---

name: token-refresh description: OAuth token lifecycle management with automatic refresh before expiry, 15-minute buffer, and refresh token rotation. Use for maintaining valid OAuth tokens. version: 2.0.0-rc author: Kernel Architecture Team triggers:

• "refresh token"
• "token expired"
• "oauth refresh" tools:
• mcp__kernel-v2-oauth__refresh
• mcp__kernel-v2-oauth__status
• mcp__kernel-v2-credentials__retrieve
• mcp__kernel-v2-credentials__store

---

Token Refresh Skill

Purpose

Manages OAuth token lifecycle with automatic refresh, expiry detection, and secure token rotation.

When to Use

• Tokens approaching expiry
• Token refresh required
• Check token validity
• Handle token expiration

Available MCP Tools

| Tool | Description | |------|-------------| | mcp__kernel-v2-oauth__refresh | Refresh access token | | mcp__kernel-v2-oauth__status | Check token status | | mcp__kernel-v2-credentials__retrieve | Get stored refresh token | | mcp__kernel-v2-credentials__store | Store new tokens |

Refresh Strategy

• Buffer Time: 15 minutes before actual expiry
• Auto-refresh: Tokens refreshed automatically
• Rotation: Refresh tokens rotated on each use

Workflow

Check and Refresh Token

1. Call mcp__kernel-v2-oauth__status to check expiry
2. If within 15-minute buffer, call mcp__kernel-v2-credentials__retrieve for refresh token
3. Call mcp__kernel-v2-oauth__refresh with refresh token
4. Store new tokens with mcp__kernel-v2-credentials__store

Related Skills

• oauth-auth: For OAuth authentication flows
• secure-credentials: For secure token storage
• session-management: For session-based token binding