sinch-provisioning-api

Guidance for the Sinch Provisioning API, which sets up communication channels and related resources for projects.

In plain words
What is it for?
Managing WhatsApp accounts, senders, templates, and flows; RCS and KakaoTalk senders; webhooks; and grouped channel-setup bundles.
Why use it?
It helps organize provisioning work across separate services and verify that configuration changes succeeded.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/sinch/sinch-plugins/provisioning-api
Any agent
npx skills add sinch/sinch-plugins --skill provisioning-api
Clone the repo
git clone --depth 1 https://github.com/sinch/sinch-plugins

Made for: Claude Code, Codex.

Per session 72 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,950 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin 100% copy Near-identical to another mod in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00072 $0.02950
Opus 5 $0.00036 $0.01475
Sonnet 5 $0.00014 $0.00590
Haiku 4.5 $0.00007 $0.00295

Measured 2d ago against content hash 1e8d531ecc61, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

sinch-provisioning-api scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

3. **Language** — any language, or curl. This API is REST-only; there is no SDK wrapper.
Origin

This is a copy

100% identical to sinch-provisioning-api — 0 lines differ, which has more behind it and is treated as the original. This page carries a canonical link to it rather than competing with it.

plugins/sinch-antigravity-plugin/skills/provisioning-api/SKILL.md · 181 lines

How it starts

The opening of the file, as written. The whole thing — 181 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Sinch Provisioning API

Overview

Use this skill for Conversation API channel provisioning. Validated against Provisioning API v1.2.36. Prefer deterministic flows: confirm context, choose endpoint family, execute minimal calls, verify state.

Agent Instructions

Before generating code, gather from the user (skip any item already specified in the prompt or context):

  1. Project ID — confirm projectId.
  2. Microservice scope — each is a separate REST service: WhatsApp, RCS, KakaoTalk, Conversation, Webhooks, or Bundles. Endpoint families:
    • WhatsApp account/senders/templates/flows/solutions: /v1/projects/{projectId}/whatsapp/...
    • RCS: /v1/projects/{projectId}/rcs/...
    • KakaoTalk: /v1/projects/{projectId}/kakaotalk/...
    • Conversation (channel info): /v1/projects/{projectId}/conversation/...
    • Webhooks: /v1/projects/{projectId}/webhooks...
    • Bundles: /v1/projects/{projectId}/bundles...
  3. Language — any language, or curl. This API is REST-only; there is no SDK wrapper.

Product gotchas to apply unconditionally:

  • Webhook target must be unique per project.
  • Use ALL for webhook triggers when broad coverage is needed.
  • WhatsApp template language delete: deleteSubmitted defaults to false.
  • Some operations are asynchronous — register a provisioning webhook to receive completion notifications, or poll status endpoints. For bundles, subscribe to BUNDLE_DONE.
  • All endpoints return a PAPI Error (errorCode, message, resolution, optional additionalInformation) on failure. (Summary only — confirm exact names/encoding/enums against the authoritative Provisioning API Reference doc before implementing.) For 429/5xx, retry with bounded backoff (max 3, exponential + jitter, max 10s delay). For 4xx, use resolution and additionalInformation to guide correction.
  • Return resource IDs, resulting state, and next required action in the response to the user.

Read the full file on GitHub · 181 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 181 lines · 72 tokens per session scan A 1e8d531ecc61

Subscribe to this mod's changes

sinch-provisioning-api is a skill published in the GitHub repository sinch/sinch-plugins (6 stars, last pushed 20d ago), licensed Apache-2.0. It adds 72 tokens to every session and 2,950 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). It is 100% identical to sinch-provisioning-api, differing in 0 lines, and is treated as a copy.

Related

Other skills, from other repositories

triage-issue

Investigate a reported bug to root cause, then emit a TDD-shaped fix plan as an issue artifact. Trigger when the user reports a bug, says "triage", asks for issue investigation, or wants a fix plan before code changes.

OutlineDriven/odin-gemini-cli-extension · 54 tokens

git-guardrails-claude-code

Install a Claude-Code PreToolUse hook that blocks destructive git commands (push variants including force-push, hard reset, force clean, branch -D, checkout/restore overwrites) before Bash runs them. Use when the user wants git safety rails, force-push prevention, or repository-wipe protection.

OutlineDriven/odin-gemini-cli-extension · 71 tokens

agentrq

Learn creating, scheduling tasks, workspaces, and collaborating with human operators on the AgentRQ platform. Lead colony of AI agents using AgentRQ MCP tools.

agentrq/agentrq-gemini-extension · 35 tokens

duet

Two-party posture — user as director, agent as executor; every fork, tradeoff, or choice surfaced via batched AskUserQuestion with a recommended default. Use when the user invokes /duet, says "ask before" / "pair with me" / "human-in-the-loop", or for aesthetic/architectural/irreversible decisions.

OutlineDriven/odin-gemini-cli-extension · 73 tokens

explore

Read-only codebase exploration: discovery, structural reading, and emission of architecture/pattern/tooling/dependency summaries. Use to understand existing code, map files, trace function flow, locate symbols, or build pre-implementation context. Uses a staged 1/3/5 Explore-agent escalation protocol scaled to scope.…

OutlineDriven/odin-gemini-cli-extension · 122 tokens

deps-upgrade

Dependency-upgrade campaign — outdated scan, batch-by-severity, breaking-change remediation, lockfile audit. Use when CVEs require remediation, when a major upstream version lands, when stack compatibility forces a sweep, or on a scheduled (quarterly) hygiene cadence. CVE-driven bumps consume security audit findings…

OutlineDriven/odin-gemini-cli-extension · 68 tokens