# Broker Auth

> Platform account binding for C2C resale. Use when the user needs to authorize Claude to act on their behalf on resale platforms (Xianyu/闲鱼, Zhuanzhuan/转转, eBay, Depop). Opens a browser for one-time login; session cookies are persisted to disk and reused until expiry. Trigger: "bind account", "authorize", "login to Xianyu", "connect my account". Also invoke before broker-price and broker-card when…

- **Type:** Skill
- **Install:** `agentstack add skill-madguyevans-creator-resale-agent-skill-hub-broker-auth`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [madguyevans-creator](https://agentstack.voostack.com/s/madguyevans-creator)
- **Installs:** 0
- **Category:** [Web & Browser](https://agentstack.voostack.com/c/web-and-browser)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [madguyevans-creator](https://github.com/madguyevans-creator)
- **Source:** https://github.com/madguyevans-creator/resale-agent-skill-hub/tree/main/skills/broker-auth

## Install

```sh
agentstack add skill-madguyevans-creator-resale-agent-skill-hub-broker-auth
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# broker-auth: Bind Platform Accounts

Handles the "bind once, reuse" account authorization flow.

## How It Works

1. User selects platform(s) to bind (Xianyu, Zhuanzhuan, eBay, Depop)
2. Script opens a Chromium browser to the platform's login page
3. User logs in manually (scan QR code, enter credentials)
4. Browser closes → cookies are persisted to `~/.broker/sessions/_session.json`
5. Subsequent skills reuse the session transparently
6. Sessions auto-expire after 30 days; when expired, user is prompted to re-bind

## Script

```bash
python3 -m broker_core.session_manager login 
    # Opens browser, captures cookies, saves session

python3 scripts/auth.py          # Wrapper for broker-auth flow
```

## Important Notes

- This is NOT web scraping. The user authorizes Claude to use their own account session for search and publish operations.
- Cookie files are stored locally in `~/.broker/sessions/`. Never shared.
- No passwords are stored — only browser cookies.
- The session is used exclusively for: searching listings, publishing items, checking listing status, and delisting.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [madguyevans-creator](https://github.com/madguyevans-creator)
- **Source:** [madguyevans-creator/resale-agent-skill-hub](https://github.com/madguyevans-creator/resale-agent-skill-hub)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-madguyevans-creator-resale-agent-skill-hub-broker-auth
- Seller: https://agentstack.voostack.com/s/madguyevans-creator
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.