Skill: maheshmurthy/karma-setup-agent (version 0.2.0)

--- name: setup-agent description: Set up or log in to Karma. Use when user says "set up agent", "configure API key", "connect to Karma", "login to Karma", "log in", or before first use of any Karma skill. version: 0.2.0 tags: [agent, setup, authentication, login] metadata: author: Karma category: authentication --- # Setup Karma Agent Configure your environment to use Karma agent skills. Run this once before using any action skill. See [Agent API Reference](../references/agent-api.md) for base URL and error handling. ## Flow Check if `KARMA_API_KEY` is already set: - **If set** → skip to [Verify Configuration](#3-verify-configuration) - **If not set** → use the `AskUserQuestion` tool with these options: - Question: "You need a Karma API key to continue. How would you like to set it up?" - Options: ["Quick start — Generate instantly (no account needed)", "Email login — Link to existing Karma account", "I already have a key"] - **Quick start** → go to [Quick Start — No Account Needed](#quick-start--no-account-needed) - **Email login** → go to [Create API Key via Email](#create-api-key-via-email) - **I already have a key** → ask for the key, skip to [Save Your API Key](#1-save-your-api-key) ## Quick Start — No Account Needed The fastest way to get started. No email, no login, no existing account required. ```bash BASE_URL="${KARMA_API_URL:-https://gapapi.karmahq.xyz}" INVOCATION_ID=$(uuidgen) curl -s -X POST "${BASE_URL}/v2/agent/register" \ -H "Content-Type: application/json" \ -H "X-Source: skill:setup-agent" -H "X-Invocation-Id: $INVOCATION_ID" -H "X-Skill-Version: 0.2.0" \ -d '{}' ``` **Expected response:** ```json { "key": [REDACTED_SECRET] } ``` The key is shown only once. Proceed immediately to [Set Your API Key](#1-set-your-api-key). > **Note**: Projects created with this method get their own wallet. They won't be linked to an existing Karma account, so they can't be managed from the website yet (coming in a future update). ## Create API Key via Email ### Step 1: Ask for Email Ask the user for their email address. ### Step 2: Send Verification Code ```bash BASE_URL="${KARMA_API_URL:-https://gapapi.karmahq.xyz}" INVOCATION_ID=$(uuidgen) curl -s -X POST "${BASE_URL}/v2/api-keys/auth/init" \ -H "Content-Type: application/json" \ -H "X-Source: skill:setup-agent" -H "X-Invocation-Id: $INVOCATION_ID" -H "X-Skill-Version: 0.2.0" \ -d '{ "email": "[REDACTED_SECRET]" }' ``` **Expected response:** ```json { "message": "Verification code sent to [REDACTED_SECRET]" } ``` Tell the user: "Check your email for a verification code from Karma." ### Step 3: Verify Code Ask the user for the code they received, then: ```bash curl -s -X POST "${BASE_URL}/v2/api-keys/auth/verify" \ -H "Content-Type: application/json" \ -H "X-Source: skill:setup-agent" -H "X-Invocation-Id: $INVOCATION_ID" -H "X-Skill-Version: 0.2.0" \ -d '{ "email": "[REDACTED_SECRET]", "code": "123456", "name": "claude-agent" }' ``` **Expected response:** ```json { "key": [REDACTED_SECRET] } ``` **Important:** The key is shown only once. Proceed immediately to set it. ### Step 4: Handle Errors | Error | Meaning | Action | |-------|---------|--------| | `400 Invalid or expired code` | Wrong code or expired | Ask user to check code or request a new one | | `409 Active key already exists` | User already has a key | Tell them to use their existing key or revoke it from the website | | `429 Too many requests` | Rate limited | Wait and try again | ## 1. Save Your API Key After obtaining the key, **ask permission** to save it permanently: > Would you like me to save your API key to your shell config so you don't have to paste it every time? If yes, detect the user's shell and append the export: ```bash # Detect shell config file if [ -f "$HOME/.zshrc" ]; then SHELL_RC="$HOME/.zshrc" elif [ -f "$HOME/.bashrc" ]; then SHELL_RC="$HOME/.bashrc" fi # Append only if not already present grep -q 'KARMA_API_KEY' "$SHELL_RC" || echo '\n# Karma API Key\nexport KARMA_API_KEY="karma_..."' >> "$SHELL_RC" # Also export for current session export KARMA_API_KEY="karma_..." ``` If the key already exists in the file, replace the old value instead of appending a duplicate. If the user declines, just set it for the current session: ```bash export KARMA_API_KEY="karma_your_key_here" ``` ## 2. Set the API URL (Optional) Defaults to production. For local development: ```bash export KARMA_API_URL="http://localhost:3002" ``` ## 3. Verify Configuration ```bash curl -s "${KARMA_API_URL:-https://gapapi.karmahq.xyz}/v2/agent/info" \ -H "x-[REDACTED_SECRET]" \ -H "X-Source: skill:setup-agent" -H "X-Invocation-Id: $INVOCATION_ID" -H "X-Skill-Version: 0.2.0" \ | python3 -m json.tool ``` **Expected response:** ```json { "walletAddress": "0x...", "smartAccountAddress": "0x...", "supportedChainIds": [10, 137, 1135, ...], "supportedActions": ["createProject", "createMilestone", ...] } ``` ## 4. Confirm Success If the response includes `walletAddress` and `supportedActions`, tell the user their API key and that they're ready: > Your Karma agent is ready! > > **API Key**: `karma_...` (the key from step 1 or the email flow) > > You can now use these skills: > - `project-manager` — Create and manage projects, grants, milestones, and updates > - `find-funding-opportunities` — Search for grants, hackathons, bounties, and more Do NOT show wallet address, smart account address, or chain IDs to the user. They only need the API key. ## Troubleshooting | Issue | Fix | |-------|-----| | `401 Invalid or revoked API key` | Key is wrong or expired — regenerate via email flow or at karmahq.xyz | | `walletAddress: null` | Key was created before server wallets — regenerate it | | `Connection refused` | Wrong `KARMA_API_URL` — check the URL is reachable | | `KARMA_API_KEY not set` | Run `export KARMA_API_KEY="karma_..."` in your terminal |


Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)