Home / ory / terraform-provider-ory · .claude/skills/import-existing-project/SKILL.md · GitHub

import-existing-project skillA

import-existing-project is agent-read markdown (skill) from ory/terraform-provider-ory: Generate Terraform configuration for an existing Ory Network project. Inventories the project via the Ory Console and Admin APIs, builds terraform import blocks with the correct per-resource import IDs, generates configuration with terraform plan -generate-config-out, and refines it until terraform plan converges to no changes. Use when adopting Terraform for an Ory Network project that was configured through the Console UI, CLI, or API, or when asked to reverse-engineer .tf files from a live pr.

Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.

What the file says

# Import an existing Ory Network project into Terraform

Onboard a live Ory Network project into Terraform so that `terraform plan`
reports no changes. Terraform's built-in `import` blocks and
`terraform plan -generate-config-out` do the mechanical part; this skill fills
in the Ory-specific knowledge: where each resource is discovered, how each
import ID is built, which attributes to prune from generated config, and which
secrets can never be read back.

**Safety first:** every step below is read-only against Ory until the final
`terraform apply`, and that apply only records imports (`0 to add, 0 to change,
0 to destroy`). Never run `terraform destroy` in the working directory — the
imported resources are real. To undo a mistaken import, use
`terraform state rm <address>`; it removes the resource from state without
touching the live project.

## Prerequisites

- Terraform >= 1.5 (`import` blocks and `-generate-config-out`).
- `curl` and `jq` (used by the inventory script).
- A **workspace API key** (`ory_wak_...`, create under Workspace Settings > API
  keys) and, to cover OAuth2 clients / JWKS / trusted issuers, a **project API
  key** (`ory_pat_...`).
…

Read the whole file at its exact version.

How to install

Latest version
mdr add ory/terraform-provider-ory/import-existing-project@git:20260907.f894809
Exact content
mdr add ory/terraform-provider-ory/import-existing-project@sha256:5bacd337468ea854

Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_boclo3zacinvscte.svg)](https://markdownregistry.com/a/art_boclo3zacinvscte)

1 badge views in 30 days

Versions

versioncommittedcommitsizeaudit
git:20260907.f894809 latest2026-09-07 f894809 22,268 BA view · diff
git:20260902.56544692026-09-02 5654469 22,157 BA view · diff
git:20260824.7dd62142026-08-24 7dd6214 21,202 BA view · diff
git:20260823.397e3832026-08-23 397e383 20,629 BA view · diff
git:20260702.9005a592026-07-02 9005a59 14,263 BA view

Audit of the latest version

A  17 of 17 checks passed. Deterministic, no model, same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (22268 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

ory/terraform-provider-ory · 21 stars · license Apache-2.0 · pushed 2026-09-23 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_boclo3zacinvscte
GET https://markdownregistry.com/api/v1/resolve?ref=ory/terraform-provider-ory/import-existing-project
GET https://markdownregistry.com/api/v1/blob/5bacd337468ea854a9d9261ccae89630c2055426b15913e4ee04cda3583f9136

Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Browse by kind, by grade A, or by owner.