What is fortify-development?

A guide for building Laravel application authentication with Fortify, a backend package that supplies login and account-security routes and controllers without a built-in user interface.

Use it for registration, login, password resets, email verification, two-factor authentication, passkeys, profile changes, and related Laravel routes or controllers.

It helps you find where authentication behavior, settings, responses, views, and routes are defined instead of piecing them together from scattered files.

How liberusoftware/real-estate-laravel configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to liberusoftware/real-estate-laravel. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/liberusoftware/real-estate-laravel/main/.claude/skills/fortify-development/SKILL.md

Clone the repo

git clone --depth 1 https://github.com/liberusoftware/real-estate-laravel

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/liberusoftware/real-estate-laravel/fortify-development/github.svg)](https://agentmods.dev/skills/liberusoftware/real-estate-laravel/fortify-development)

Your own site

<a href="https://agentmods.dev/skills/liberusoftware/real-estate-laravel/fortify-development"><img src="https://agentmods.dev/badge/skills/liberusoftware/real-estate-laravel/fortify-development/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/liberusoftware/real-estate-laravel/fortify-development"><img src="https://agentmods.dev/badge/skills/liberusoftware/real-estate-laravel/fortify-development.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 199 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,621 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin 100% copy Near-identical to another mod in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00199	$0.01621
Opus 5	$0.00100	$0.00811
Sonnet 5	$0.00040	$0.00324
Haiku 4.5	$0.00020	$0.00162

Measured 11d ago against content hash b2c1c7ef01ec, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade A, and why

fortify-development scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

This is a copy

100% identical to fortify-development — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

.claude/skills/fortify-development/SKILL.md · 152 lines

How it starts

The opening of the file, as written. The whole thing — 152 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Laravel Fortify Development

Fortify is a headless authentication backend that provides authentication routes and controllers for Laravel applications.

Documentation

Use search-docs for detailed Laravel Fortify patterns and documentation.

Usage

Routes: Use list-routes with only_vendor: true and action: "Fortify" to see all registered endpoints
Actions: Check app/Actions/Fortify/ for customizable business logic (user creation, password validation, etc.)
Config: See config/fortify.php for all options including features, guards, rate limiters, and username field
Contracts: Look in Laravel\Fortify\Contracts\ for overridable response classes (LoginResponse, LogoutResponse, etc.)
Views: All view callbacks are set in FortifyServiceProvider::boot() using Fortify::loginView(), Fortify::registerView(), etc.

Available Features

Enable in config/fortify.php features array:

Features::registration() - User registration
Features::resetPasswords() - Password reset via email
Features::emailVerification() - Requires User to implement MustVerifyEmail
Features::updateProfileInformation() - Profile updates
Features::updatePasswords() - Password changes
Features::twoFactorAuthentication() - 2FA with QR codes and recovery codes
Features::passkeys() - Passwordless authentication with WebAuthn passkeys

Use search-docs for feature configuration options and customization patterns.

Setup Workflows

Two-Factor Authentication Setup

- [ ] Add TwoFactorAuthenticatable trait to User model
- [ ] Enable feature in config/fortify.php
- [ ] If the `*_add_two_factor_columns_to_users_table.php` migration is missing, publish via `php artisan vendor:publish --tag=fortify-migrations` and migrate
- [ ] Set up view callbacks in FortifyServiceProvider
- [ ] Create 2FA management UI
- [ ] Test QR code and recovery codes

Use search-docs for TOTP implementation and recovery code handling patterns.

Read the full file on GitHub · 152 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

11d ago First seen · 152 lines · 199 tokens per session scan A b2c1c7ef01ec

Subscribe to this mod's changes

fortify-development is a skill published in the GitHub repository liberusoftware/real-estate-laravel (113 stars, last pushed yesterday), licensed MIT. It adds 199 tokens to every session and 1,621 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. It is 100% identical to fortify-development, differing in 0 lines, and is treated as a copy.

Backend and APIs Databases Security estate-agent laravel lettings livewire livewire3

create-powergrid-plugin

Create a complete PowerGrid plugin from scratch, including PHP class, Column macro, Blade view, Alpine.js component, and registration.

Power-Components/livewire-powergrid · 31 tokens

module:assistant

Add an AI assistant chat panel to any Laravel project — with tool calling, streaming, and MCP support.

escapeboy/ai-prompts · 24 tokens

laravel-async

Asynchronous and caching rules for Laravel — idempotent queued jobs with retries and backoff, domain events for side effects, queue separation and failure handling, deterministic cache keys with event-driven invalidation, and scheduled tasks that queue rather than block. Use when writing or reviewing jobs, events…

Foysal50x/skills · 86 tokens

filament-plugin-development

Build and publish custom Filament plugins (Filament is the Laravel admin-panel framework). Use when creating a Filament plugin/package, implementing the Plugin contract, scaffolding from the plugin skeleton, registering assets/resources/pages/render-hooks, making a configurable plugin, testing it, or publishing to…

majdghithan/agent-skills · 105 tokens

laravel-architecture-review

Review a Laravel codebase's architecture and design, not just its types. Use when asked to audit a Laravel app, find architectural smells, decide where business logic belongs (controller vs Action vs Service), whether a Repository/DDD/TDD layer is justified, or how to apply SOLID/DRY to a Laravel project. Runs the…

majdghithan/agent-skills · 188 tokens

laravel-upgrade

Upgrade a Laravel application across major versions safely (Laravel 8 -> 9 -> 10 -> 11 -> 12 -> 13), one hop at a time. Use when upgrading Laravel, when a composer update fails after a major bump, when deciding whether to hop versions by hand or pay for Laravel Shift, or when something compiled fine but broke at…

majdghithan/agent-skills · 174 tokens

real-estate-laravel: Skill for Claude Code