/observal-admin
Observal admin operations including user management, server settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM.
$ npx -y skills add Observal/Observal --skill observal-admin --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/observal-admin
Context preview
The summary Claude sees to decide when to auto-load this skill.
Observal admin operations including user management, server settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM.
SKILL.md
observal-admin.SKILL.md# SPDX-FileCopyrightText: 2026 Hemalatha Madeswaran <hemalathamadeswaran@gmail.com>
# SPDX-License-Identifier: Apache-2.0
name: observal-admin
command: observal
description: Observal admin operations including user management, server settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM.
version: 2.0.0
owner: observal
Observal Admin Operations
All commands require the `admin` role. SAML, SCIM, and audit-log commands require admin role.
Critical Rules
1. **EXECUTE commands**: run them in your shell. Set timeout to 60 seconds. 2. **Pass `--output json`** on list/show commands. 3. **Pass `--yes` or `--force`** on destructive commands. 4. **If 403 is returned**, confirm role with `observal auth whoami --output json`.
---
Procedure: Settings & Diagnostics
observal admin settings --output json
observal admin set KEY VALUE
observal admin diagnostics --output json
observal admin trace-privacy
observal admin trace-privacy-set true
observal admin cache-clear
---
Procedure: User Management
observal admin users --output json
observal admin create-user EMAIL NAME --role user --output json
observal admin reset-password EMAIL --generate
observal admin set-role EMAIL admin
observal admin delete-user EMAIL --force
---
Procedure: Review Queue
observal admin review list --output json
observal admin review list --type mcp --output json
observal admin review show REVIEW_ID --output json
observal admin review approve REVIEW_ID
observal admin review approve REVIEW_ID --agent
observal admin review reject REVIEW_ID --reason 'Not reproducible'
`--agent` and `--bundle` disambiguate when an ID could refer to multiple entity types.
---
Procedure: Security & Audit
observal admin security-events --limit 50 --output json
observal admin audit-log --limit 100 --output json
observal admin audit-log-export --file audit.csv
---
Procedure: SSO
observal admin saml-config --output json
observal admin saml-config-set \
--idp-entity-id ID \
--idp-sso-url URL \
--idp-x509-cert /path/to/cert.pem \
--active
observal admin saml-config-delete --force
observal admin scim-tokens --output json
observal admin scim-token-create --description 'Okta'
observal admin scim-token-revoke TOKEN_ID --force
---
Output Contract
1. One sentence stating intent. 2. The exact command in a fenced code block. 3. The result: success / specific error. 4. The next action, or "done".
Read more
# SPDX-FileCopyrightText: 2026 Hemalatha Madeswaran <hemalathamadeswaran@gmail.com> # SPDX-License-Identifier: Apache-2.0 name: observal-admin command: observal description: Observal admin operations including user management, server settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM. version: 2.0.0 owner: observal
Observal Admin Operations
All commands require the `admin` role. SAML, SCIM, and audit-log commands require admin role.
Critical Rules
1. **EXECUTE commands**: run them in your shell. Set timeout to 60 seconds. 2. **Pass `--output json`** on list/show commands. 3. **Pass `--yes` or `--force`** on destructive commands. 4. **If 403 is returned**, confirm role with `observal auth whoami --output json`.
---
Procedure: Settings & Diagnostics
observal admin settings --output json observal admin set KEY VALUE observal admin diagnostics --output json observal admin trace-privacy observal admin trace-privacy-set true observal admin cache-clear
---
Procedure: User Management
observal admin users --output json observal admin create-user EMAIL NAME --role user --output json observal admin reset-password EMAIL --generate observal admin set-role EMAIL admin observal admin delete-user EMAIL --force
---
Procedure: Review Queue
observal admin review list --output json observal admin review list --type mcp --output json observal admin review show REVIEW_ID --output json observal admin review approve REVIEW_ID observal admin review approve REVIEW_ID --agent observal admin review reject REVIEW_ID --reason 'Not reproducible'
`--agent` and `--bundle` disambiguate when an ID could refer to multiple entity types.
---
Procedure: Security & Audit
observal admin security-events --limit 50 --output json observal admin audit-log --limit 100 --output json observal admin audit-log-export --file audit.csv
---
Procedure: SSO
observal admin saml-config --output json observal admin saml-config-set \ --idp-entity-id ID \ --idp-sso-url URL \ --idp-x509-cert /path/to/cert.pem \ --active observal admin saml-config-delete --force observal admin scim-tokens --output json observal admin scim-token-create --description 'Okta' observal admin scim-token-revoke TOKEN_ID --force
---
Output Contract
1. One sentence stating intent. 2. The exact command in a fenced code block. 3. The result: success / specific error. 4. The next action, or "done".
Observal is a local registry and analytics platform for your AI components. Setup Observal, define the scope and share your Skills, MCPs and Agents.
Other skills on observal.
- /observal-advanced
Advanced Observal operations including session reconciliation, CLI upgrades and downgrades, complete uninstallation, and local fallback mode for offline use. Use when the user wants to reconcile sessions, upgrade or downgrade the CLI, uninstall Observal, or write agent configs
Open skill - /observal-agents
Create, update, version, and manage Observal agents. Use when the user wants to create a new agent, update an existing one, release a new version, scaffold a YAML project, add components, build, publish, bulk-create, archive, delete, or restore agents.
Open skill - /observal-ops
View traces, spans, metrics, feedback, telemetry health, and agent insight reports, including suggestions that reuse components already in the registry. Use when the user wants to see traces, check metrics, view top items, submit ratings, diagnose telemetry, or discuss how an
Open skill - /observal-registry
Submit, browse, install, edit, archive, restore, transfer, and version MCPs, skills, hooks, prompts, and sandboxes in the Observal registry, and get components recommended for the current user. Use when the user wants to submit a component, install one, edit a draft, publish a
Open skill - /observal
Core Observal CLI operations: pull agents into your harness, scan installed components, diagnose and patch harness configs, authenticate, manage CLI settings, get components recommended for you, and discuss agent insights. Use when the user wants to install an agent, check
Open skill