Skills

A skill holds credentials for one provider, such as GitHub or Datadog, and injects them into the sandbox as environment variables for the duration of a run. Attach skills to a preset or pass them to ag session create with --skill. See Connect your harness for the token scopes each provider needs. ag skill, ag skills, ag integration, and ag integrations are the same command.

These are the credentials managed agents use inside the sandbox. They are different from Arize Skills, which teach your own local coding agent how to use Arize.

Secret values are sent once on create or update and stored encrypted. Pass them from environment variables or a secret manager rather than typing them into a shell history, and never commit them.

`ag skill list`

List skills, optionally filtered by provider.

ag skill list [--provider <key>] [--limit <n>] [--columns <list>] [--output <fmt>]

Option	Description
`--provider`	Only show skills for this provider key, for example `github`
`--limit`	Maximum skills to list (default: 50)
`--columns`	Comma-separated columns for text output (default: `id,name,provider,has_api_key,updated_at`). Also available: `created_at`

Examples:

ag skill list
ag skill list --provider github

`ag skill create`

Create a skill. Pass one --env KEY=VALUE per environment variable the provider needs.

ag skill create --name <name> --provider <key> --env <KEY=VALUE>...

Option	Description
`--name`	Skill name (required)
`--provider`	Provider key (required), for example `github`, `arize`, or `datadog`
`--env`	One `KEY=VALUE` entry (required, repeatable). Each entry needs a non-empty value, and keys cannot repeat.

Examples:

# Single-secret provider
ag skill create --name github-default --provider github --env GH_TOKEN="$GH_TOKEN"

# Multi-secret provider
ag skill create --name dd-default --provider datadog \
  --env DD_API_KEY="$DD_API_KEY" \
  --env DD_APP_KEY="$DD_APP_KEY"

`ag skill update`

Rename a skill, change its provider, or rotate its secrets. Passing any --env replaces the whole stored set, so include every variable the provider needs. Omit --env to leave the secrets unchanged.

ag skill update <skill-id> [--name <name>] [--provider <key>] [--env <KEY=VALUE>]...

Option	Description
`--name`	New name
`--provider`	New provider key
`--env`	Replacement `KEY=VALUE` entries (repeatable). Replaces all stored entries.

Examples:

ag skill update <skill-id> --name github-main
ag skill update <skill-id> --env DD_API_KEY="$DD_API_KEY" --env DD_APP_KEY="$DD_APP_KEY"

`ag skill delete`

Delete a skill. Presets that reference it lose the credential on their next run.

ag skill delete <skill-id>

MCP server

API reference

API clients

Skills

`ag skill list`

`ag skill create`

`ag skill update`

`ag skill delete`

​ag skill list

​ag skill create

​ag skill update

​ag skill delete

`ag skill list`

`ag skill create`

`ag skill update`

`ag skill delete`