convex-domains Skill for Claude Code: What It Does and How to Install It

Makes Claude point a domain you already own at your Convex app, from DNS records to the auth origin.

Installs: 38.3K; on skills.sh
Stars: 68; on GitHub
Updated: Oct 2026; last repo commit

This skill makes Claude walk you through putting your own domain on a Convex app. It finds the target, which is the published site host or the deployment's HTTP actions URL, then creates the DNS records or tells you exactly which ones to create. It attaches the domain in Convex, waits for verification and moves the auth origin if the app uses sign-in.

If a DNS command line tool you are already signed in to is found, it offers to create the records, shows the exact commands and waits for your yes. It never asks for registrar credentials. Its folder holds only SKILL.md.

Good for

Developers putting a Convex app or its site on their own domain
Teams whose Convex app uses sign-in and must move the auth origin with the domain

Install convex-domains

Claude Code

Copy this prompt.

Install the convex-domains skill in Claude Code. Run this command:

npx skills add https://github.com/convex/agent-skills --skill convex-domains

Then check that it loaded and tell me how to use it.

2
Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

SKILL.md names no other skill it needs. Convex's docs say the skills CLI installs skills into .agents/skills/ in your project. The "All Convex skills" command installs every skill in the repo, which has 33 skill folders. One of them, convex-improve-convex-plugin, is listed in the Convex docs as sending your coding session's transcript to the Convex team. Run this skill with /convex-domains in Claude Code or $convex-domains in Codex, or let the agent pick it when the task fits. This skill works on your project folder, so this page offers no Claude app upload route.

Built from the package data we hold. Not yet tested by us.

What's in the skill

When it loads

Point a domain you already own at your Convex app (DNS records, custom-domain attach, auth-origin rebind).

Sections in SKILL.md

Workflow
Rules

Key facts

Author: Convex (GitHub organisation convex; the vendor's own repo)
License: Apache-2.0 (stated in the README and the LICENSE file)
Installs on skills.sh: 38,281 (Nov 2, 2026)
GitHub stars: 68 for the whole convex/agent-skills repo (Nov 2, 2026)
Last repo commit: Oct 29, 2026
Audits on skills.sh: Gen Agent Trust Hub: pass, Socket: pass, Snyk: pass
What it includes: 1 file: SKILL.md (the repo tree lists nothing else in the folder)
Part of: The convex/agent-skills repo: 33 skill folders in the tree. The README names 6 skills, and this one is not among them

What it includes

Finds the published site host or the deployment's HTTP actions URL
Read · Identify the target
Checks flarectl, aws, gcloud, doctl or vercel and offers to create the records
The sign-in check uses flarectl user info, aws sts get-caller-identity or doctl account get. SKILL.md says never to install a CLI or run its login flow.
Runs code · Detect a signed-in DNS tool
After your yes, runs your provider's command, e.g. aws route53 change-resource-record-sets
Others named: flarectl dns create, gcloud dns record-sets create, doctl compute domain records create and vercel dns add.
Try: “Point my domain at this Convex app”
Runs code · Create DNS records with your tool
Lists the CNAME (or A/ALIAS at the apex) and the TXT verification record with real values
Used when no signed-in tool is found or you decline.
Give manual records
Adds the custom domain in the dashboard or CLI, then checks the records with dig +short
SKILL.md says DNS propagation can take minutes to hours.
Runs code · Attach and verify the domain
Updates SITE_URL, RP_ID or ORIGIN for apps with passkeys or OAuth, then redeploys
Runs code · Rebind the auth origin
Confirms the domain serves the app over HTTPS, including any apex to www redirect
Network · Check the result

From the official docs

Permissions

Medium risk

What it can do

Read your data
Create and change things
Delete things
Read-only mode

Watch out for

It can change DNS on a live domain
The commands create real records through your signed-in provider tool. Read each one before you approve it, and keep the existing records noted so you can undo the change. github.com
Moving the domain moves the auth origin
SKILL.md says the rebind changes the auth origin, so sign-in breaks until you re-publish. Do it at a quiet time. github.com
Credential rules in SKILL.md
It says never to ask for or handle registrar credentials, never to install a CLI or run its login or auth flow, and never to echo tokens. github.com

Security advisories

No published security advisories as of Nov 2, 2026.

Technical details

Turning on read-only	SKILL.md defines no read-only mode. It says to show the exact commands and get a yes before running DNS changes.
Sign-in and keys	SKILL.md says registrar credentials are never requested or handled. Any DNS tool must already be signed in, and tokens are never echoed.
Scopes	Runs your already-signed-in DNS command line tool to create records, after you approve each command Updates auth origin variables (SITE_URL, RP_ID, ORIGIN) and redeploys Checks records with dig

Questions

What does convex-domains do?

It makes Claude set up a custom domain for a Convex app. That means finding the target, creating or listing the DNS records, attaching the domain in Convex, and moving the auth origin if the app uses sign-in.

Does it need my registrar password?

SKILL.md says never to ask for or handle registrar credentials. It can use a DNS command line tool that is already signed in on your machine, and it never installs one or runs its login flow.

Does it buy a domain?

The description covers a domain you already own. SKILL.md has no purchase step.

Will it change my DNS without asking?

SKILL.md says DNS changes on a live domain are user-visible, so Claude shows the exact commands and confirms before running them, then checks the result with dig.

Why did sign-in break after the change?

SKILL.md says rebinding the domain changes the auth origin, so you have to update SITE_URL, RP_ID or ORIGIN and re-publish. Sign-in breaks if you skip that.

How do I install it?

Use the install box at the top of this page. SKILL.md names no other skill it depends on. Run it with /convex-domains in Claude Code or $convex-domains in Codex.

Is it safe?

It can create DNS records through your signed-in tool, so read each command before you approve it. A wrong record can take a live site offline. Our advice: lower the record TTL before you start, if your provider allows it.

Is it official?

It is in the convex/agent-skills repo under the Convex GitHub organisation, which is the vendor's own repo.

Is it part of Convex's Claude Code plugin?

Convex's official Claude Code plugin (/plugin install convex@claude-plugins-official, per the Convex docs) is a separate package. Its manifest lists a skills folder, a commands folder, two subagents (convex-expert and convex-reviewer), an MCP server that runs npx -y convex@1.46.0 mcp start, hooks (a check at session start, a lint check before file writes and edits, and a typecheck when a turn ends) and background monitors. The plugin repo has its own skill folder named domains, which is a separate file from this repo's convex-domains.

Information

updated Nov 2, 2026

Repository: convex/agent-skills
Folder: skills/convex-domains

convex/agent-skills skills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 8

Convex docs: Agent Skills · docs.convex.dev
convex-domains SKILL.md · github.com
convex/agent-skills README · github.com
skills CLI commands · github.com
Convex docs: Agent Plugins · docs.convex.dev
convex plugin.json · github.com
convex plugin hooks.json · github.com
convex plugin .mcp.json · github.com