clous-ai/a2a-integration
clous-development/skills/a2a-integration/SKILL.md
Use when integrating external agents with Clous A2A endpoints, including manifest discovery, run creation, status polling, streaming URLs, HMAC signatures, scopes, and allowlists.
data-ai
Updated May 11, 2026
$ install --global
skillsauthnpx skillsauth add clous-ai/agents a2a-integrationInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 11, 2026, 2:30 AM239.1s1 file scanned
SKILL.md
- name:
- a2a-integration
- description:
- Use when integrating external agents with Clous A2A endpoints, including manifest discovery, run creation, status polling, streaming URLs, HMAC signatures, scopes, and allowlists.
Clous A2A Integration
A2A routes live under the API origin at /a2a/.
Endpoints
GET /a2a/manifest/POST /a2a/runs/GET /a2a/status/{call_id}/GET /a2a/streams/{call_id}/
Workflow
- Read the manifest to discover agent IDs, tools, features, and limits.
- Choose blocking or streaming response mode.
- Sign the request body with
X-A2A-Signaturewhen an HMAC secret is configured. - Validate scopes and agent allowlists before expecting a run to start.
- Poll status or follow the stream URL until a terminal state is reached.
Guardrails
- Keep request payloads below configured max size.
- Do not expose tools outside the allowed manifest.
- Record
call_idfor audit and retry handling.
Related Skills
clous-ai/webhook-operations
development
VerifiedTrustedCommunity
Use when an AI agent needs to inspect, create, update, delete, or troubleshoot Clous webhook subscriptions and events.
SKILL.mdUpdated May 11, 2026
clous-ai/platform-operation
tools
VerifiedTrustedCommunity
Use when an external AI agent needs to operate Clous safely across MCP, SDK, CLI, and API surfaces while preserving user/company context and avoiding unsafe mutations.
SKILL.mdUpdated May 11, 2026
clous-ai/object-management
tools
VerifiedTrustedCommunity
Use when reading, creating, updating, or deleting Clous objects such as employees, candidates, jobs, reviews, skills, and forms.
SKILL.mdUpdated May 11, 2026
clous-ai/mcp-use
tools
VerifiedTrustedCommunity
Use when an AI agent can call Clous remote MCP tools to inspect or operate the Clous platform, HR, or employee surfaces.
SKILL.mdUpdated May 11, 2026