route: `DELETE /api/v1/brands/{brandId}/pages/sign-in/customized`
+- Mode: WRITE
+- Summary: Delete the customized sign-in page
+- Parameters:
+  - `brandId` in `path` required
+
+### get_default_sign_in_page
+
+- Operation ID: `get_default_sign_in_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/sign-in/default`
+- Mode: READ
+- Summary: Retrieve the default sign-in page
+- Parameters:
+  - `brandId` in `path` required
+
+### get_preview_sign_in_page
+
+- Operation ID: `get_preview_sign_in_page`
+- Route: `GET /api/v1/brands/{brandId}/pages/sign-in/preview`
+- Mode: READ
+- Summary: Retrieve the preview sign-in page preview
+- Parameters:
+  - `brandId` in `path` required
+
+### replace_preview_sign_in_page
+
+- Operation ID: `replace_preview_sign_in_page`
+- Route: `PUT /api/v1/brands/{brandId}/pages/sign-in/preview`
+- Mode: WRITE
+- Summary: Replace the preview sign-in page
+- Parameters:
+  - `brandId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_preview_sign_in_page
+
+- Operation ID: `delete_preview_sign_in_page`
+- Route: `DELETE /api/v1/brands/{brandId}/pages/sign-in/preview`
+- Mode: WRITE
+- Summary: Delete the preview sign-in page
+- Parameters:
+  - `brandId` in `path` required
+
+### list_all_sign_in_widget_versions
+
+- Operation ID: `list_all_sign_in_widget_versions`
+- Route: `GET /api/v1/brands/{brandId}/pages/sign-in/widget-versions`
+- Mode: READ
+- Summary: List all Sign-In Widget versions
+- Parameters:
+  - `brandId` in `path` required
+
+### get_sign_out_page_settings
+
+- Operation ID: `get_sign_out_page_settings`
+- Route: `GET /api/v1/brands/{brandId}/pages/sign-out/customized`
+- Mode: READ
+- Summary: Retrieve the sign-out page settings
+- Parameters:
+  - `brandId` in `path` required
+
+### replace_sign_out_page_settings
+
+- Operation ID: `replace_sign_out_page_settings`
+- Route: `PUT /api/v1/brands/{brandId}/pages/sign-out/customized`
+- Mode: WRITE
+- Summary: Replace the sign-out page settings
+- Parameters:
+  - `brandId` in `path` required
+- Body: JSON request body accepted.
+
+### list_email_templates
+
+- Operation ID: `list_email_templates`
+- Route: `GET /api/v1/brands/{brandId}/templates/email`
+- Mode: READ
+- Summary: List all email templates
+- Parameters:
+  - `brandId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+  - `expand` in `query`
+
+### get_email_template
+
+- Operation ID: `get_email_template`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}`
+- Mode: READ
+- Summary: Retrieve an email template
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `expand` in `query`
+
+### list_email_customizations
+
+- Operation ID: `list_email_customizations`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}/customizations`
+- Mode: READ
+- Summary: List all email customizations
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### create_email_customization
+
+- Operation ID: `create_email_customization`
+- Route: `POST /api/v1/brands/{brandId}/templates/email/{templateName}/customizations`
+- Mode: WRITE
+- Summary: Create an email customization
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+- Body: JSON request body accepted.
+
+### delete_all_customizations
+
+- Operation ID: `delete_all_customizations`
+- Route: `DELETE /api/v1/brands/{brandId}/templates/email/{templateName}/customizations`
+- Mode: WRITE
+- Summary: Delete all email customizations
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+
+### get_email_customization
+
+- Operation ID: `get_email_customization`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}`
+- Mode: READ
+- Summary: Retrieve an email customization
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `customizationId` in `path` required
+
+### replace_email_customization
+
+- Operation ID: `replace_email_customization`
+- Route: `PUT /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}`
+- Mode: WRITE
+- Summary: Replace an email customization
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `customizationId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_email_customization
+
+- Operation ID: `delete_email_customization`
+- Route: `DELETE /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}`
+- Mode: WRITE
+- Summary: Delete an email customization
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `customizationId` in `path` required
+
+### get_customization_preview
+
+- Operation ID: `get_customization_preview`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}/customizations/{customizationId}/preview`
+- Mode: READ
+- Summary: Retrieve a preview of an email customization
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `customizationId` in `path` required
+
+### get_email_default_content
+
+- Operation ID: `get_email_default_content`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}/default-content`
+- Mode: READ
+- Summary: Retrieve an email template default content
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `language` in `query`
+
+### get_email_default_preview
+
+- Operation ID: `get_email_default_preview`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}/default-content/preview`
+- Mode: READ
+- Summary: Retrieve a preview of the email template default content
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `language` in `query`
+
+### get_email_settings
+
+- Operation ID: `get_email_settings`
+- Route: `GET /api/v1/brands/{brandId}/templates/email/{templateName}/settings`
+- Mode: READ
+- Summary: Retrieve the email template settings
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+
+### replace_email_settings
+
+- Operation ID: `replace_email_settings`
+- Route: `PUT /api/v1/brands/{brandId}/templates/email/{templateName}/settings`
+- Mode: WRITE
+- Summary: Replace the email template settings
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+- Body: JSON request body accepted.
+
+### send_test_email
+
+- Operation ID: `send_test_email`
+- Route: `POST /api/v1/brands/{brandId}/templates/email/{templateName}/test`
+- Mode: WRITE
+- Summary: Send a test email
+- Parameters:
+  - `brandId` in `path` required
+  - `templateName` in `path` required
+  - `language` in `query`
+
+### list_brand_themes
+
+- Operation ID: `list_brand_themes`
+- Route: `GET /api/v1/brands/{brandId}/themes`
+- Mode: READ
+- Summary: List all themes
+- Parameters:
+  - `brandId` in `path` required
+
+### get_brand_theme
+
+- Operation ID: `get_brand_theme`
+- Route: `GET /api/v1/brands/{brandId}/themes/{themeId}`
+- Mode: READ
+- Summary: Retrieve a theme
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+
+### replace_brand_theme
+
+- Operation ID: `replace_brand_theme`
+- Route: `PUT /api/v1/brands/{brandId}/themes/{themeId}`
+- Mode: WRITE
+- Summary: Replace a theme
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+- Body: JSON request body accepted.
+
+### upload_brand_theme_background_image
+
+- Operation ID: `upload_brand_theme_background_image`
+- Route: `POST /api/v1/brands/{brandId}/themes/{themeId}/background-image`
+- Mode: WRITE
+- Summary: Upload the background image
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_brand_theme_background_image
+
+- Operation ID: `delete_brand_theme_background_image`
+- Route: `DELETE /api/v1/brands/{brandId}/themes/{themeId}/background-image`
+- Mode: WRITE
+- Summary: Delete the background image
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+
+### upload_brand_theme_favicon
+
+- Operation ID: `upload_brand_theme_favicon`
+- Route: `POST /api/v1/brands/{brandId}/themes/{themeId}/favicon`
+- Mode: WRITE
+- Summary: Upload the favicon
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_brand_theme_favicon
+
+- Operation ID: `delete_brand_theme_favicon`
+- Route: `DELETE /api/v1/brands/{brandId}/themes/{themeId}/favicon`
+- Mode: WRITE
+- Summary: Delete the favicon
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+
+### upload_brand_theme_logo
+
+- Operation ID: `upload_brand_theme_logo`
+- Route: `POST /api/v1/brands/{brandId}/themes/{themeId}/logo`
+- Mode: WRITE
+- Summary: Upload the logo
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_brand_theme_logo
+
+- Operation ID: `delete_brand_theme_logo`
+- Route: `DELETE /api/v1/brands/{brandId}/themes/{themeId}/logo`
+- Mode: WRITE
+- Summary: Delete the logo
+- Parameters:
+  - `brandId` in `path` required
+  - `themeId` in `path` required
+
+### get_all_well_known_ur_is
+
+- Operation ID: `get_all_well_known_ur_is`
+- Route: `GET /api/v1/brands/{brandId}/well-known-uris`
+- Mode: READ
+- Summary: Retrieve all the well-known URIs
+- Parameters:
+  - `brandId` in `path` required
+  - `expand` in `query`
+
+### get_root_brand_well_known_uri
+
+- Operation ID: `get_root_brand_well_known_uri`
+- Route: `GET /api/v1/brands/{brandId}/well-known-uris/{path}`
+- Mode: READ
+- Summary: Retrieve the well-known URI of a specific brand
+- Parameters:
+  - `brandId` in `path` required
+  - `path` in `path` required
+  - `expand` in `query`
+
+### get_brand_well_known_uri
+
+- Operation ID: `get_brand_well_known_uri`
+- Route: `GET /api/v1/brands/{brandId}/well-known-uris/{path}/customized`
+- Mode: READ
+- Summary: Retrieve the customized content of the specified well-known URI
+- Parameters:
+  - `brandId` in `path` required
+  - `path` in `path` required
+
+### replace_brand_well_known_uri
+
+- Operation ID: `replace_brand_well_known_uri`
+- Route: `PUT /api/v1/brands/{brandId}/well-known-uris/{path}/customized`
+- Mode: WRITE
+- Summary: Replace the customized well-known URI of the specific path
+- Parameters:
+  - `brandId` in `path` required
+  - `path` in `path` required
+- Body: JSON request body accepted.

skills/captchas/SKILL.md

@@ -0,0 +1,67 @@
+---
+name: captchas-routes
+description: Handle 6 OpenAPI operation(s) under /api/v1/captchas for the captchas route group.
+---
+
+# captchas API Routes
+
+Handle 6 OpenAPI operation(s) under /api/v1/captchas for the captchas route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_captcha_instances
+
+- Operation ID: `list_captcha_instances`
+- Route: `GET /api/v1/captchas`
+- Mode: READ
+- Summary: List all CAPTCHA instances
+
+### create_captcha_instance
+
+- Operation ID: `create_captcha_instance`
+- Route: `POST /api/v1/captchas`
+- Mode: WRITE
+- Summary: Create a CAPTCHA instance
+- Body: JSON request body accepted.
+
+### get_captcha_instance
+
+- Operation ID: `get_captcha_instance`
+- Route: `GET /api/v1/captchas/{captchaId}`
+- Mode: READ
+- Summary: Retrieve a CAPTCHA instance
+- Parameters:
+  - `captchaId` in `path` required
+
+### update_captcha_instance
+
+- Operation ID: `update_captcha_instance`
+- Route: `POST /api/v1/captchas/{captchaId}`
+- Mode: WRITE
+- Summary: Update a CAPTCHA instance
+- Parameters:
+  - `captchaId` in `path` required
+- Body: JSON request body accepted.
+
+### replace_captcha_instance
+
+- Operation ID: `replace_captcha_instance`
+- Route: `PUT /api/v1/captchas/{captchaId}`
+- Mode: WRITE
+- Summary: Replace a CAPTCHA instance
+- Parameters:
+  - `captchaId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_captcha_instance
+
+- Operation ID: `delete_captcha_instance`
+- Route: `DELETE /api/v1/captchas/{captchaId}`
+- Mode: WRITE
+- Summary: Delete a CAPTCHA instance
+- Parameters:
+  - `captchaId` in `path` required

skills/device-assurances/SKILL.md

@@ -0,0 +1,57 @@
+---
+name: device-assurances-routes
+description: Handle 5 OpenAPI operation(s) under /api/v1/device-assurances for the device assurances route group.
+---
+
+# device assurances API Routes
+
+Handle 5 OpenAPI operation(s) under /api/v1/device-assurances for the device assurances route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_device_assurance_policies
+
+- Operation ID: `list_device_assurance_policies`
+- Route: `GET /api/v1/device-assurances`
+- Mode: READ
+- Summary: List all device assurance policies
+
+### create_device_assurance_policy
+
+- Operation ID: `create_device_assurance_policy`
+- Route: `POST /api/v1/device-assurances`
+- Mode: WRITE
+- Summary: Create a device assurance policy
+- Body: JSON request body accepted.
+
+### get_device_assurance_policy
+
+- Operation ID: `get_device_assurance_policy`
+- Route: `GET /api/v1/device-assurances/{deviceAssuranceId}`
+- Mode: READ
+- Summary: Retrieve a device assurance policy
+- Parameters:
+  - `deviceAssuranceId` in `path` required
+
+### replace_device_assurance_policy
+
+- Operation ID: `replace_device_assurance_policy`
+- Route: `PUT /api/v1/device-assurances/{deviceAssuranceId}`
+- Mode: WRITE
+- Summary: Replace a device assurance policy
+- Parameters:
+  - `deviceAssuranceId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_device_assurance_policy
+
+- Operation ID: `delete_device_assurance_policy`
+- Route: `DELETE /api/v1/device-assurances/{deviceAssuranceId}`
+- Mode: WRITE
+- Summary: Delete a device assurance policy
+- Parameters:
+  - `deviceAssuranceId` in `path` required

skills/device-integrations/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: device-integrations-routes
+description: Handle 4 OpenAPI operation(s) under /api/v1/device-integrations for the device integrations route group.
+---
+
+# device integrations API Routes
+
+Handle 4 OpenAPI operation(s) under /api/v1/device-integrations for the device integrations route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_device_integrations
+
+- Operation ID: `list_device_integrations`
+- Route: `GET /api/v1/device-integrations`
+- Mode: READ
+- Summary: List all device integrations
+
+### get_device_integration
+
+- Operation ID: `get_device_integration`
+- Route: `GET /api/v1/device-integrations/{deviceIntegrationId}`
+- Mode: READ
+- Summary: Retrieve a device integration
+- Parameters:
+  - `deviceIntegrationId` in `path` required
+
+### activate_device_integration
+
+- Operation ID: `activate_device_integration`
+- Route: `POST /api/v1/device-integrations/{deviceIntegrationId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a device integration
+- Parameters:
+  - `deviceIntegrationId` in `path` required
+
+### deactivate_device_integration
+
+- Operation ID: `deactivate_device_integration`
+- Route: `POST /api/v1/device-integrations/{deviceIntegrationId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a device integration
+- Parameters:
+  - `deviceIntegrationId` in `path` required

skills/device-posture-checks/SKILL.md

@@ -0,0 +1,64 @@
+---
+name: device-posture-checks-routes
+description: Handle 6 OpenAPI operation(s) under /api/v1/device-posture-checks for the device posture checks route group.
+---
+
+# device posture checks API Routes
+
+Handle 6 OpenAPI operation(s) under /api/v1/device-posture-checks for the device posture checks route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_device_posture_checks
+
+- Operation ID: `list_device_posture_checks`
+- Route: `GET /api/v1/device-posture-checks`
+- Mode: READ
+- Summary: List all device posture checks
+
+### create_device_posture_check
+
+- Operation ID: `create_device_posture_check`
+- Route: `POST /api/v1/device-posture-checks`
+- Mode: WRITE
+- Summary: Create a device posture check
+- Body: JSON request body accepted.
+
+### list_default_device_posture_checks
+
+- Operation ID: `list_default_device_posture_checks`
+- Route: `GET /api/v1/device-posture-checks/default`
+- Mode: READ
+- Summary: List all default device posture checks
+
+### get_device_posture_check
+
+- Operation ID: `get_device_posture_check`
+- Route: `GET /api/v1/device-posture-checks/{postureCheckId}`
+- Mode: READ
+- Summary: Retrieve a device posture check
+- Parameters:
+  - `postureCheckId` in `path` required
+
+### replace_device_posture_check
+
+- Operation ID: `replace_device_posture_check`
+- Route: `PUT /api/v1/device-posture-checks/{postureCheckId}`
+- Mode: WRITE
+- Summary: Replace a device posture check
+- Parameters:
+  - `postureCheckId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_device_posture_check
+
+- Operation ID: `delete_device_posture_check`
+- Route: `DELETE /api/v1/device-posture-checks/{postureCheckId}`
+- Mode: WRITE
+- Summary: Delete a device posture check
+- Parameters:
+  - `postureCheckId` in `path` required

skills/devices/SKILL.md

@@ -0,0 +1,89 @@
+---
+name: devices-routes
+description: Handle 8 OpenAPI operation(s) under /api/v1/devices for the devices route group.
+---
+
+# devices API Routes
+
+Handle 8 OpenAPI operation(s) under /api/v1/devices for the devices route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_devices
+
+- Operation ID: `list_devices`
+- Route: `GET /api/v1/devices`
+- Mode: READ
+- Summary: List all devices
+- Parameters:
+  - `after` in `query`
+  - `limit` in `query`
+  - `search` in `query`
+  - `expand` in `query`
+
+### get_device
+
+- Operation ID: `get_device`
+- Route: `GET /api/v1/devices/{deviceId}`
+- Mode: READ
+- Summary: Retrieve a device
+- Parameters:
+  - `deviceId` in `path` required
+
+### delete_device
+
+- Operation ID: `delete_device`
+- Route: `DELETE /api/v1/devices/{deviceId}`
+- Mode: WRITE
+- Summary: Delete a device
+- Parameters:
+  - `deviceId` in `path` required
+
+### activate_device
+
+- Operation ID: `activate_device`
+- Route: `POST /api/v1/devices/{deviceId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a device
+- Parameters:
+  - `deviceId` in `path` required
+
+### deactivate_device
+
+- Operation ID: `deactivate_device`
+- Route: `POST /api/v1/devices/{deviceId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a device
+- Parameters:
+  - `deviceId` in `path` required
+
+### suspend_device
+
+- Operation ID: `suspend_device`
+- Route: `POST /api/v1/devices/{deviceId}/lifecycle/suspend`
+- Mode: WRITE
+- Summary: Suspend a Device
+- Parameters:
+  - `deviceId` in `path` required
+
+### unsuspend_device
+
+- Operation ID: `unsuspend_device`
+- Route: `POST /api/v1/devices/{deviceId}/lifecycle/unsuspend`
+- Mode: WRITE
+- Summary: Unsuspend a Device
+- Parameters:
+  - `deviceId` in `path` required
+
+### list_device_users
+
+- Operation ID: `list_device_users`
+- Route: `GET /api/v1/devices/{deviceId}/users`
+- Mode: READ
+- Summary: List all users for a device
+- Parameters:
+  - `deviceId` in `path` required

skills/directories/SKILL.md

@@ -0,0 +1,46 @@
+---
+name: directories-routes
+description: Handle 3 OpenAPI operation(s) under /api/v1/directories/{appInstanceId}/groups for the directories route group.
+---
+
+# directories API Routes
+
+Handle 3 OpenAPI operation(s) under /api/v1/directories/{appInstanceId}/groups for the directories route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### update_group_membership
+
+- Operation ID: `update_group_membership`
+- Route: `POST /api/v1/directories/{appInstanceId}/groups/modify`
+- Mode: WRITE
+- Summary: Update an external directory group membership
+- Parameters:
+  - `appInstanceId` in `path` required
+- Body: JSON request body accepted.
+
+### submit_group_attribute_query
+
+- Operation ID: `submit_group_attribute_query`
+- Route: `POST /api/v1/directories/{appInstanceId}/groups/{groupId}/query`
+- Mode: WRITE
+- Summary: Submit a query for AD Group
+- Parameters:
+  - `appInstanceId` in `path` required
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### get_group_attribute_query_result
+
+- Operation ID: `get_group_attribute_query_result`
+- Route: `GET /api/v1/directories/{appInstanceId}/groups/{groupId}/query/{resultId}`
+- Mode: READ
+- Summary: Retrieve the results of an AD group query
+- Parameters:
+  - `appInstanceId` in `path` required
+  - `groupId` in `path` required
+  - `resultId` in `path` required

skills/domains/SKILL.md

@@ -0,0 +1,76 @@
+---
+name: domains-routes
+description: Handle 7 OpenAPI operation(s) under /api/v1/domains for the domains route group.
+---
+
+# domains API Routes
+
+Handle 7 OpenAPI operation(s) under /api/v1/domains for the domains route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_custom_domains
+
+- Operation ID: `list_custom_domains`
+- Route: `GET /api/v1/domains`
+- Mode: READ
+- Summary: List all custom domains
+
+### create_custom_domain
+
+- Operation ID: `create_custom_domain`
+- Route: `POST /api/v1/domains`
+- Mode: WRITE
+- Summary: Create a custom domain
+- Body: JSON request body accepted.
+
+### get_custom_domain
+
+- Operation ID: `get_custom_domain`
+- Route: `GET /api/v1/domains/{domainId}`
+- Mode: READ
+- Summary: Retrieve a custom domain
+- Parameters:
+  - `domainId` in `path` required
+
+### replace_custom_domain
+
+- Operation ID: `replace_custom_domain`
+- Route: `PUT /api/v1/domains/{domainId}`
+- Mode: WRITE
+- Summary: Replace a custom domain's brand
+- Parameters:
+  - `domainId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_custom_domain
+
+- Operation ID: `delete_custom_domain`
+- Route: `DELETE /api/v1/domains/{domainId}`
+- Mode: WRITE
+- Summary: Delete a custom domain
+- Parameters:
+  - `domainId` in `path` required
+
+### upsert_certificate
+
+- Operation ID: `upsert_certificate`
+- Route: `PUT /api/v1/domains/{domainId}/certificate`
+- Mode: WRITE
+- Summary: Upsert the custom domain's certificate
+- Parameters:
+  - `domainId` in `path` required
+- Body: JSON request body accepted.
+
+### verify_domain
+
+- Operation ID: `verify_domain`
+- Route: `POST /api/v1/domains/{domainId}/verify`
+- Mode: WRITE
+- Summary: Verify a custom domain
+- Parameters:
+  - `domainId` in `path` required

skills/dr/SKILL.md

@@ -0,0 +1,46 @@
+---
+name: dr-routes
+description: Handle 4 OpenAPI operation(s) under /api/v1/dr for the dr route group.
+---
+
+# dr API Routes
+
+Handle 4 OpenAPI operation(s) under /api/v1/dr for the dr route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### start_org_failback
+
+- Operation ID: `start_org_failback`
+- Route: `POST /api/v1/dr/failback`
+- Mode: WRITE
+- Summary: Start the failback of your org
+- Body: JSON request body accepted.
+
+### start_org_failover
+
+- Operation ID: `start_org_failover`
+- Route: `POST /api/v1/dr/failover`
+- Mode: WRITE
+- Summary: Start the failover of your org
+- Body: JSON request body accepted.
+
+### get_dr_status
+
+- Operation ID: `get_dr_status`
+- Route: `GET /api/v1/dr/status`
+- Mode: READ
+- Summary: Retrieve the disaster recovery status for all domains
+
+### get_dr_status_for_domain
+
+- Operation ID: `get_dr_status_for_domain`
+- Route: `GET /api/v1/dr/status/{domain}`
+- Mode: READ
+- Summary: Retrieve the disaster recovery status for a domain
+- Parameters:
+  - `domain` in `path` required

skills/email-domains/SKILL.md

@@ -0,0 +1,73 @@
+---
+name: email-domains-routes
+description: Handle 6 OpenAPI operation(s) under /api/v1/email-domains for the email domains route group.
+---
+
+# email domains API Routes
+
+Handle 6 OpenAPI operation(s) under /api/v1/email-domains for the email domains route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_email_domains
+
+- Operation ID: `list_email_domains`
+- Route: `GET /api/v1/email-domains`
+- Mode: READ
+- Summary: List all email domains
+- Parameters:
+  - `expand` in `query`
+
+### create_email_domain
+
+- Operation ID: `create_email_domain`
+- Route: `POST /api/v1/email-domains`
+- Mode: WRITE
+- Summary: Create an email domain
+- Parameters:
+  - `expand` in `query`
+- Body: JSON request body accepted.
+
+### get_email_domain
+
+- Operation ID: `get_email_domain`
+- Route: `GET /api/v1/email-domains/{emailDomainId}`
+- Mode: READ
+- Summary: Retrieve an email domain
+- Parameters:
+  - `emailDomainId` in `path` required
+  - `expand` in `query`
+
+### replace_email_domain
+
+- Operation ID: `replace_email_domain`
+- Route: `PUT /api/v1/email-domains/{emailDomainId}`
+- Mode: WRITE
+- Summary: Replace an email domain
+- Parameters:
+  - `emailDomainId` in `path` required
+  - `expand` in `query`
+- Body: JSON request body accepted.
+
+### delete_email_domain
+
+- Operation ID: `delete_email_domain`
+- Route: `DELETE /api/v1/email-domains/{emailDomainId}`
+- Mode: WRITE
+- Summary: Delete an email domain
+- Parameters:
+  - `emailDomainId` in `path` required
+  - `expand` in `query`
+
+### verify_email_domain
+
+- Operation ID: `verify_email_domain`
+- Route: `POST /api/v1/email-domains/{emailDomainId}/verify`
+- Mode: WRITE
+- Summary: Verify an email domain
+- Parameters:
+  - `emailDomainId` in `path` required

skills/email-servers/SKILL.md

@@ -0,0 +1,67 @@
+---
+name: email-servers-routes
+description: Handle 6 OpenAPI operation(s) under /api/v1/email-servers for the email servers route group.
+---
+
+# email servers API Routes
+
+Handle 6 OpenAPI operation(s) under /api/v1/email-servers for the email servers route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_email_servers
+
+- Operation ID: `list_email_servers`
+- Route: `GET /api/v1/email-servers`
+- Mode: READ
+- Summary: List all enrolled SMTP servers
+
+### create_email_server
+
+- Operation ID: `create_email_server`
+- Route: `POST /api/v1/email-servers`
+- Mode: WRITE
+- Summary: Create a custom SMTP server
+- Body: JSON request body accepted.
+
+### get_email_server
+
+- Operation ID: `get_email_server`
+- Route: `GET /api/v1/email-servers/{emailServerId}`
+- Mode: READ
+- Summary: Retrieve an SMTP server configuration
+- Parameters:
+  - `emailServerId` in `path` required
+
+### update_email_server
+
+- Operation ID: `update_email_server`
+- Route: `PATCH /api/v1/email-servers/{emailServerId}`
+- Mode: WRITE
+- Summary: Update an SMTP server configuration
+- Parameters:
+  - `emailServerId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_email_server
+
+- Operation ID: `delete_email_server`
+- Route: `DELETE /api/v1/email-servers/{emailServerId}`
+- Mode: WRITE
+- Summary: Delete an SMTP server configuration
+- Parameters:
+  - `emailServerId` in `path` required
+
+### test_email_server
+
+- Operation ID: `test_email_server`
+- Route: `POST /api/v1/email-servers/{emailServerId}/test`
+- Mode: WRITE
+- Summary: Test an SMTP server configuration
+- Parameters:
+  - `emailServerId` in `path` required
+- Body: JSON request body accepted.

skills/event-hooks/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: event-hooks-routes
+description: Handle 8 OpenAPI operation(s) under /api/v1/eventHooks for the eventHooks route group.
+---
+
+# eventHooks API Routes
+
+Handle 8 OpenAPI operation(s) under /api/v1/eventHooks for the eventHooks route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_event_hooks
+
+- Operation ID: `list_event_hooks`
+- Route: `GET /api/v1/eventHooks`
+- Mode: READ
+- Summary: List all event hooks
+
+### create_event_hook
+
+- Operation ID: `create_event_hook`
+- Route: `POST /api/v1/eventHooks`
+- Mode: WRITE
+- Summary: Create an event hook
+- Body: JSON request body accepted.
+
+### get_event_hook
+
+- Operation ID: `get_event_hook`
+- Route: `GET /api/v1/eventHooks/{eventHookId}`
+- Mode: READ
+- Summary: Retrieve an event hook
+- Parameters:
+  - `eventHookId` in `path` required
+
+### replace_event_hook
+
+- Operation ID: `replace_event_hook`
+- Route: `PUT /api/v1/eventHooks/{eventHookId}`
+- Mode: WRITE
+- Summary: Replace an event hook
+- Parameters:
+  - `eventHookId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_event_hook
+
+- Operation ID: `delete_event_hook`
+- Route: `DELETE /api/v1/eventHooks/{eventHookId}`
+- Mode: WRITE
+- Summary: Delete an event hook
+- Parameters:
+  - `eventHookId` in `path` required
+
+### activate_event_hook
+
+- Operation ID: `activate_event_hook`
+- Route: `POST /api/v1/eventHooks/{eventHookId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an event hook
+- Parameters:
+  - `eventHookId` in `path` required
+
+### deactivate_event_hook
+
+- Operation ID: `deactivate_event_hook`
+- Route: `POST /api/v1/eventHooks/{eventHookId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an event hook
+- Parameters:
+  - `eventHookId` in `path` required
+
+### verify_event_hook
+
+- Operation ID: `verify_event_hook`
+- Route: `POST /api/v1/eventHooks/{eventHookId}/lifecycle/verify`
+- Mode: WRITE
+- Summary: Verify an event hook
+- Parameters:
+  - `eventHookId` in `path` required

skills/features/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: features-routes
+description: Handle 5 OpenAPI operation(s) under /api/v1/features for the features route group.
+---
+
+# features API Routes
+
+Handle 5 OpenAPI operation(s) under /api/v1/features for the features route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_features
+
+- Operation ID: `list_features`
+- Route: `GET /api/v1/features`
+- Mode: READ
+- Summary: List all features
+
+### get_feature
+
+- Operation ID: `get_feature`
+- Route: `GET /api/v1/features/{featureId}`
+- Mode: READ
+- Summary: Retrieve a feature
+- Parameters:
+  - `featureId` in `path` required
+
+### list_feature_dependencies
+
+- Operation ID: `list_feature_dependencies`
+- Route: `GET /api/v1/features/{featureId}/dependencies`
+- Mode: READ
+- Summary: List all dependencies
+- Parameters:
+  - `featureId` in `path` required
+
+### list_feature_dependents
+
+- Operation ID: `list_feature_dependents`
+- Route: `GET /api/v1/features/{featureId}/dependents`
+- Mode: READ
+- Summary: List all dependents
+- Parameters:
+  - `featureId` in `path` required
+
+### update_feature_lifecycle
+
+- Operation ID: `update_feature_lifecycle`
+- Route: `POST /api/v1/features/{featureId}/{lifecycle}`
+- Mode: WRITE
+- Summary: Update a feature lifecycle
+- Parameters:
+  - `featureId` in `path` required
+  - `lifecycle` in `path` required
+  - `mode` in `query`

skills/first-party-app-settings/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: first-party-app-settings-routes
+description: Handle 2 OpenAPI operation(s) under /api/v1/first-party-app-settings/{appName} for the first party app settings route group.
+---
+
+# first party app settings API Routes
+
+Handle 2 OpenAPI operation(s) under /api/v1/first-party-app-settings/{appName} for the first party app settings route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### get_first_party_app_settings
+
+- Operation ID: `get_first_party_app_settings`
+- Route: `GET /api/v1/first-party-app-settings/{appName}`
+- Mode: READ
+- Summary: Retrieve the Okta application settings
+- Parameters:
+  - `appName` in `path` required
+
+### replace_first_party_app_settings
+
+- Operation ID: `replace_first_party_app_settings`
+- Route: `PUT /api/v1/first-party-app-settings/{appName}`
+- Mode: WRITE
+- Summary: Replace the Okta application settings
+- Parameters:
+  - `appName` in `path` required
+- Body: JSON request body accepted.

skills/groups/SKILL.md

@@ -0,0 +1,341 @@
+---
+name: groups-routes
+description: Handle 31 OpenAPI operation(s) under /api/v1/groups for the groups route group.
+---
+
+# groups API Routes
+
+Handle 31 OpenAPI operation(s) under /api/v1/groups for the groups route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_groups
+
+- Operation ID: `list_groups`
+- Route: `GET /api/v1/groups`
+- Mode: READ
+- Summary: List all groups
+- Parameters:
+  - `search` in `query`
+  - `filter` in `query`
+  - `q` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `expand` in `query`
+  - `sortBy` in `query`
+  - `sortOrder` in `query`
+
+### add_group
+
+- Operation ID: `add_group`
+- Route: `POST /api/v1/groups`
+- Mode: WRITE
+- Summary: Add a group
+- Body: JSON request body accepted.
+
+### list_group_rules
+
+- Operation ID: `list_group_rules`
+- Route: `GET /api/v1/groups/rules`
+- Mode: READ
+- Summary: List all group rules
+- Parameters:
+  - `limit` in `query`
+  - `after` in `query`
+  - `search` in `query`
+  - `expand` in `query`
+
+### create_group_rule
+
+- Operation ID: `create_group_rule`
+- Route: `POST /api/v1/groups/rules`
+- Mode: WRITE
+- Summary: Create a group rule
+- Body: JSON request body accepted.
+
+### get_group_rule
+
+- Operation ID: `get_group_rule`
+- Route: `GET /api/v1/groups/rules/{groupRuleId}`
+- Mode: READ
+- Summary: Retrieve a group rule
+- Parameters:
+  - `groupRuleId` in `path` required
+  - `expand` in `query`
+
+### replace_group_rule
+
+- Operation ID: `replace_group_rule`
+- Route: `PUT /api/v1/groups/rules/{groupRuleId}`
+- Mode: WRITE
+- Summary: Replace a group rule
+- Parameters:
+  - `groupRuleId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_group_rule
+
+- Operation ID: `delete_group_rule`
+- Route: `DELETE /api/v1/groups/rules/{groupRuleId}`
+- Mode: WRITE
+- Summary: Delete a group rule
+- Parameters:
+  - `groupRuleId` in `path` required
+  - `removeUsers` in `query`
+
+### activate_group_rule
+
+- Operation ID: `activate_group_rule`
+- Route: `POST /api/v1/groups/rules/{groupRuleId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a group rule
+- Parameters:
+  - `groupRuleId` in `path` required
+
+### deactivate_group_rule
+
+- Operation ID: `deactivate_group_rule`
+- Route: `POST /api/v1/groups/rules/{groupRuleId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a group rule
+- Parameters:
+  - `groupRuleId` in `path` required
+
+### get_group
+
+- Operation ID: `get_group`
+- Route: `GET /api/v1/groups/{groupId}`
+- Mode: READ
+- Summary: Retrieve a group
+- Parameters:
+  - `groupId` in `path` required
+
+### replace_group
+
+- Operation ID: `replace_group`
+- Route: `PUT /api/v1/groups/{groupId}`
+- Mode: WRITE
+- Summary: Replace a group
+- Parameters:
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_group
+
+- Operation ID: `delete_group`
+- Route: `DELETE /api/v1/groups/{groupId}`
+- Mode: WRITE
+- Summary: Delete a group
+- Parameters:
+  - `groupId` in `path` required
+
+### list_assigned_applications_for_group
+
+- Operation ID: `list_assigned_applications_for_group`
+- Route: `GET /api/v1/groups/{groupId}/apps`
+- Mode: READ
+- Summary: List all assigned apps
+- Parameters:
+  - `groupId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### list_group_owners
+
+- Operation ID: `list_group_owners`
+- Route: `GET /api/v1/groups/{groupId}/owners`
+- Mode: READ
+- Summary: List all group owners
+- Parameters:
+  - `groupId` in `path` required
+  - `search` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+
+### assign_group_owner
+
+- Operation ID: `assign_group_owner`
+- Route: `POST /api/v1/groups/{groupId}/owners`
+- Mode: WRITE
+- Summary: Assign a group owner
+- Parameters:
+  - `groupId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_group_owner
+
+- Operation ID: `delete_group_owner`
+- Route: `DELETE /api/v1/groups/{groupId}/owners/{ownerId}`
+- Mode: WRITE
+- Summary: Delete a group owner
+- Parameters:
+  - `groupId` in `path` required
+  - `ownerId` in `path` required
+
+### list_group_assigned_roles
+
+- Operation ID: `list_group_assigned_roles`
+- Route: `GET /api/v1/groups/{groupId}/roles`
+- Mode: READ
+- Summary: List all group role assignments
+- Parameters:
+  - `groupId` in `path` required
+  - `expand` in `query`
+
+### assign_role_to_group
+
+- Operation ID: `assign_role_to_group`
+- Route: `POST /api/v1/groups/{groupId}/roles`
+- Mode: WRITE
+- Summary: Assign a role to a group
+- Parameters:
+  - `groupId` in `path` required
+  - `disableNotifications` in `query`
+- Body: JSON request body accepted.
+
+### get_group_assigned_role
+
+- Operation ID: `get_group_assigned_role`
+- Route: `GET /api/v1/groups/{groupId}/roles/{roleAssignmentId}`
+- Mode: READ
+- Summary: Retrieve a group role assignment
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+
+### unassign_role_from_group
+
+- Operation ID: `unassign_role_from_group`
+- Route: `DELETE /api/v1/groups/{groupId}/roles/{roleAssignmentId}`
+- Mode: WRITE
+- Summary: Unassign a group role
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+
+### list_application_targets_for_application_administrator_role_for_group
+
+- Operation ID: `list_application_targets_for_application_administrator_role_for_group`
+- Route: `GET /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps`
+- Mode: READ
+- Summary: List all group role app targets
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### assign_app_target_to_admin_role_for_group
+
+- Operation ID: `assign_app_target_to_admin_role_for_group`
+- Route: `PUT /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}`
+- Mode: WRITE
+- Summary: Assign a group role app target
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `appName` in `path` required
+
+### unassign_app_target_to_admin_role_for_group
+
+- Operation ID: `unassign_app_target_to_admin_role_for_group`
+- Route: `DELETE /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}`
+- Mode: WRITE
+- Summary: Unassign a group role app target
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `appName` in `path` required
+
+### assign_app_instance_target_to_app_admin_role_for_group
+
+- Operation ID: `assign_app_instance_target_to_app_admin_role_for_group`
+- Route: `PUT /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}/{appId}`
+- Mode: WRITE
+- Summary: Assign a group role app instance target
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `appName` in `path` required
+  - `appId` in `path` required
+
+### unassign_app_instance_target_to_app_admin_role_for_group
+
+- Operation ID: `unassign_app_instance_target_to_app_admin_role_for_group`
+- Route: `DELETE /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/catalog/apps/{appName}/{appId}`
+- Mode: WRITE
+- Summary: Unassign a group role app instance target
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `appName` in `path` required
+  - `appId` in `path` required
+
+### list_group_targets_for_group_role
+
+- Operation ID: `list_group_targets_for_group_role`
+- Route: `GET /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups`
+- Mode: READ
+- Summary: List all group role group targets
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### assign_group_target_to_group_admin_role
+
+- Operation ID: `assign_group_target_to_group_admin_role`
+- Route: `PUT /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups/{targetGroupId}`
+- Mode: WRITE
+- Summary: Assign a group role group target
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `targetGroupId` in `path` required
+
+### unassign_group_target_from_group_admin_role
+
+- Operation ID: `unassign_group_target_from_group_admin_role`
+- Route: `DELETE /api/v1/groups/{groupId}/roles/{roleAssignmentId}/targets/groups/{targetGroupId}`
+- Mode: WRITE
+- Summary: Unassign a group role group target
+- Parameters:
+  - `groupId` in `path` required
+  - `roleAssignmentId` in `path` required
+  - `targetGroupId` in `path` required
+
+### list_group_users
+
+- Operation ID: `list_group_users`
+- Route: `GET /api/v1/groups/{groupId}/users`
+- Mode: READ
+- Summary: List all member users
+- Parameters:
+  - `groupId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### assign_user_to_group
+
+- Operation ID: `assign_user_to_group`
+- Route: `PUT /api/v1/groups/{groupId}/users/{userId}`
+- Mode: WRITE
+- Summary: Assign a user to a group
+- Parameters:
+  - `groupId` in `path` required
+  - `userId` in `path` required
+
+### unassign_user_from_group
+
+- Operation ID: `unassign_user_from_group`
+- Route: `DELETE /api/v1/groups/{groupId}/users/{userId}`
+- Mode: WRITE
+- Summary: Unassign a user from a group
+- Parameters:
+  - `groupId` in `path` required
+  - `userId` in `path` required

skills/hook-keys/SKILL.md

@@ -0,0 +1,66 @@
+---
+name: hook-keys-routes
+description: Handle 6 OpenAPI operation(s) under /api/v1/hook-keys for the hook keys route group.
+---
+
+# hook keys API Routes
+
+Handle 6 OpenAPI operation(s) under /api/v1/hook-keys for the hook keys route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_hook_keys
+
+- Operation ID: `list_hook_keys`
+- Route: `GET /api/v1/hook-keys`
+- Mode: READ
+- Summary: List all keys
+
+### create_hook_key
+
+- Operation ID: `create_hook_key`
+- Route: `POST /api/v1/hook-keys`
+- Mode: WRITE
+- Summary: Create a key
+- Body: JSON request body accepted.
+
+### get_public_key
+
+- Operation ID: `get_public_key`
+- Route: `GET /api/v1/hook-keys/public/{keyId}`
+- Mode: READ
+- Summary: Retrieve a public key
+- Parameters:
+  - `keyId` in `path` required
+
+### get_hook_key
+
+- Operation ID: `get_hook_key`
+- Route: `GET /api/v1/hook-keys/{id}`
+- Mode: READ
+- Summary: Retrieve a key by ID
+- Parameters:
+  - `id` in `path` required
+
+### replace_hook_key
+
+- Operation ID: `replace_hook_key`
+- Route: `PUT /api/v1/hook-keys/{id}`
+- Mode: WRITE
+- Summary: Replace a key
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### delete_hook_key
+
+- Operation ID: `delete_hook_key`
+- Route: `DELETE /api/v1/hook-keys/{id}`
+- Mode: WRITE
+- Summary: Delete a key
+- Parameters:
+  - `id` in `path` required

skills/iam/SKILL.md

@@ -0,0 +1,401 @@
+---
+name: iam-routes
+description: Handle 40 OpenAPI operation(s) under /api/v1/iam for the iam route group.
+---
+
+# iam API Routes
+
+Handle 40 OpenAPI operation(s) under /api/v1/iam for the iam route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_users_with_role_assignments
+
+- Operation ID: `list_users_with_role_assignments`
+- Route: `GET /api/v1/iam/assignees/users`
+- Mode: READ
+- Summary: List all users with role assignments
+- Parameters:
+  - `after` in `query`
+  - `limit` in `query`
+
+### list_governance_bundles
+
+- Operation ID: `list_governance_bundles`
+- Route: `GET /api/v1/iam/governance/bundles`
+- Mode: READ
+- Summary: List all governance bundles
+- Parameters:
+  - `after` in `query`
+  - `limit` in `query`
+
+### create_governance_bundle
+
+- Operation ID: `create_governance_bundle`
+- Route: `POST /api/v1/iam/governance/bundles`
+- Mode: WRITE
+- Summary: Create a governance bundle
+- Body: JSON request body accepted.
+
+### get_governance_bundle
+
+- Operation ID: `get_governance_bundle`
+- Route: `GET /api/v1/iam/governance/bundles/{bundleId}`
+- Mode: READ
+- Summary: Retrieve a governance bundle
+- Parameters:
+  - `bundleId` in `path` required
+
+### replace_governance_bundle
+
+- Operation ID: `replace_governance_bundle`
+- Route: `PUT /api/v1/iam/governance/bundles/{bundleId}`
+- Mode: WRITE
+- Summary: Replace a governance bundle
+- Parameters:
+  - `bundleId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_governance_bundle
+
+- Operation ID: `delete_governance_bundle`
+- Route: `DELETE /api/v1/iam/governance/bundles/{bundleId}`
+- Mode: WRITE
+- Summary: Delete a governance bundle
+- Parameters:
+  - `bundleId` in `path` required
+
+### list_bundle_entitlements
+
+- Operation ID: `list_bundle_entitlements`
+- Route: `GET /api/v1/iam/governance/bundles/{bundleId}/entitlements`
+- Mode: READ
+- Summary: List all entitlements for a governance bundle
+- Parameters:
+  - `bundleId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### list_bundle_entitlement_values
+
+- Operation ID: `list_bundle_entitlement_values`
+- Route: `GET /api/v1/iam/governance/bundles/{bundleId}/entitlements/{entitlementId}/values`
+- Mode: READ
+- Summary: List all values for a governance bundle entitlement
+- Parameters:
+  - `bundleId` in `path` required
+  - `entitlementId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### get_opt_in_status
+
+- Operation ID: `get_opt_in_status`
+- Route: `GET /api/v1/iam/governance/optIn`
+- Mode: READ
+- Summary: Retrieve the Admin Console opt-in status
+
+### opt_in
+
+- Operation ID: `opt_in`
+- Route: `POST /api/v1/iam/governance/optIn`
+- Mode: WRITE
+- Summary: Opt in the Admin Console to entitlement management
+
+### opt_out
+
+- Operation ID: `opt_out`
+- Route: `POST /api/v1/iam/governance/optOut`
+- Mode: WRITE
+- Summary: Opt out the Admin Console from entitlement management
+
+### list_resource_sets
+
+- Operation ID: `list_resource_sets`
+- Route: `GET /api/v1/iam/resource-sets`
+- Mode: READ
+- Summary: List all resource sets
+- Parameters:
+  - `after` in `query`
+
+### create_resource_set
+
+- Operation ID: `create_resource_set`
+- Route: `POST /api/v1/iam/resource-sets`
+- Mode: WRITE
+- Summary: Create a resource set
+- Body: JSON request body accepted.
+
+### get_resource_set
+
+- Operation ID: `get_resource_set`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}`
+- Mode: READ
+- Summary: Retrieve a resource set
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+
+### replace_resource_set
+
+- Operation ID: `replace_resource_set`
+- Route: `PUT /api/v1/iam/resource-sets/{resourceSetIdOrLabel}`
+- Mode: WRITE
+- Summary: Replace a resource set
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+- Body: JSON request body accepted.
+
+### delete_resource_set
+
+- Operation ID: `delete_resource_set`
+- Route: `DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}`
+- Mode: WRITE
+- Summary: Delete a resource set
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+
+### list_bindings
+
+- Operation ID: `list_bindings`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings`
+- Mode: READ
+- Summary: List all role resource set bindings
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `after` in `query`
+
+### create_resource_set_binding
+
+- Operation ID: `create_resource_set_binding`
+- Route: `POST /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings`
+- Mode: WRITE
+- Summary: Create a role resource set binding
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+- Body: JSON request body accepted.
+
+### get_binding
+
+- Operation ID: `get_binding`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}`
+- Mode: READ
+- Summary: Retrieve a role resource set binding
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `roleIdOrLabel` in `path` required
+
+### delete_binding
+
+- Operation ID: `delete_binding`
+- Route: `DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}`
+- Mode: WRITE
+- Summary: Delete a role resource set binding
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `roleIdOrLabel` in `path` required
+
+### list_members_of_binding
+
+- Operation ID: `list_members_of_binding`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members`
+- Mode: READ
+- Summary: List all role resource set binding members
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `roleIdOrLabel` in `path` required
+  - `after` in `query`
+
+### add_members_to_binding
+
+- Operation ID: `add_members_to_binding`
+- Route: `PATCH /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members`
+- Mode: WRITE
+- Summary: Add more role resource set binding members
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `roleIdOrLabel` in `path` required
+- Body: JSON request body accepted.
+
+### get_member_of_binding
+
+- Operation ID: `get_member_of_binding`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId}`
+- Mode: READ
+- Summary: Retrieve a role resource set binding member
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `roleIdOrLabel` in `path` required
+  - `memberId` in `path` required
+
+### unassign_member_from_binding
+
+- Operation ID: `unassign_member_from_binding`
+- Route: `DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/bindings/{roleIdOrLabel}/members/{memberId}`
+- Mode: WRITE
+- Summary: Unassign a role resource set binding member
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `roleIdOrLabel` in `path` required
+  - `memberId` in `path` required
+
+### list_resource_set_resources
+
+- Operation ID: `list_resource_set_resources`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources`
+- Mode: READ
+- Summary: List all resource set resources
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### add_resource_set_resource
+
+- Operation ID: `add_resource_set_resource`
+- Route: `POST /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources`
+- Mode: WRITE
+- Summary: Add a resource set resource with conditions
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+- Body: JSON request body accepted.
+
+### add_resource_set_resources
+
+- Operation ID: `add_resource_set_resources`
+- Route: `PATCH /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources`
+- Mode: WRITE
+- Summary: Add more resources to a resource set
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+- Body: JSON request body accepted.
+
+### get_resource_set_resource
+
+- Operation ID: `get_resource_set_resource`
+- Route: `GET /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}`
+- Mode: READ
+- Summary: Retrieve a resource set resource
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `resourceId` in `path` required
+
+### replace_resource_set_resource
+
+- Operation ID: `replace_resource_set_resource`
+- Route: `PUT /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}`
+- Mode: WRITE
+- Summary: Replace the resource set resource conditions
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `resourceId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_resource_set_resource
+
+- Operation ID: `delete_resource_set_resource`
+- Route: `DELETE /api/v1/iam/resource-sets/{resourceSetIdOrLabel}/resources/{resourceId}`
+- Mode: WRITE
+- Summary: Delete a resource set resource
+- Parameters:
+  - `resourceSetIdOrLabel` in `path` required
+  - `resourceId` in `path` required
+
+### list_roles
+
+- Operation ID: `list_roles`
+- Route: `GET /api/v1/iam/roles`
+- Mode: READ
+- Summary: List all custom roles
+- Parameters:
+  - `after` in `query`
+
+### create_role
+
+- Operation ID: `create_role`
+- Route: `POST /api/v1/iam/roles`
+- Mode: WRITE
+- Summary: Create a custom role
+- Body: JSON request body accepted.
+
+### get_role
+
+- Operation ID: `get_role`
+- Route: `GET /api/v1/iam/roles/{roleIdOrLabel}`
+- Mode: READ
+- Summary: Retrieve a role
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+
+### replace_role
+
+- Operation ID: `replace_role`
+- Route: `PUT /api/v1/iam/roles/{roleIdOrLabel}`
+- Mode: WRITE
+- Summary: Replace a custom role
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+- Body: JSON request body accepted.
+
+### delete_role
+
+- Operation ID: `delete_role`
+- Route: `DELETE /api/v1/iam/roles/{roleIdOrLabel}`
+- Mode: WRITE
+- Summary: Delete a custom role
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+
+### list_role_permissions
+
+- Operation ID: `list_role_permissions`
+- Route: `GET /api/v1/iam/roles/{roleIdOrLabel}/permissions`
+- Mode: READ
+- Summary: List all custom role permissions
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+
+### get_role_permission
+
+- Operation ID: `get_role_permission`
+- Route: `GET /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}`
+- Mode: READ
+- Summary: Retrieve a custom role permission
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+  - `permissionType` in `path` required
+
+### create_role_permission
+
+- Operation ID: `create_role_permission`
+- Route: `POST /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}`
+- Mode: WRITE
+- Summary: Create a custom role permission
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+  - `permissionType` in `path` required
+- Body: JSON request body accepted.
+
+### replace_role_permission
+
+- Operation ID: `replace_role_permission`
+- Route: `PUT /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}`
+- Mode: WRITE
+- Summary: Replace a custom role permission
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+  - `permissionType` in `path` required
+- Body: JSON request body accepted.
+
+### delete_role_permission
+
+- Operation ID: `delete_role_permission`
+- Route: `DELETE /api/v1/iam/roles/{roleIdOrLabel}/permissions/{permissionType}`
+- Mode: WRITE
+- Summary: Delete a custom role permission
+- Parameters:
+  - `roleIdOrLabel` in `path` required
+  - `permissionType` in `path` required

skills/identity-sources/SKILL.md

@@ -0,0 +1,255 @@
+---
+name: identity-sources-routes
+description: Handle 23 OpenAPI operation(s) under /api/v1/identity-sources/{identitySourceId} for the identity sources route group.
+---
+
+# identity sources API Routes
+
+Handle 23 OpenAPI operation(s) under /api/v1/identity-sources/{identitySourceId} for the identity sources route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### create_identity_source_groups
+
+- Operation ID: `create_identity_source_groups`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/groups`
+- Mode: WRITE
+- Summary: Create an identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+- Body: JSON request body accepted.
+
+### get_identity_source_group
+
+- Operation ID: `get_identity_source_group`
+- Route: `GET /api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}`
+- Mode: READ
+- Summary: Retrieve an identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `groupOrExternalId` in `path` required
+
+### update_identity_source_groups
+
+- Operation ID: `update_identity_source_groups`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}`
+- Mode: WRITE
+- Summary: Update an identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `groupOrExternalId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_identity_source_group
+
+- Operation ID: `delete_identity_source_group`
+- Route: `DELETE /api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}`
+- Mode: WRITE
+- Summary: Delete an identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `groupOrExternalId` in `path` required
+
+### get_identity_source_group_memberships
+
+- Operation ID: `get_identity_source_group_memberships`
+- Route: `GET /api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}/membership`
+- Mode: READ
+- Summary: Retrieve the memberships for the given identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `groupOrExternalId` in `path` required
+  - `after` in `query`
+  - `limit` in `query`
+
+### create_identity_source_groups_memberships
+
+- Operation ID: `create_identity_source_groups_memberships`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}/membership`
+- Mode: WRITE
+- Summary: Create the memberships for the given identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `groupOrExternalId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_identity_source_group_memberships
+
+- Operation ID: `delete_identity_source_group_memberships`
+- Route: `DELETE /api/v1/identity-sources/{identitySourceId}/groups/{groupOrExternalId}/membership/{memberExternalId}`
+- Mode: WRITE
+- Summary: Delete the memberships for the specified identity source group
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `groupOrExternalId` in `path` required
+  - `memberExternalId` in `path` required
+
+### list_identity_source_sessions
+
+- Operation ID: `list_identity_source_sessions`
+- Route: `GET /api/v1/identity-sources/{identitySourceId}/sessions`
+- Mode: READ
+- Summary: List all identity source sessions
+- Parameters:
+  - `identitySourceId` in `path` required
+
+### create_identity_source_session
+
+- Operation ID: `create_identity_source_session`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions`
+- Mode: WRITE
+- Summary: Create an identity source session
+- Parameters:
+  - `identitySourceId` in `path` required
+
+### get_identity_source_session
+
+- Operation ID: `get_identity_source_session`
+- Route: `GET /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}`
+- Mode: READ
+- Summary: Retrieve an identity source session
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+
+### delete_identity_source_session
+
+- Operation ID: `delete_identity_source_session`
+- Route: `DELETE /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}`
+- Mode: WRITE
+- Summary: Delete an identity source session
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+
+### upload_identity_source_data_for_delete
+
+- Operation ID: `upload_identity_source_data_for_delete`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-delete`
+- Mode: WRITE
+- Summary: Upload the data to be deleted in Okta
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+- Body: JSON request body accepted.
+
+### upload_identity_source_group_memberships_for_delete
+
+- Operation ID: `upload_identity_source_group_memberships_for_delete`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-group-memberships-delete`
+- Mode: WRITE
+- Summary: Upload the group memberships to be deleted in Okta
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+- Body: JSON request body accepted.
+
+### upload_identity_source_group_memberships_for_upsert
+
+- Operation ID: `upload_identity_source_group_memberships_for_upsert`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-group-memberships-upsert`
+- Mode: WRITE
+- Summary: Upload the group memberships to be upserted in Okta
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+- Body: JSON request body accepted.
+
+### upload_identity_source_groups_data_for_delete
+
+- Operation ID: `upload_identity_source_groups_data_for_delete`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-groups-delete`
+- Mode: WRITE
+- Summary: Upload the group external IDs to be deleted in Okta
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+- Body: JSON request body accepted.
+
+### upload_identity_source_groups_for_upsert
+
+- Operation ID: `upload_identity_source_groups_for_upsert`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-groups-upsert`
+- Mode: WRITE
+- Summary: Upload the group profiles without memberships to be upserted in Okta
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+- Body: JSON request body accepted.
+
+### upload_identity_source_data_for_upsert
+
+- Operation ID: `upload_identity_source_data_for_upsert`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/bulk-upsert`
+- Mode: WRITE
+- Summary: Upload the data to be upserted in Okta
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+- Body: JSON request body accepted.
+
+### start_import_from_identity_source
+
+- Operation ID: `start_import_from_identity_source`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/sessions/{sessionId}/start-import`
+- Mode: WRITE
+- Summary: Start the import from the identity source
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `sessionId` in `path` required
+
+### create_identity_source_user
+
+- Operation ID: `create_identity_source_user`
+- Route: `POST /api/v1/identity-sources/{identitySourceId}/users`
+- Mode: WRITE
+- Summary: Create an identity source user
+- Parameters:
+  - `identitySourceId` in `path` required
+- Body: JSON request body accepted.
+
+### get_identity_source_user
+
+- Operation ID: `get_identity_source_user`
+- Route: `GET /api/v1/identity-sources/{identitySourceId}/users/{externalId}`
+- Mode: READ
+- Summary: Retrieve an identity source user
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `externalId` in `path` required
+
+### replace_existing_identity_source_user
+
+- Operation ID: `replace_existing_identity_source_user`
+- Route: `PUT /api/v1/identity-sources/{identitySourceId}/users/{externalId}`
+- Mode: WRITE
+- Summary: Replace an existing identity source user
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `externalId` in `path` required
+- Body: JSON request body accepted.
+
+### update_identity_source_users
+
+- Operation ID: `update_identity_source_users`
+- Route: `PATCH /api/v1/identity-sources/{identitySourceId}/users/{externalId}`
+- Mode: WRITE
+- Summary: Update an identity source user
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `externalId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_identity_source_user
+
+- Operation ID: `delete_identity_source_user`
+- Route: `DELETE /api/v1/identity-sources/{identitySourceId}/users/{externalId}`
+- Mode: WRITE
+- Summary: Delete an identity source user
+- Parameters:
+  - `identitySourceId` in `path` required
+  - `externalId` in `path` required

skills/idps/SKILL.md

@@ -0,0 +1,279 @@
+---
+name: idps-routes
+description: Handle 27 OpenAPI operation(s) under /api/v1/idps for the idps route group.
+---
+
+# idps API Routes
+
+Handle 27 OpenAPI operation(s) under /api/v1/idps for the idps route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_identity_providers
+
+- Operation ID: `list_identity_providers`
+- Route: `GET /api/v1/idps`
+- Mode: READ
+- Summary: List all IdPs
+- Parameters:
+  - `q` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `type` in `query`
+
+### create_identity_provider
+
+- Operation ID: `create_identity_provider`
+- Route: `POST /api/v1/idps`
+- Mode: WRITE
+- Summary: Create an IdP
+- Body: JSON request body accepted.
+
+### list_identity_provider_keys
+
+- Operation ID: `list_identity_provider_keys`
+- Route: `GET /api/v1/idps/credentials/keys`
+- Mode: READ
+- Summary: List all IdP key credentials
+- Parameters:
+  - `after` in `query`
+  - `limit` in `query`
+
+### create_identity_provider_key
+
+- Operation ID: `create_identity_provider_key`
+- Route: `POST /api/v1/idps/credentials/keys`
+- Mode: WRITE
+- Summary: Create an IdP key credential
+- Body: JSON request body accepted.
+
+### get_identity_provider_key
+
+- Operation ID: `get_identity_provider_key`
+- Route: `GET /api/v1/idps/credentials/keys/{kid}`
+- Mode: READ
+- Summary: Retrieve an IdP key credential
+- Parameters:
+  - `kid` in `path` required
+
+### replace_identity_provider_key
+
+- Operation ID: `replace_identity_provider_key`
+- Route: `PUT /api/v1/idps/credentials/keys/{kid}`
+- Mode: WRITE
+- Summary: Replace an IdP key credential
+- Parameters:
+  - `kid` in `path` required
+- Body: JSON request body accepted.
+
+### delete_identity_provider_key
+
+- Operation ID: `delete_identity_provider_key`
+- Route: `DELETE /api/v1/idps/credentials/keys/{kid}`
+- Mode: WRITE
+- Summary: Delete an IdP key credential
+- Parameters:
+  - `kid` in `path` required
+
+### get_identity_provider
+
+- Operation ID: `get_identity_provider`
+- Route: `GET /api/v1/idps/{idpId}`
+- Mode: READ
+- Summary: Retrieve an IdP
+- Parameters:
+  - `idpId` in `path` required
+
+### replace_identity_provider
+
+- Operation ID: `replace_identity_provider`
+- Route: `PUT /api/v1/idps/{idpId}`
+- Mode: WRITE
+- Summary: Replace an IdP
+- Parameters:
+  - `idpId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_identity_provider
+
+- Operation ID: `delete_identity_provider`
+- Route: `DELETE /api/v1/idps/{idpId}`
+- Mode: WRITE
+- Summary: Delete an IdP
+- Parameters:
+  - `idpId` in `path` required
+
+### list_csrs_for_identity_provider
+
+- Operation ID: `list_csrs_for_identity_provider`
+- Route: `GET /api/v1/idps/{idpId}/credentials/csrs`
+- Mode: READ
+- Summary: List all certificate signing requests
+- Parameters:
+  - `idpId` in `path` required
+
+### generate_csr_for_identity_provider
+
+- Operation ID: `generate_csr_for_identity_provider`
+- Route: `POST /api/v1/idps/{idpId}/credentials/csrs`
+- Mode: WRITE
+- Summary: Generate a certificate signing request
+- Parameters:
+  - `idpId` in `path` required
+- Body: JSON request body accepted.
+
+### get_csr_for_identity_provider
+
+- Operation ID: `get_csr_for_identity_provider`
+- Route: `GET /api/v1/idps/{idpId}/credentials/csrs/{idpCsrId}`
+- Mode: READ
+- Summary: Retrieve a certificate signing request
+- Parameters:
+  - `idpId` in `path` required
+  - `idpCsrId` in `path` required
+
+### revoke_csr_for_identity_provider
+
+- Operation ID: `revoke_csr_for_identity_provider`
+- Route: `DELETE /api/v1/idps/{idpId}/credentials/csrs/{idpCsrId}`
+- Mode: WRITE
+- Summary: Revoke a certificate signing request
+- Parameters:
+  - `idpId` in `path` required
+  - `idpCsrId` in `path` required
+
+### publish_csr_for_identity_provider
+
+- Operation ID: `publish_csr_for_identity_provider`
+- Route: `POST /api/v1/idps/{idpId}/credentials/csrs/{idpCsrId}/lifecycle/publish`
+- Mode: WRITE
+- Summary: Publish a certificate signing request
+- Parameters:
+  - `idpId` in `path` required
+  - `idpCsrId` in `path` required
+- Body: JSON request body accepted.
+
+### list_identity_provider_signing_keys
+
+- Operation ID: `list_identity_provider_signing_keys`
+- Route: `GET /api/v1/idps/{idpId}/credentials/keys`
+- Mode: READ
+- Summary: List all signing key credentials for IdP
+- Parameters:
+  - `idpId` in `path` required
+
+### list_active_identity_provider_signing_key
+
+- Operation ID: `list_active_identity_provider_signing_key`
+- Route: `GET /api/v1/idps/{idpId}/credentials/keys/active`
+- Mode: READ
+- Summary: List the active signing key credential for IdP
+- Parameters:
+  - `idpId` in `path` required
+
+### generate_identity_provider_signing_key
+
+- Operation ID: `generate_identity_provider_signing_key`
+- Route: `POST /api/v1/idps/{idpId}/credentials/keys/generate`
+- Mode: WRITE
+- Summary: Generate a new signing key credential for IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `validityYears` in `query` required
+
+### get_identity_provider_signing_key
+
+- Operation ID: `get_identity_provider_signing_key`
+- Route: `GET /api/v1/idps/{idpId}/credentials/keys/{kid}`
+- Mode: READ
+- Summary: Retrieve a signing key credential for IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `kid` in `path` required
+
+### clone_identity_provider_key
+
+- Operation ID: `clone_identity_provider_key`
+- Route: `POST /api/v1/idps/{idpId}/credentials/keys/{kid}/clone`
+- Mode: WRITE
+- Summary: Clone a signing key credential for IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `kid` in `path` required
+  - `targetIdpId` in `query` required
+
+### activate_identity_provider
+
+- Operation ID: `activate_identity_provider`
+- Route: `POST /api/v1/idps/{idpId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an IdP
+- Parameters:
+  - `idpId` in `path` required
+
+### deactivate_identity_provider
+
+- Operation ID: `deactivate_identity_provider`
+- Route: `POST /api/v1/idps/{idpId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an IdP
+- Parameters:
+  - `idpId` in `path` required
+
+### list_identity_provider_application_users
+
+- Operation ID: `list_identity_provider_application_users`
+- Route: `GET /api/v1/idps/{idpId}/users`
+- Mode: READ
+- Summary: List all users for IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `q` in `query`
+  - `after` in `query`
+  - `limit` in `query`
+  - `expand` in `query`
+
+### get_identity_provider_application_user
+
+- Operation ID: `get_identity_provider_application_user`
+- Route: `GET /api/v1/idps/{idpId}/users/{userId}`
+- Mode: READ
+- Summary: Retrieve a user for IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `userId` in `path` required
+
+### link_user_to_identity_provider
+
+- Operation ID: `link_user_to_identity_provider`
+- Route: `POST /api/v1/idps/{idpId}/users/{userId}`
+- Mode: WRITE
+- Summary: Link a user to IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `userId` in `path` required
+- Body: JSON request body accepted.
+
+### unlink_user_from_identity_provider
+
+- Operation ID: `unlink_user_from_identity_provider`
+- Route: `DELETE /api/v1/idps/{idpId}/users/{userId}`
+- Mode: WRITE
+- Summary: Unlink a user from IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `userId` in `path` required
+
+### list_social_auth_tokens
+
+- Operation ID: `list_social_auth_tokens`
+- Route: `GET /api/v1/idps/{idpId}/users/{userId}/credentials/tokens`
+- Mode: READ
+- Summary: List all tokens from OIDC IdP
+- Parameters:
+  - `idpId` in `path` required
+  - `userId` in `path` required

skills/inline-hooks/SKILL.md

@@ -0,0 +1,97 @@
+---
+name: inline-hooks-routes
+description: Handle 9 OpenAPI operation(s) under /api/v1/inlineHooks for the inlineHooks route group.
+---
+
+# inlineHooks API Routes
+
+Handle 9 OpenAPI operation(s) under /api/v1/inlineHooks for the inlineHooks route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_inline_hooks
+
+- Operation ID: `list_inline_hooks`
+- Route: `GET /api/v1/inlineHooks`
+- Mode: READ
+- Summary: List all inline hooks
+- Parameters:
+  - `type` in `query`
+
+### create_inline_hook
+
+- Operation ID: `create_inline_hook`
+- Route: `POST /api/v1/inlineHooks`
+- Mode: WRITE
+- Summary: Create an inline hook
+- Body: JSON request body accepted.
+
+### get_inline_hook
+
+- Operation ID: `get_inline_hook`
+- Route: `GET /api/v1/inlineHooks/{inlineHookId}`
+- Mode: READ
+- Summary: Retrieve an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required
+
+### update_inline_hook
+
+- Operation ID: `update_inline_hook`
+- Route: `POST /api/v1/inlineHooks/{inlineHookId}`
+- Mode: WRITE
+- Summary: Update an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required
+- Body: JSON request body accepted.
+
+### replace_inline_hook
+
+- Operation ID: `replace_inline_hook`
+- Route: `PUT /api/v1/inlineHooks/{inlineHookId}`
+- Mode: WRITE
+- Summary: Replace an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_inline_hook
+
+- Operation ID: `delete_inline_hook`
+- Route: `DELETE /api/v1/inlineHooks/{inlineHookId}`
+- Mode: WRITE
+- Summary: Delete an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required
+
+### execute_inline_hook
+
+- Operation ID: `execute_inline_hook`
+- Route: `POST /api/v1/inlineHooks/{inlineHookId}/execute`
+- Mode: WRITE
+- Summary: Execute an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required
+- Body: JSON request body accepted.
+
+### activate_inline_hook
+
+- Operation ID: `activate_inline_hook`
+- Route: `POST /api/v1/inlineHooks/{inlineHookId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required
+
+### deactivate_inline_hook
+
+- Operation ID: `deactivate_inline_hook`
+- Route: `POST /api/v1/inlineHooks/{inlineHookId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate an inline hook
+- Parameters:
+  - `inlineHookId` in `path` required

skills/log-streams/SKILL.md

@@ -0,0 +1,79 @@
+---
+name: log-streams-routes
+description: Handle 7 OpenAPI operation(s) under /api/v1/logStreams for the logStreams route group.
+---
+
+# logStreams API Routes
+
+Handle 7 OpenAPI operation(s) under /api/v1/logStreams for the logStreams route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_log_streams
+
+- Operation ID: `list_log_streams`
+- Route: `GET /api/v1/logStreams`
+- Mode: READ
+- Summary: List all log streams
+- Parameters:
+  - `after` in `query`
+  - `limit` in `query`
+  - `filter` in `query`
+
+### create_log_stream
+
+- Operation ID: `create_log_stream`
+- Route: `POST /api/v1/logStreams`
+- Mode: WRITE
+- Summary: Create a log stream
+- Body: JSON request body accepted.
+
+### get_log_stream
+
+- Operation ID: `get_log_stream`
+- Route: `GET /api/v1/logStreams/{logStreamId}`
+- Mode: READ
+- Summary: Retrieve a log stream
+- Parameters:
+  - `logStreamId` in `path` required
+
+### replace_log_stream
+
+- Operation ID: `replace_log_stream`
+- Route: `PUT /api/v1/logStreams/{logStreamId}`
+- Mode: WRITE
+- Summary: Replace a log stream
+- Parameters:
+  - `logStreamId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_log_stream
+
+- Operation ID: `delete_log_stream`
+- Route: `DELETE /api/v1/logStreams/{logStreamId}`
+- Mode: WRITE
+- Summary: Delete a log stream
+- Parameters:
+  - `logStreamId` in `path` required
+
+### activate_log_stream
+
+- Operation ID: `activate_log_stream`
+- Route: `POST /api/v1/logStreams/{logStreamId}/lifecycle/activate`
+- Mode: WRITE
+- Summary: Activate a log stream
+- Parameters:
+  - `logStreamId` in `path` required
+
+### deactivate_log_stream
+
+- Operation ID: `deactivate_log_stream`
+- Route: `POST /api/v1/logStreams/{logStreamId}/lifecycle/deactivate`
+- Mode: WRITE
+- Summary: Deactivate a log stream
+- Parameters:
+  - `logStreamId` in `path` required

skills/logs/SKILL.md

@@ -0,0 +1,29 @@
+---
+name: logs-routes
+description: Handle 1 OpenAPI operation(s) under /api/v1/logs for the logs route group.
+---
+
+# logs API Routes
+
+Handle 1 OpenAPI operation(s) under /api/v1/logs for the logs route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_log_events
+
+- Operation ID: `list_log_events`
+- Route: `GET /api/v1/logs`
+- Mode: READ
+- Summary: List all System Log events
+- Parameters:
+  - `since` in `query`
+  - `until` in `query`
+  - `after` in `query`
+  - `filter` in `query`
+  - `q` in `query`
+  - `limit` in `query`
+  - `sortOrder` in `query`

skills/mappings/SKILL.md

@@ -0,0 +1,45 @@
+---
+name: mappings-routes
+description: Handle 3 OpenAPI operation(s) under /api/v1/mappings for the mappings route group.
+---
+
+# mappings API Routes
+
+Handle 3 OpenAPI operation(s) under /api/v1/mappings for the mappings route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### list_profile_mappings
+
+- Operation ID: `list_profile_mappings`
+- Route: `GET /api/v1/mappings`
+- Mode: READ
+- Summary: List all profile mappings
+- Parameters:
+  - `after` in `query`
+  - `limit` in `query`
+  - `sourceId` in `query`
+  - `targetId` in `query`
+
+### get_profile_mapping
+
+- Operation ID: `get_profile_mapping`
+- Route: `GET /api/v1/mappings/{mappingId}`
+- Mode: READ
+- Summary: Retrieve a profile mapping
+- Parameters:
+  - `mappingId` in `path` required
+
+### update_profile_mapping
+
+- Operation ID: `update_profile_mapping`
+- Route: `POST /api/v1/mappings/{mappingId}`
+- Mode: WRITE
+- Summary: Update a profile mapping
+- Parameters:
+  - `mappingId` in `path` required
+- Body: JSON request body accepted.

skills/meta/SKILL.md

@@ -0,0 +1,212 @@
+---
+name: meta-routes
+description: Handle 23 OpenAPI operation(s) under /api/v1/meta for the meta route group.
+---
+
+# meta API Routes
+
+Handle 23 OpenAPI operation(s) under /api/v1/meta for the meta route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### get_application_user_schema
+
+- Operation ID: `get_application_user_schema`
+- Route: `GET /api/v1/meta/schemas/apps/{appId}/default`
+- Mode: READ
+- Summary: Retrieve the default app user schema for an app
+- Parameters:
+  - `appId` in `path` required
+
+### update_application_user_profile
+
+- Operation ID: `update_application_user_profile`
+- Route: `POST /api/v1/meta/schemas/apps/{appId}/default`
+- Mode: WRITE
+- Summary: Update the app user profile schema for an app
+- Parameters:
+  - `appId` in `path` required
+- Body: JSON request body accepted.
+
+### get_group_schema
+
+- Operation ID: `get_group_schema`
+- Route: `GET /api/v1/meta/schemas/group/default`
+- Mode: READ
+- Summary: Retrieve the default group schema
+
+### update_group_schema
+
+- Operation ID: `update_group_schema`
+- Route: `POST /api/v1/meta/schemas/group/default`
+- Mode: WRITE
+- Summary: Update the group profile schema
+- Body: JSON request body accepted.
+
+### list_log_stream_schemas
+
+- Operation ID: `list_log_stream_schemas`
+- Route: `GET /api/v1/meta/schemas/logStream`
+- Mode: READ
+- Summary: List the log stream schemas
+
+### get_log_stream_schema
+
+- Operation ID: `get_log_stream_schema`
+- Route: `GET /api/v1/meta/schemas/logStream/{logStreamType}`
+- Mode: READ
+- Summary: Retrieve the log stream schema for the schema type
+- Parameters:
+  - `logStreamType` in `path` required
+
+### list_linked_object_definitions
+
+- Operation ID: `list_linked_object_definitions`
+- Route: `GET /api/v1/meta/schemas/user/linkedObjects`
+- Mode: READ
+- Summary: List all linked object definitions
+
+### create_linked_object_definition
+
+- Operation ID: `create_linked_object_definition`
+- Route: `POST /api/v1/meta/schemas/user/linkedObjects`
+- Mode: WRITE
+- Summary: Create a linked object definition
+- Body: JSON request body accepted.
+
+### get_linked_object_definition
+
+- Operation ID: `get_linked_object_definition`
+- Route: `GET /api/v1/meta/schemas/user/linkedObjects/{linkedObjectName}`
+- Mode: READ
+- Summary: Retrieve a linked object definition
+- Parameters:
+  - `linkedObjectName` in `path` required
+
+### delete_linked_object_definition
+
+- Operation ID: `delete_linked_object_definition`
+- Route: `DELETE /api/v1/meta/schemas/user/linkedObjects/{linkedObjectName}`
+- Mode: WRITE
+- Summary: Delete a linked object definition
+- Parameters:
+  - `linkedObjectName` in `path` required
+
+### get_user_schema
+
+- Operation ID: `get_user_schema`
+- Route: `GET /api/v1/meta/schemas/user/{schemaId}`
+- Mode: READ
+- Summary: Retrieve a user schema
+- Parameters:
+  - `schemaId` in `path` required
+
+### update_user_profile
+
+- Operation ID: `update_user_profile`
+- Route: `POST /api/v1/meta/schemas/user/{schemaId}`
+- Mode: WRITE
+- Summary: Update a user schema
+- Parameters:
+  - `schemaId` in `path` required
+- Body: JSON request body accepted.
+
+### list_user_types
+
+- Operation ID: `list_user_types`
+- Route: `GET /api/v1/meta/types/user`
+- Mode: READ
+- Summary: List all user types
+
+### create_user_type
+
+- Operation ID: `create_user_type`
+- Route: `POST /api/v1/meta/types/user`
+- Mode: WRITE
+- Summary: Create a user type
+- Body: JSON request body accepted.
+
+### get_user_type
+
+- Operation ID: `get_user_type`
+- Route: `GET /api/v1/meta/types/user/{typeId}`
+- Mode: READ
+- Summary: Retrieve a user type
+- Parameters:
+  - `typeId` in `path` required
+
+### update_user_type
+
+- Operation ID: `update_user_type`
+- Route: `POST /api/v1/meta/types/user/{typeId}`
+- Mode: WRITE
+- Summary: Update a user type
+- Parameters:
+  - `typeId` in `path` required
+- Body: JSON request body accepted.
+
+### replace_user_type
+
+- Operation ID: `replace_user_type`
+- Route: `PUT /api/v1/meta/types/user/{typeId}`
+- Mode: WRITE
+- Summary: Replace a user type
+- Parameters:
+  - `typeId` in `path` required
+- Body: JSON request body accepted.
+
+### delete_user_type
+
+- Operation ID: `delete_user_type`
+- Route: `DELETE /api/v1/meta/types/user/{typeId}`
+- Mode: WRITE
+- Summary: Delete a user type
+- Parameters:
+  - `typeId` in `path` required
+
+### list_ui_schemas
+
+- Operation ID: `list_ui_schemas`
+- Route: `GET /api/v1/meta/uischemas`
+- Mode: READ
+- Summary: List all UI schemas
+
+### create_ui_schema
+
+- Operation ID: `create_ui_schema`
+- Route: `POST /api/v1/meta/uischemas`
+- Mode: WRITE
+- Summary: Create a UI schema
+- Body: JSON request body accepted.
+
+### get_ui_schema
+
+- Operation ID: `get_ui_schema`
+- Route: `GET /api/v1/meta/uischemas/{id}`
+- Mode: READ
+- Summary: Retrieve a UI schema
+- Parameters:
+  - `id` in `path` required
+
+### replace_ui_schemas
+
+- Operation ID: `replace_ui_schemas`
+- Route: `PUT /api/v1/meta/uischemas/{id}`
+- Mode: WRITE
+- Summary: Replace a UI schema
+- Parameters:
+  - `id` in `path` required
+- Body: JSON request body accepted.
+
+### delete_ui_schemas
+
+- Operation ID: `delete_ui_schemas`
+- Route: `DELETE /api/v1/meta/uischemas/{id}`
+- Mode: WRITE
+- Summary: Delete a UI schema
+- Parameters:
+  - `id` in `path` required

skills/org/SKILL.md

@@ -0,0 +1,265 @@
+---
+name: org-routes
+description: Handle 31 OpenAPI operation(s) under /api/v1/org for the org route group.
+---
+
+# org API Routes
+
+Handle 31 OpenAPI operation(s) under /api/v1/org for the org route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### get_org_settings
+
+- Operation ID: `get_org_settings`
+- Route: `GET /api/v1/org`
+- Mode: READ
+- Summary: Retrieve the Org general settings
+
+### update_org_settings
+
+- Operation ID: `update_org_settings`
+- Route: `POST /api/v1/org`
+- Mode: WRITE
+- Summary: Update the Org general settings
+- Body: JSON request body accepted.
+
+### replace_org_settings
+
+- Operation ID: `replace_org_settings`
+- Route: `PUT /api/v1/org`
+- Mode: WRITE
+- Summary: Replace the Org general settings
+- Body: JSON request body accepted.
+
+### get_org_captcha_settings
+
+- Operation ID: `get_org_captcha_settings`
+- Route: `GET /api/v1/org/captcha`
+- Mode: READ
+- Summary: Retrieve the org-wide CAPTCHA settings
+
+### replaces_org_captcha_settings
+
+- Operation ID: `replaces_org_captcha_settings`
+- Route: `PUT /api/v1/org/captcha`
+- Mode: WRITE
+- Summary: Replace the org-wide CAPTCHA settings
+- Body: JSON request body accepted.
+
+### delete_org_captcha_settings
+
+- Operation ID: `delete_org_captcha_settings`
+- Route: `DELETE /api/v1/org/captcha`
+- Mode: WRITE
+- Summary: Delete the org-wide CAPTCHA settings
+
+### list_org_contact_types
+
+- Operation ID: `list_org_contact_types`
+- Route: `GET /api/v1/org/contacts`
+- Mode: READ
+- Summary: List all org contact types
+
+### get_org_contact_user
+
+- Operation ID: `get_org_contact_user`
+- Route: `GET /api/v1/org/contacts/{contactType}`
+- Mode: READ
+- Summary: Retrieve the contact type user
+- Parameters:
+  - `contactType` in `path` required
+
+### replace_org_contact_user
+
+- Operation ID: `replace_org_contact_user`
+- Route: `PUT /api/v1/org/contacts/{contactType}`
+- Mode: WRITE
+- Summary: Replace the contact type user
+- Parameters:
+  - `contactType` in `path` required
+- Body: JSON request body accepted.
+
+### bulk_remove_email_address_bounces
+
+- Operation ID: `bulk_remove_email_address_bounces`
+- Route: `POST /api/v1/org/email/bounces/remove-list`
+- Mode: WRITE
+- Summary: Remove bounced emails
+- Body: JSON request body accepted.
+
+### list_yubikey_otp_tokens
+
+- Operation ID: `list_yubikey_otp_tokens`
+- Route: `GET /api/v1/org/factors/yubikey_token/tokens`
+- Mode: READ
+- Summary: List all YubiKey OTP tokens
+- Parameters:
+  - `after` in `query`
+  - `expand` in `query`
+  - `filter` in `query`
+  - `forDownload` in `query`
+  - `limit` in `query`
+  - `sortBy` in `query`
+  - `sortOrder` in `query`
+
+### upload_yubikey_otp_token_seed
+
+- Operation ID: `upload_yubikey_otp_token_seed`
+- Route: `POST /api/v1/org/factors/yubikey_token/tokens`
+- Mode: WRITE
+- Summary: Upload a YubiKey OTP seed
+- Parameters:
+  - `after` in `query`
+  - `expand` in `query`
+  - `filter` in `query`
+  - `forDownload` in `query`
+  - `limit` in `query`
+  - `sortBy` in `query`
+  - `sortOrder` in `query`
+- Body: JSON request body accepted.
+
+### get_yubikey_otp_token_by_id
+
+- Operation ID: `get_yubikey_otp_token_by_id`
+- Route: `GET /api/v1/org/factors/yubikey_token/tokens/{tokenId}`
+- Mode: READ
+- Summary: Retrieve a YubiKey OTP token
+- Parameters:
+  - `tokenId` in `path` required
+
+### get_third_party_admin_setting
+
+- Operation ID: `get_third_party_admin_setting`
+- Route: `GET /api/v1/org/orgSettings/thirdPartyAdminSetting`
+- Mode: READ
+- Summary: Retrieve the org third-party admin setting
+
+### update_third_party_admin_setting
+
+- Operation ID: `update_third_party_admin_setting`
+- Route: `POST /api/v1/org/orgSettings/thirdPartyAdminSetting`
+- Mode: WRITE
+- Summary: Update the org third-party admin setting
+- Body: JSON request body accepted.
+
+### get_org_preferences
+
+- Operation ID: `get_org_preferences`
+- Route: `GET /api/v1/org/preferences`
+- Mode: READ
+- Summary: Retrieve the org preferences
+
+### set_org_hide_okta_ui_footer
+
+- Operation ID: `set_org_hide_okta_ui_footer`
+- Route: `POST /api/v1/org/preferences/hideEndUserFooter`
+- Mode: WRITE
+- Summary: Set the hide dashboard footer preference
+
+### set_org_show_okta_ui_footer
+
+- Operation ID: `set_org_show_okta_ui_footer`
+- Route: `POST /api/v1/org/preferences/showEndUserFooter`
+- Mode: WRITE
+- Summary: Set the show dashboard footer preference
+
+### get_aerial_consent
+
+- Operation ID: `get_aerial_consent`
+- Route: `GET /api/v1/org/privacy/aerial`
+- Mode: READ
+- Summary: Retrieve Okta Aerial consent for your org
+
+### grant_aerial_consent
+
+- Operation ID: `grant_aerial_consent`
+- Route: `POST /api/v1/org/privacy/aerial/grant`
+- Mode: WRITE
+- Summary: Grant Okta Aerial access to your org
+- Body: JSON request body accepted.
+
+### revoke_aerial_consent
+
+- Operation ID: `revoke_aerial_consent`
+- Route: `POST /api/v1/org/privacy/aerial/revoke`
+- Mode: WRITE
+- Summary: Revoke Okta Aerial access to your org
+- Body: JSON request body accepted.
+
+### get_okta_communication_settings
+
+- Operation ID: `get_okta_communication_settings`
+- Route: `GET /api/v1/org/privacy/oktaCommunication`
+- Mode: READ
+- Summary: Retrieve the Okta communication settings
+
+### opt_in_users_to_okta_communication_emails
+
+- Operation ID: `opt_in_users_to_okta_communication_emails`
+- Route: `POST /api/v1/org/privacy/oktaCommunication/optIn`
+- Mode: WRITE
+- Summary: Opt in to Okta user communication emails
+
+### opt_out_users_from_okta_communication_emails
+
+- Operation ID: `opt_out_users_from_okta_communication_emails`
+- Route: `POST /api/v1/org/privacy/oktaCommunication/optOut`
+- Mode: WRITE
+- Summary: Opt out of Okta user communication emails
+
+### get_org_okta_support_settings
+
+- Operation ID: `get_org_okta_support_settings`
+- Route: `GET /api/v1/org/privacy/oktaSupport`
+- Mode: READ
+- Summary: Retrieve the Okta Support settings
+
+### list_okta_support_cases
+
+- Operation ID: `list_okta_support_cases`
+- Route: `GET /api/v1/org/privacy/oktaSupport/cases`
+- Mode: READ
+- Summary: List all Okta Support cases
+
+### update_okta_support_case
+
+- Operation ID: `update_okta_support_case`
+- Route: `PATCH /api/v1/org/privacy/oktaSupport/cases/{caseNumber}`
+- Mode: WRITE
+- Summary: Update an Okta Support case
+- Parameters:
+  - `caseNumber` in `path` required
+- Body: JSON request body accepted.
+
+### extend_okta_support
+
+- Operation ID: `extend_okta_support`
+- Route: `POST /api/v1/org/privacy/oktaSupport/extend`
+- Mode: WRITE
+- Summary: Extend Okta Support access
+
+### grant_okta_support
+
+- Operation ID: `grant_okta_support`
+- Route: `POST /api/v1/org/privacy/oktaSupport/grant`
+- Mode: WRITE
+- Summary: Grant Okta Support access
+
+### revoke_okta_support
+
+- Operation ID: `revoke_okta_support`
+- Route: `POST /api/v1/org/privacy/oktaSupport/revoke`
+- Mode: WRITE
+- Summary: Revoke Okta Support access
+
+### get_auto_assign_admin_app_setting
+
+- Operation ID: `get_auto_assign_admin_app_setting`
+- Route: `GET /api/v1/org/settings/autoAssignAdminAppSetting`
+- Mode: READ
+- Summary: Retrieve the Okta Admin Console assignment setting

skills/well-known/SKILL.md

@@ -0,0 +1,58 @@
+---
+name: well-known-routes
+description: Handle 6 OpenAPI operation(s) under /.well-known for the well known route group.
+---
+
+# well known API Routes
+
+Handle 6 OpenAPI operation(s) under /.well-known for the well known route group.
+
+Use the generated operation tools to make real API calls. Do not invent API responses.
+If a tool reports missing setup, return the exact setup field name to the caller.
+For write, update, or delete operations, state the intended action before calling the tool.
+
+## Operations
+
+### get_well_known_app_authenticator_configuration
+
+- Operation ID: `get_well_known_app_authenticator_configuration`
+- Route: `GET /.well-known/app-authenticator-configuration`
+- Mode: READ
+- Summary: Retrieve the well-known app authenticator configuration
+- Parameters:
+  - `oauthClientId` in `query` required
+
+### get_apple_app_site_association_well_known_uri
+
+- Operation ID: `get_apple_app_site_association_well_known_uri`
+- Route: `GET /.well-known/apple-app-site-association`
+- Mode: READ
+- Summary: Retrieve the customized apple-app-site-association URI content
+
+### get_asset_links_well_known_uri
+
+- Operation ID: `get_asset_links_well_known_uri`
+- Route: `GET /.well-known/assetlinks.json`
+- Mode: READ
+- Summary: Retrieve the customized assetlinks.json URI content
+
+### get_wellknown_org_metadata
+
+- Operation ID: `get_wellknown_org_metadata`
+- Route: `GET /.well-known/okta-organization`
+- Mode: READ
+- Summary: Retrieve the Org metadata
+
+### get_wellknown_ssf_metadata
+
+- Operation ID: `get_wellknown_ssf_metadata`
+- Route: `GET /.well-known/ssf-configuration`
+- Mode: READ
+- Summary: Retrieve the SSF transmitter metadata
+
+### get_web_authn_well_known_uri
+
+- Operation ID: `get_web_authn_well_known_uri`
+- Route: `GET /.well-known/webauthn`
+- Mode: READ
+- Summary: Retrieve the customized webauthn URI content