setup-api-key SKILL.md skillA
setup-api-key from sonilo-ai/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add sonilo-ai/skills/setup-api-key@git:20261020.5053889Pins git:20261020.5053889 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- sonilo-ai/skills
- Path
setup-api-key/SKILL.md- Versions recorded
- 6
- Latest version
- git:20261020.5053889, committed Oct 20, 2026
- First version recorded
- Aug 12, 2026
- Size
- 12,300 bytes
- Repository stars
- 116
- License
- MIT
Guides users through connecting to Sonilo — signing in with `sonilo login` (OAuth, no key), the remote OAuth plugin for Claude Code or Muse Code, or an API key for CI and headless use. Use when the user needs to configure Sonilo, wants to sign in or connect their Sonilo account, when Sonilo tools are missing, or when a call fails because no key or credential is available. First checks what already works, and only runs full setup when needed.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Sonilo Setup Guide the user through connecting to Sonilo. There are several ways in — pick based on what the user is actually doing, not just whichever is listed first: | Path | Needs an API key? | Best for | |---|---|---| | **A. `sonilo login`** (CLI sign-in, credential shared with the local MCP server) | No — OAuth in the browser | Anyone on a machine with a browser. One sign-in covers the CLI *and* `uvx sonilo-mcp`, so the MCP config carries no secret. | | **B. Remote OAuth MCP plugin** (`sonilo-claude-plugin`, or this repo's Muse Code plugin) | No — OAuth sign-in | Claude Code and Muse Code users who want nothing running locally. Full tool coverage. | | **C. API key** (`SONILO_API_KEY`) | Yes | CI, containers, headless boxes, and anyone who prefers holding a key. Works with every client. | Choosing: - On a machine with a browser and any MCP host → **Path A**. It is the shortest path and leaves no secret in a config file. - Claude Code or Muse Code, and nothing local wanted → **Path B**. - No browser (CI, a container, a remote box), or the user says they already have a key → **Path C**. …
Read the whole file at its exact version.
How to install
mdr add sonilo-ai/skills/setup-api-key@sha256:41d648e138ebb600The line at the top of this page pins the label git:20261020.5053889, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_2an7bwogh3zewbgd)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 6 versions of this file, between Aug 12, 2026 and Oct 20, 2026, about one every 14 days. Its first recorded version is graded B and its latest A.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20261020.5053889 latest | 2026-10-20 | 5053889 | 12,300 B | A | view · diff |
| git:20260927.8473cb1 | 2026-09-27 | 8473cb1 | 12,082 B | A | view · diff |
| git:20260814.690dab7 | 2026-08-14 | 690dab7 | 11,221 B | A | view · diff |
| git:20260813.ccc71c6 | 2026-08-13 | ccc71c6 | 10,920 B | A | view · diff |
| git:20260813.d3964b5 | 2026-08-13 | d3964b5 | 10,374 B | A | view · diff |
| git:20260812.42aff07 | 2026-08-12 | 42aff07 | 10,085 B | B | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (12300 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
sonilo-ai/skills · 116 stars · license MIT · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_2an7bwogh3zewbgd GET https://markdownregistry.com/api/v1/resolve?ref=sonilo-ai/skills/setup-api-key GET https://markdownregistry.com/api/v1/blob/41d648e138ebb600631432c8e78e76b7fb00adb3b8ffffdba902545f7bd902d5
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.