PlugWiki

clerk-orgs Skill for Claude: What It Does and How to Install It

Makes Claude add Clerk Organizations to B2B apps, with roles, permissions, invitations and SSO.

Installs
52.1K
on skills.sh
Stars
89
on GitHub
Files
5
besides SKILL.md
Updated
Oct 2026
last repo commit

This is Clerk's own skill for B2B and multi-tenant apps. It first checks whether your app is multi-tenant and asks before enabling anything. Then Claude wires up Organizations: the switcher, role and permission checks, invitations, verified domains and enterprise SSO, using clerk CLI commands where useful.

The folder holds SKILL.md, 4 reference files and an evals file, and bundles no scripts. Enabling Organizations changes how all users sign in, so read the safety box.

Good for

  • SaaS developers building team workspaces or multi-tenant apps
  • Teams that need invitations, roles and per-org access control
  • Anyone adding enterprise SSO to specific organizations

Install clerk-orgs

Claude Code

  1. 1

    Copy this prompt.

    Install the clerk-orgs skill in Claude Code. Run this command:

/plugin marketplace add clerk/skills
/plugin install clerk@clerk-skills

Then check that it loaded and tell me how to use it.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Pick one route. The Clerk plugin installs all 20 skills in the repo plus the hosted Clerk MCP server (mcp.clerk.com/mcp) from its .mcp.json; the skills CLI routes install skills only. Per the README, the clerk plugin replaces the earlier clerk-skills@clerk Codex plugin and the earlier core, frameworks, features and mobile Copilot plugins, and Copilot may leave clerk@clerk-skills disabled until you run copilot plugin enable clerk@clerk-skills. This skill points to the clerk skill for the SDK version table, so the skills CLI command here installs both.

From the project README. Source.

What's in the skill

When it loads

Clerk Organizations for B2B and multi-tenant apps - org switching, roles and permissions, verified domains, and enterprise SSO. Use for team workspaces, RBAC, org-scoped routing, member management. Also load this when a project treats teams, workspaces, tenants, or companies as its customers - shared accounts, inviting teammates, per-seat pricing, per-company data isolation - even when the words "organization" or "B2B" are never used.

Sections in SKILL.md

  1. Should this app use Organizations?
  2. Quick Start
  3. What Do You Need?
  4. References
  5. Dashboard shortcuts
  6. Agent-first: Programmatic org management
  7. Enable Organizations + settings via CLI
  8. Create / list / delete orgs (BAPI)
  9. Memberships
  10. Invitations
  11. Notes
  12. Documentation
  13. Key Patterns
  14. 1. Read Organization from Auth
  15. 2. Dynamic Routes with Org Slug
  16. 3. Role-Based Access Control

Key facts

Author
Clerk (vendor's own repo)
Repo
clerk/skills
License
MIT (README, plugin.json and the SKILL.md frontmatter say MIT; the repo has no LICENSE file)
Installs on skills.sh
52,085 (Nov 2, 2026)
GitHub stars
89 for the whole repo (Nov 2, 2026)
Last repo commit
Oct 30, 2026
Audits on skills.sh
Gen Agent Trust Hub: pass, Socket: pass, Snyk: pass
What it includes
6 files including SKILL.md: 4 markdown references and an evals file. It bundles no scripts
Part of
Plugin clerk: 20 skills plus the Clerk MCP server
Needs
Organizations enabled in the Clerk dashboard; Clerk keys; the clerk skill for the version table; the Clerk CLI (clerk-cli skill) for the clerk enable orgs and clerk api commands

What it includes

  • Looks for multi-tenant signals in your code, then asks you before enabling

    Signals include Team or Workspace models, workspace_id columns, invite-your-team copy and per-seat pricing.

    Try: “Set up organizations for my B2B app”

    Files · Should this app use Organizations?

  • Turns the feature on in the dashboard or with clerk enable orgs

    You choose Membership required or Membership optional.

    Runs code · Enable Organizations

  • Reads orgId, orgSlug and orgRole from auth()

    Write · Read the active organization

  • Gates pages with has({ role }) or has({ permission })

    has() cannot check System Permissions (org:sys_*). Check a role that carries them.

    Write · Role and permission checks

  • Adds the org switcher and sets redirect URLs

    Write · OrganizationSwitcher

  • Handles users who have no organization yet after sign-in

    Write · Choose-organization task

  • clerk api calls to create, list, update and delete orgs, memberships, invitations

    Org config is patched through the platform API; CRUD goes through the Backend API.

    Delete · Programmatic org management

  • Sends org invitations with inviterUserId, role and redirect URL

    Reference: references/invitations.md.

    Write · Invitations

  • Four reference files: roles-permissions, invitations, enterprise-sso, nextjs-patterns

    Read · Roles, SSO and Next.js references

  • Seven symptoms with root causes, such as orgId undefined for a signed-in user

    Error signatures table

From the official docs

Permissions

Medium risk

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • Enabling Organizations changes how every user signs in

    SKILL.md says the default Membership required mode routes every signed-in user through organization selection and disables personal accounts. It says never to enable Organizations without asking you. Say no if your app also serves individuals, or pick Membership optional. github.com

  • clerk api can delete organizations and members

    The agent-first section lists clerk api -X DELETE for organizations and memberships, and a --platform PATCH that changes instance config such as membership caps. Run those against a development instance first. github.com

  • Invitation examples use real email addresses

    The invitation examples create invitations for an email address with a role and redirect URL. Use test addresses while you build. github.com

  • Metadata updates replace, not merge

    SKILL.md says updateOrganization with publicMetadata overwrites all of it. Read the old values first and spread them. github.com

  • The Clerk plugin also adds an MCP server

    The plugin bundles .mcp.json, which registers the hosted Clerk MCP server at mcp.clerk.com/mcp. plugin.json lists no hooks. The skills CLI and folder routes do not add it. github.com

Technical details
Turning on read-onlyThere is no read-only switch. Claude edits code and can run clerk commands that change your instance.
Talks toclerk.com. dashboard.clerk.com
Sign-in and keysNeeds NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY and CLERK_SECRET_KEY. The clerk CLI uses a linked project or an unclaimed app from clerk init.
Scopes

  • Edits auth, routing and invitation code in your app

  • Can run clerk enable orgs and clerk api commands that change your Clerk instance

  • Can create, update and delete organizations and memberships through the Clerk API

Questions

What does the clerk-orgs skill do?

It makes Claude add Clerk Organizations to an app: org switching, roles and permissions, invitations, verified domains and enterprise SSO. It is aimed at B2B and multi-tenant apps.

How do I install clerk-orgs?

Use the install box above. The Clerk plugin installs all 20 skills. With the skills CLI, name the clerk skill too, because this skill uses its version table.

Will it turn on Organizations without asking?

It is told not to. SKILL.md says to count the multi-tenant signals, raise the option, and let you choose, because enabling Organizations also turns on Membership required.

Why is orgId undefined for a signed-in user?

SKILL.md lists two causes: Organizations is not enabled for the instance, or the user has no active organization (personal account). Enable it and check the Membership mode.

Why does has({ permission }) always return false?

Usually an invented permission name, or a System Permission (org:sys_*), which has() cannot check on the server. Check a role such as org:admin, or a custom permission created in the dashboard.

Does it need the Billing skill?

Not for core use. For seat-limited plans or has({ plan }) checks it points to clerk-billing, a separate skill in the same repo.

Is it safe?

It bundles no scripts, but it edits auth code and can run clerk commands that change or delete organizations. Our advice: use a development Clerk instance and review any command that deletes.

Does it work in the Claude app?

The README documents Claude Code, Codex, Cursor, GitHub Copilot CLI and the skills CLI. It documents no Claude app upload route, so use one of those.

Is it an official Clerk skill?

It is in Clerk's own repo, and the repo's marketplace.json describes the plugin as "Official Clerk skills for AI coding agents".

Information

updated Nov 2, 2026

Repository
clerk/skills
Folder
skills/clerk-orgs

clerk/skillsskills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 5
  1. clerk/skills README · github.com
  2. clerk/skills marketplace.json · github.com
  3. clerk plugin.json · github.com
  4. clerk/skills .mcp.json · github.com
  5. clerk-orgs SKILL.md · github.com

Updated Nov 2, 2026.