# Truto Account Health Auditor

> Audit integrated account health with Truto CLI, including account metadata, credentials, scopes, environment integration, overrides, capabilities, tools, logs, reauth, refresh, and short-lived token handling. Use for account auth, connection, scope, stale data, or missing tool issues.

- Skill: `yuvraj3335/truto-account-health-auditor` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add yuvraj3335/truto-account-health-auditor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/yuvraj3335/truto-account-health-auditor/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: yuvraj3335 (https://skillmd.com/u/yuvraj3335)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/yuvraj3335/truto-account-health-auditor

---


# Truto Account Health Auditor

## Mission

Decide whether an integrated account is healthy enough for data-plane calls, and identify whether the fix is customer reauth, scope/provider setup, environment config, catalog config, or Truto runtime.

## Inputs

Use profile plus account ID when available. If not, use tenant ID, integration slug, sandbox flag, or recent logs to locate the account.

## Inspection

```bash
truto whoami -p "$PROFILE" -o json --no-color
truto accounts get "$ACCOUNT_ID" -p "$PROFILE" -o json --no-color
truto accounts tools "$ACCOUNT_ID" -p "$PROFILE" -o json --no-color
truto capabilities "$ACCOUNT_ID" --target account -p "$PROFILE" -o json --no-color
```

If resolving by tenant:

```bash
truto accounts list --tenant-id "$TENANT_ID" -p "$PROFILE" -o json --no-color
```

Then inspect lineage:

```bash
truto environment-integrations get "$ENV_INTEGRATION_ID" -p "$PROFILE" -o json --no-color
truto environment-integrations show-override "$ENV_INTEGRATION_ID" -p "$PROFILE" -o json --no-color
truto integrations get "$INTEGRATION_ID" -p "$PROFILE" -o json --no-color
```

## Logs and Probe

```bash
truto logs --log-type unified_proxy_api --integrated-account-id "$ACCOUNT_ID" --start "$START" --end "$END" --limit 100 -p "$PROFILE" -o json --no-color
truto proxy "$SAFE_RESOURCE" -m list -a "$ACCOUNT_ID" -p "$PROFILE" -o json --no-color -v
```

Choose `SAFE_RESOURCE` from `accounts tools`, preferably a low-cost list/get.

## Health Checks

- Account is in the expected profile environment and tenant.
- Auth method and context shape match integration config.
- Refresh token or credential flow is not failing.
- Required provider scopes/permissions are present.
- Environment override does not break auth, base URL, pagination, or rate limit.
- Account tools and capabilities expose expected resources.
- Logs identify provider 401/403/429/5xx, Truto 5xx, or mapping/runtime failures.

## Mutating Actions

Only run after explicit approval:

```bash
truto accounts refresh-credentials "$ACCOUNT_ID" -p "$PROFILE" -o json --no-color
truto accounts create-token "$ACCOUNT_ID" -p "$PROFILE" -o json --no-color
truto link-tokens create --tenant-id "$TENANT_ID" --integrated-account-id "$ACCOUNT_ID" -p "$PROFILE" -o json --no-color
```

Never print a returned integrated account token. State that it was created and how it was used.

## Output

Return health verdict, evidence, likely owner, customer-facing action if needed, and safe next command. Separate "needs customer reauth" from "Truto config fix."