ToolypetMCP
intermediate5 minutescross hub

Developer Onboarding Security Kit

New developer setup: generate SSH key, create JWT for API access, set up TOTP 2FA, and generate a secure password.

onboardingdevelopersshjwttotpsecurity

Wann dieses Rezept verwenden

Streamline new developer onboarding with all security credentials generated in one workflow. Ensure every team member starts with proper security from day one.

Schritte

1

Create SSH keys for Git

Eingabeaufforderung:Generate Ed25519 SSH key pair with comment 'newdev@company' for Git and server access
2

Create API access token

Eingabeaufforderung:Generate a personal API token for internal service access
3

Create dev environment JWT

Eingabeaufforderung:Generate a developer JWT with claims {sub: 'newdev', role: 'developer', team: 'backend'} expiring in 30 days
4

Enable 2FA

Eingabeaufforderung:Set up TOTP 2FA for the developer's company account with issuer 'CompanyName'
5

Create initial password

Eingabeaufforderung:Generate an initial 20-character password for the developer's company account

Häufig gestellte Fragen

What's the first thing a new developer should set up?

SSH keys for Git access, then 2FA on all accounts. After that: VPN access, development environment, and API credentials. Security first, convenience second.

Should we use individual or shared API keys?

Always individual. Shared keys make it impossible to audit who did what, can't be revoked without affecting everyone, and violate the principle of least privilege.

Verwandte Rezepte