# ory-permissions-onboarding

> Claude/Codex skill by [@ory](https://omgskills.com/library/ory/index.md) · 3 stars · Updated 2026-09-30

Onboard native agent-tool authorization with default allow and explicit deny overrides. Covers connecting the plugin, reviewing allowed and blocked tools, writing blocks in the Ory Console, and promoting the project from observe to enforce. MCP and PermissionMode remain grant-based.

## Install

```sh
git clone https://github.com/ory/claude-plugins /tmp/claude-plugins && ln -s /tmp/claude-plugins/plugins/ory-agent-plugin/skills/ory-permissions-onboarding ~/.claude/skills/ory-permissions-onboarding
```

## From README

Onboard Ory Permissions for Agent Tool Calls Help the user connect Agent Security and roll out explicit native-tool blocks without treating missing grants as denials. The plugin only reads permissions. It never writes them. The permission model, native-tool blocks, MCP grants, and observe/enforce posture are managed in the Ory Console (Agent Security). Native policy is simple: AgentTool and ShellTool have no users relation. Their use permit is !blockedSubjects.includes(subject). No matching block means allowed; a matching block means denied. observe logs the block and proceeds; enforce vetoes the call. MCP permissions and PermissionMode\#enforcedSubjects remain grant-based. Connect Agent Security Copy the connection details shown in the Ory Console under Agent Security: Then inspect the resolved configuration: Confirm that Agent Security is connected and the public OAuth2 login client is resolved. The plugin needs no workspace privilege or project API key.

## Links

- HTML page: https://omgskills.com/library/ory/claude-plugins/plugins/ory-agent-plugin/skills/ory-permissions-onboarding/
- GitHub: https://github.com/ory/claude-plugins
- Author: [@ory](https://omgskills.com/library/ory/index.md)

## More from this repo

- [ory-auth-setup](https://omgskills.com/library/ory/claude-plugins/plugins/ory-agent-plugin/skills/ory-auth-setup/index.md) — Set up a complete authentication system using Ory Network with Ory Elements as the UI layer.
   - [@ory](https://omgskills.com/library/ory/index.md) · 3 stars
- [ory-build-agent](https://omgskills.com/library/ory/claude-plugins/plugins/ory-agent-plugin/skills/ory-build-agent/index.md) — Used to build your own AI agent that authenticates the user, authorizes every tool call against Ory Permissions, and...
   - [@ory](https://omgskills.com/library/ory/index.md) · 3 stars
- [ory-build-integration](https://omgskills.com/library/ory/claude-plugins/plugins/ory-agent-plugin/skills/ory-build-integration/index.md) — Wire an Ory Network integration into your own application using the ory/integrates template patterns.
   - [@ory](https://omgskills.com/library/ory/index.md) · 3 stars