Ravi sso

核心功能是生成5分钟有效期的SSO令牌，用于向支持“Login with Ravi”的第三方服务证明Ravi身份。典型场景为第三方服务的登录验证环节。输入为执行命令`ravi sso token`，输出含token和过期时间的JSON。令牌不可缓存，需获取后立即按第三方要求传递；仅付费订阅用户可用，免费计划会返回402。第三方通过专属API验证令牌，用户无需操作该验证环节。

raunaksingwi

热度 34.20

最近更新 2026-05-11 17:41:13

分类：安全依赖：第三方 API应用场景：API 集成

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add ravi-sso

Metadata

name: ravi-sso
description: Get short-lived identity verification tokens to prove your Ravi identity to third-party services. Do NOT use for agent authentication (use ravi-login) or credential storage (use ravi-secrets).

Ravi SSO

Get a short-lived token to prove your Ravi identity to a third-party service that supports "Login with Ravi".

Get an SSO Token

ravi sso token

Response shape:

{
  "token": "rvt_eyJhbGciOiJIUzI1NiJ9...",
  "expires_at": "2026-04-07T10:35:00Z"
}

Pass the token to the third-party service however it requires (request body, header, query param — it varies per service).

How Third Parties Verify It

The third-party backend calls POST https://ravi.id/api/sso/verify/ with { "token": "rvt_..." } and receives:

{
  "identity_uuid": "...",
  "identity_name": "Sarah Johnson",
  "identity_email": "sarah.johnson472@raviapp.com",
  "identity_phone": "+15551234567",
  "created_at": "2026-02-25T10:30:00Z",
  "owner": { "name": "...", "email": "..." }
}

This endpoint is for third-party backends — not for you. You just obtain and pass the token.

Important Notes

5-minute TTL — get a fresh token immediately before passing it; don't cache.
Requires active subscription — returns 402 if on the free plan.
/api/sso/verify/ is not for you — that endpoint is for third-party backends. Calling it yourself serves no purpose.

Full API Reference

For complete endpoint details: SSO Token

Related Skills

ravi-identity — Get your email, phone, and identity name
ravi-login — Authenticate yourself to Ravi
ravi-feedback — Report SSO issues or suggest improvements