# Provision and Manage Prisma Postgres

Prisma Postgres setup spans several tools, authentication models, and connection methods. This skill selects the right workflow and provides focused operational guidance.

## Install

```bash
npx skillstore add prisma/prisma-postgres
```

## Metadata

- Status: approved
- Slug: prisma-prisma-postgres
- Version: 7.7.0
- Author version: 7.7.0
- Skillstore revision: r2
- Version status: valid
- Tree hash: 37b9fcfe116937033319b7630d4ffe5789929164a987f8c3cd1c886fac028159
- Author: prisma
- GitHub username: prisma
- License: MIT
- Repository: https://github.com/prisma/skills/tree/1a9f427e9fe2137298abbcc1a6f372db92e8c40d/prisma-postgres
- Ref: ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: env\_access, network, external\_commands
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/prisma-prisma-postgres
- Manifest: https://skillstore.pages.dev/api/skills/prisma-prisma-postgres/manifest

## Capabilities

- Compare Console, create-db CLI, Management API, and SDK workflows.
- Provide CLI commands for temporary and project-owned database provisioning.
- Explain project linking and DATABASE\_URL setup for Prisma applications.
- Outline service-token and OAuth authentication flows for Management API integrations.
- Describe direct and pooled connection endpoints plus recommended Node.js adapters.
- Show typed SDK setup for existing tokens and OAuth token refresh.

## Use Cases

- Create Preview Databases: Choose a region, set a lifecycle, and obtain connection details for development, demonstrations, or temporary CI environments.
- Automate Platform Provisioning: Plan service-token or OAuth workflows for creating and managing workspace, project, branch, and database resources.
- Connect Existing Projects: Link a local Prisma project, configure DATABASE\_URL, select an adapter, and prepare schema generation or migration.

## Prompt Templates

### Create a Development Database

```
Help me create a temporary Prisma Postgres database in [region]. Explain lifecycle, claim behavior, and safe connection-string handling before suggesting commands.
```

### Link an Existing Project

```
Plan how to link my local Prisma project to database [database ID]. Include interactive and CI options without exposing API keys in arguments.
```

### Design Service-Token Provisioning

```
Design a service-token provisioning flow for workspace [name]. Cover resource hierarchy, endpoint selection, credential storage, retries, and least privilege.
```

### Review Multi-Tenant OAuth

```
Review an OAuth-based multi-tenant Prisma Management API architecture. Address state, PKCE verifier storage, token refresh, tenant isolation, audit logs, and secret rotation.
```

## Limitations

- Does not execute commands, provision resources, or verify live account state by itself.
- Requires valid Prisma account permissions, tokens, and workspace access.
- Examples use latest npm package tags unless users pin reviewed versions.
- OAuth token storage and callback security require application-specific implementation.

## Best Practices

- Pin npm package versions and review release notes before running provisioning commands.
- Keep service tokens, API keys, claim URLs, and database URLs in an approved secret store.
- Use least privilege, confirm the target workspace, and protect one-time connection details from logs.

## Anti Patterns

- Do not place API keys directly in shell commands, chat messages, or CI logs.
- Do not run destructive restore or removal operations without exact resource confirmation and backups.
- Do not treat temporary databases, placeholder token storage, or example callback URLs as production defaults.

## Security Audit

- Audited at: 2026-07-23T17:51:52.154\+00:00
- Summary: Static matches for database URLs, environment variables, official Prisma endpoints, and Markdown backticks are benign documentation examples rather than secret collection or command injection. The source contains no prompt injection or unauthorized exfiltration behavior. Separate semantic review identified unpinned npm execution and API keys passed in command arguments as risks requiring remediation.

## Stats

- Views: 0
- Downloads: 4
- Favorites: 0
- Popularity score: 0