How do I install the Observal Admin skill?

Run npx skillmds@latest add bilal140202/observal-admin in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Observal Admin safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Observal Admin?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Observal Admin free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Observal Admin?

Bilal140202 (@bilal140202) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Observal Admin by bilal140202 — Agent Skill

Name: Observal Admin
Author: Bilal140202

Observal Admin

Observal admin operations including user management, enterprise settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM.

Bilal140202 Updated Sep 21, 2026

File contents

Observal Admin Operations

All commands require the admin role. Enterprise-only commands (SAML, SCIM, audit-log) require enterprise mode.

Critical Rules

EXECUTE commands: run them in your shell. Set timeout to 60 seconds.
Pass --output json on list/show commands.
Pass --yes or --force on destructive commands.
If 403 is returned, confirm role with observal auth whoami --output json.

Procedure: Settings & Diagnostics

observal admin settings --output json
observal admin set KEY VALUE
observal admin diagnostics --output json
observal admin trace-privacy
observal admin trace-privacy-set true
observal admin cache-clear

Procedure: User Management

observal admin users --output json
observal admin create-user EMAIL NAME --role user --output json
observal admin reset-password EMAIL --generate
observal admin set-role EMAIL admin
observal admin delete-user EMAIL --force

Procedure: Review Queue

observal admin review list --output json
observal admin review list --type mcp --output json
observal admin review show REVIEW_ID --output json
observal admin review approve REVIEW_ID
observal admin review approve REVIEW_ID --agent
observal admin review reject REVIEW_ID --reason 'Not reproducible'

--agent and --bundle disambiguate when an ID could refer to multiple entity types.

Procedure: Security & Audit

observal admin security-events --limit 50 --output json
observal admin audit-log --limit 100 --output json
observal admin audit-log-export --file audit.csv

Procedure: Enterprise SSO

observal admin saml-config --output json
observal admin saml-config-set \
  --idp-entity-id ID \
  --idp-sso-url URL \
  --idp-x509-cert /path/to/cert.pem \
  --active
observal admin saml-config-delete --force
observal admin scim-tokens --output json
observal admin scim-token-create --description 'Okta'
observal admin scim-token-revoke TOKEN_ID --force

Output Contract

One sentence stating intent.
The exact command in a fenced code block.
The result: success / specific error.
The next action, or "done".

---name: observal-admindescription: Observal admin operations including user management, enterprise settings, submission review queue, security events, audit logs, and SSO configuration. Use when the user needs to manage users, approve or reject submissions, view security events, or configure SAML/SCIM.---# Observal Admin OperationsAll commands require the `admin` role. Enterprise-only commands (SAML, SCIM, audit-log) require enterprise mode.## Critical Rules1. **EXECUTE commands**: run them in your shell. Set timeout to 60 seconds.2. **Pass `--output json`** on list/show commands.3. **Pass `--yes` or `--force`** on destructive commands.4. **If 403 is returned**, confirm role with `observal auth whoami --output json`.---## Procedure: Settings & Diagnostics```bashobserval admin settings --output jsonobserval admin set KEY VALUEobserval admin diagnostics --output jsonobserval admin trace-privacyobserval admin trace-privacy-set trueobserval admin cache-clear```---## Procedure: User Management```bashobserval admin users --output jsonobserval admin create-user EMAIL NAME --role user --output jsonobserval admin reset-password EMAIL --generateobserval admin set-role EMAIL adminobserval admin delete-user EMAIL --force```---## Procedure: Review Queue```bashobserval admin review list --output jsonobserval admin review list --type mcp --output jsonobserval admin review show REVIEW_ID --output jsonobserval admin review approve REVIEW_IDobserval admin review approve REVIEW_ID --agentobserval admin review reject REVIEW_ID --reason 'Not reproducible'````--agent` and `--bundle` disambiguate when an ID could refer to multiple entity types.---## Procedure: Security & Audit```bashobserval admin security-events --limit 50 --output jsonobserval admin audit-log --limit 100 --output jsonobserval admin audit-log-export --file audit.csv```---## Procedure: Enterprise SSO```bashobserval admin saml-config --output jsonobserval admin saml-config-set \ --idp-entity-id ID \ --idp-sso-url URL \ --idp-x509-cert /path/to/cert.pem \ --activeobserval admin saml-config-delete --forceobserval admin scim-tokens --output jsonobserval admin scim-token-create --description 'Okta'observal admin scim-token-revoke TOKEN_ID --force```---## Output Contract1. One sentence stating intent.2. The exact command in a fenced code block.3. The result: success / specific error.4. The next action, or "done".

Frequently asked questions