Skill

persona-security-basics

Secures Persona API keys via rotation and env vars, verifies webhook HMAC, encrypts PII at rest, and sets up audit logging for identity verification.

Python

REST API

security

authentication

npx claudepluginhub jeremylongshore/claude-code-plugins-plus-skills --plugin persona-pack

Tool Access

This skill is limited to using the following tools:

ReadWriteGrep

Preview

API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

SKILL.md

Similar Skills

persona-install-auth

1.9k

Sets up Persona API authentication for Node.js/Python: configures env vars with sandbox/production keys, installs axios/requests+dotenv, verifies connection via REST API calls.

6 tools

persona-pack

instantly-security-basics

1.9k

Applies Instantly.ai security best practices for API keys: scoped least-privilege permissions, secret management, rotation, webhook validation, and workspace auditing.

5 tools

instantly-pack

klaviyo-security-basics

1.9k

Applies Klaviyo security best practices for API key management, OAuth scopes, webhook HMAC-SHA256 verification, and secret rotation in integrations.

4 tools

klaviyo-pack

Stats

Parent Repo Stars1854

Parent Repo Forks248

Last CommitMar 22, 2026

Actions

View Source View Plugin View on GitHub View README

Help us improve

Share bugs, ideas, or general feedback.

persona security basics | sed 's/\b(.)/\u\1/g'

Overview

API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

Prerequisites

Completed persona-install-auth setup

Valid Persona API key (sandbox or production)

Instructions

Step 1: Implementation

import os, requests HEADERS = { "Authorization": f"Bearer {os.environ['PERSONA_API_KEY']}", "Persona-Version": "2023-01-05", } BASE = "https://withpersona.com/api/v1" # Secure Persona API keys, webhook secrets, PII handling in verification data resp = requests.get(f"{BASE}/inquiries?page[size]=10", headers=HEADERS) resp.raise_for_status() inquiries = resp.json()["data"] for inq in inquiries: print(f" {inq['id']}: {inq['attributes']['status']}")

Output

API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

Error Handling

Error

Cause

Solution

401 Unauthorized

Invalid API key

Check PERSONA_API_KEY

429 Rate Limited

Too many requests

Implement backoff

404 Not Found

Wrong resource ID

Verify ID format

Resources

Next Steps

See related Persona skills for more workflows.