[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-redis-redis-security":3,"mdc-dgrr2s-key":38,"related-repo-redis-redis-security":658,"related-org-redis-redis-security":769},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":26,"repoUrl":27,"updatedAt":28,"license":29,"forks":30,"topics":31,"repo":33,"sourceUrl":36,"mdContent":37},"redis-security","secure Redis instances and clusters","Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bind and protected-mode, firewall rules, and disabling dangerous commands. Use when deploying Redis to production, defining ACL users for an application, configuring TLS connections, locking down a Redis instance behind a firewall, or auditing a Redis deployment for security hardening.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"redis","Redis","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fredis.png",[12,16,19,22,23],{"name":13,"slug":14,"type":15},"Security","security","tag",{"name":17,"slug":18,"type":15},"Compliance","compliance",{"name":20,"slug":21,"type":15},"Authentication","authentication",{"name":9,"slug":8,"type":15},{"name":24,"slug":25,"type":15},"Access Control","access-control",92,"https:\u002F\u002Fgithub.com\u002Fredis\u002Fagent-skills","2026-05-27T07:19:40.030241","MIT",21,[32,8],"agent-skills",{"repoUrl":27,"stars":26,"forks":30,"topics":34,"description":35},[32,8],"Redis' official collection of agent skills","https:\u002F\u002Fgithub.com\u002Fredis\u002Fagent-skills\u002Ftree\u002FHEAD\u002Fskills\u002Fredis-security","---\nname: redis-security\ndescription: Redis security guidance covering authentication (requirepass and ACL users), TLS, ACL-based least-privilege access control, restricting network exposure via bind and protected-mode, firewall rules, and disabling dangerous commands. Use when deploying Redis to production, defining ACL users for an application, configuring TLS connections, locking down a Redis instance behind a firewall, or auditing a Redis deployment for security hardening.\nlicense: MIT\nmetadata:\n  author: Redis, Inc.\n  version: \"0.1.0\"\n---\n\n# Redis Security\n\nProduction hardening for Redis: authentication, ACL-based access control, and network exposure. Cover all three together — any one of them on its own leaves an exploitable gap.\n\n## When to apply\n\n- Deploying or reviewing a Redis instance destined for production.\n- Setting up application credentials beyond a shared password.\n- Auditing a Redis deployment against a security checklist.\n- Receiving \"Redis exposed to the internet\" findings from a scanner.\n\n## 1. Always authenticate (and use TLS)\n\nNever run a production Redis without a password. Pair authentication with TLS so credentials and data aren't sent in clear text.\n\n```\n# redis.conf\nrequirepass your-strong-password\ntls-port 6380\ntls-cert-file \u002Fpath\u002Fto\u002Fredis.crt\ntls-key-file  \u002Fpath\u002Fto\u002Fredis.key\n```\n\n```python\nr = redis.Redis(\n    host=\"localhost\",\n    port=6380,\n    password=\"your-strong-password\",\n    ssl=True,\n    ssl_cert_reqs=\"required\",\n)\n```\n\nIf you can use ACL users (next section) instead of the single `requirepass`, do — `requirepass` is effectively the legacy \"default user\" shortcut.\n\nSee [references\u002Fauth.md](references\u002Fauth.md).\n\n## 2. ACLs for least-privilege access\n\nThe `default` user with a shared password is fine for development. For production, give each application a dedicated ACL user with only the commands and key patterns it actually needs.\n\n```\n# Cache-only reader\nACL SETUSER app_readonly on >password ~cache:* +get +mget +scan\n\n# Writer that can't run dangerous ops\nACL SETUSER app_writer   on >password ~*        +@all -@dangerous\n\n# Admin (use sparingly, never for application traffic)\nACL SETUSER admin        on >strong-password ~* +@all\n```\n\nUseful command categories:\n\n| Category | What it covers |\n|---|---|\n| `@read` | Read commands (`GET`, `MGET`, `HGET`, ...) |\n| `@write` | Write commands (`SET`, `DEL`, `XADD`, ...) |\n| `@dangerous` | `FLUSHALL`, `DEBUG`, `KEYS`, etc. |\n| `@admin` | Administrative commands |\n\nIf app credentials leak, a tight ACL bounds the blast radius — the attacker can't `FLUSHALL` your DB just because they grabbed a cache reader's password.\n\nSee [references\u002Facls.md](references\u002Facls.md).\n\n## 3. Restrict network access\n\nThe most common Redis breach is a public-internet Redis with no auth. Avoid that with three layers:\n\n```\n# redis.conf — bind to specific interfaces, keep protected-mode on\nbind 127.0.0.1 192.168.1.100\nprotected-mode yes\n```\n\n```bash\n# Firewall — allow only application subnets\niptables -A INPUT -p tcp --dport 6379 -s 192.168.1.0\u002F24 -j ACCEPT\niptables -A INPUT -p tcp --dport 6379 -j DROP\n```\n\nAnti-pattern: `bind 0.0.0.0` + `protected-mode no` — exposes Redis to the whole network without protection.\n\nOptional but recommended: rename or disable destructive commands so a compromised client can't trash the DB:\n\n```\nrename-command FLUSHALL \"\"\nrename-command DEBUG \"\"\nrename-command CONFIG \"\"\n```\n\nSee [references\u002Fnetwork.md](references\u002Fnetwork.md).\n\n## References\n\n- [Redis: Security](https:\u002F\u002Fredis.io\u002Fdocs\u002Flatest\u002Foperate\u002Foss_and_stack\u002Fmanagement\u002Fsecurity\u002F)\n- [Redis: ACL](https:\u002F\u002Fredis.io\u002Fdocs\u002Flatest\u002Foperate\u002Foss_and_stack\u002Fmanagement\u002Fsecurity\u002Facl\u002F)\n",{"data":39,"body":43},{"name":4,"description":6,"license":29,"metadata":40},{"author":41,"version":42},"Redis, Inc.","0.1.0",{"type":44,"children":45},"root",[46,54,60,67,92,98,103,116,190,210,223,229,242,251,256,416,428,438,444,449,458,577,598,603,612,622,628,652],{"type":47,"tag":48,"props":49,"children":50},"element","h1",{"id":4},[51],{"type":52,"value":53},"text","Redis Security",{"type":47,"tag":55,"props":56,"children":57},"p",{},[58],{"type":52,"value":59},"Production hardening for Redis: authentication, ACL-based access control, and network exposure. Cover all three together — any one of them on its own leaves an exploitable gap.",{"type":47,"tag":61,"props":62,"children":64},"h2",{"id":63},"when-to-apply",[65],{"type":52,"value":66},"When to apply",{"type":47,"tag":68,"props":69,"children":70},"ul",{},[71,77,82,87],{"type":47,"tag":72,"props":73,"children":74},"li",{},[75],{"type":52,"value":76},"Deploying or reviewing a Redis instance destined for production.",{"type":47,"tag":72,"props":78,"children":79},{},[80],{"type":52,"value":81},"Setting up application credentials beyond a shared password.",{"type":47,"tag":72,"props":83,"children":84},{},[85],{"type":52,"value":86},"Auditing a Redis deployment against a security checklist.",{"type":47,"tag":72,"props":88,"children":89},{},[90],{"type":52,"value":91},"Receiving \"Redis exposed to the internet\" findings from a scanner.",{"type":47,"tag":61,"props":93,"children":95},{"id":94},"_1-always-authenticate-and-use-tls",[96],{"type":52,"value":97},"1. Always authenticate (and use TLS)",{"type":47,"tag":55,"props":99,"children":100},{},[101],{"type":52,"value":102},"Never run a production Redis without a password. Pair authentication with TLS so credentials and data aren't sent in clear text.",{"type":47,"tag":104,"props":105,"children":109},"pre",{"className":106,"code":108,"language":52},[107],"language-text","# redis.conf\nrequirepass your-strong-password\ntls-port 6380\ntls-cert-file \u002Fpath\u002Fto\u002Fredis.crt\ntls-key-file  \u002Fpath\u002Fto\u002Fredis.key\n",[110],{"type":47,"tag":111,"props":112,"children":114},"code",{"__ignoreMap":113},"",[115],{"type":52,"value":108},{"type":47,"tag":104,"props":117,"children":121},{"className":118,"code":119,"language":120,"meta":113,"style":113},"language-python shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","r = redis.Redis(\n    host=\"localhost\",\n    port=6380,\n    password=\"your-strong-password\",\n    ssl=True,\n    ssl_cert_reqs=\"required\",\n)\n","python",[122],{"type":47,"tag":111,"props":123,"children":124},{"__ignoreMap":113},[125,136,145,154,163,172,181],{"type":47,"tag":126,"props":127,"children":130},"span",{"class":128,"line":129},"line",1,[131],{"type":47,"tag":126,"props":132,"children":133},{},[134],{"type":52,"value":135},"r = redis.Redis(\n",{"type":47,"tag":126,"props":137,"children":139},{"class":128,"line":138},2,[140],{"type":47,"tag":126,"props":141,"children":142},{},[143],{"type":52,"value":144},"    host=\"localhost\",\n",{"type":47,"tag":126,"props":146,"children":148},{"class":128,"line":147},3,[149],{"type":47,"tag":126,"props":150,"children":151},{},[152],{"type":52,"value":153},"    port=6380,\n",{"type":47,"tag":126,"props":155,"children":157},{"class":128,"line":156},4,[158],{"type":47,"tag":126,"props":159,"children":160},{},[161],{"type":52,"value":162},"    password=\"your-strong-password\",\n",{"type":47,"tag":126,"props":164,"children":166},{"class":128,"line":165},5,[167],{"type":47,"tag":126,"props":168,"children":169},{},[170],{"type":52,"value":171},"    ssl=True,\n",{"type":47,"tag":126,"props":173,"children":175},{"class":128,"line":174},6,[176],{"type":47,"tag":126,"props":177,"children":178},{},[179],{"type":52,"value":180},"    ssl_cert_reqs=\"required\",\n",{"type":47,"tag":126,"props":182,"children":184},{"class":128,"line":183},7,[185],{"type":47,"tag":126,"props":186,"children":187},{},[188],{"type":52,"value":189},")\n",{"type":47,"tag":55,"props":191,"children":192},{},[193,195,201,203,208],{"type":52,"value":194},"If you can use ACL users (next section) instead of the single ",{"type":47,"tag":111,"props":196,"children":198},{"className":197},[],[199],{"type":52,"value":200},"requirepass",{"type":52,"value":202},", do — ",{"type":47,"tag":111,"props":204,"children":206},{"className":205},[],[207],{"type":52,"value":200},{"type":52,"value":209}," is effectively the legacy \"default user\" shortcut.",{"type":47,"tag":55,"props":211,"children":212},{},[213,215,221],{"type":52,"value":214},"See ",{"type":47,"tag":216,"props":217,"children":219},"a",{"href":218},"references\u002Fauth.md",[220],{"type":52,"value":218},{"type":52,"value":222},".",{"type":47,"tag":61,"props":224,"children":226},{"id":225},"_2-acls-for-least-privilege-access",[227],{"type":52,"value":228},"2. ACLs for least-privilege access",{"type":47,"tag":55,"props":230,"children":231},{},[232,234,240],{"type":52,"value":233},"The ",{"type":47,"tag":111,"props":235,"children":237},{"className":236},[],[238],{"type":52,"value":239},"default",{"type":52,"value":241}," user with a shared password is fine for development. For production, give each application a dedicated ACL user with only the commands and key patterns it actually needs.",{"type":47,"tag":104,"props":243,"children":246},{"className":244,"code":245,"language":52},[107],"# Cache-only reader\nACL SETUSER app_readonly on >password ~cache:* +get +mget +scan\n\n# Writer that can't run dangerous ops\nACL SETUSER app_writer   on >password ~*        +@all -@dangerous\n\n# Admin (use sparingly, never for application traffic)\nACL SETUSER admin        on >strong-password ~* +@all\n",[247],{"type":47,"tag":111,"props":248,"children":249},{"__ignoreMap":113},[250],{"type":52,"value":245},{"type":47,"tag":55,"props":252,"children":253},{},[254],{"type":52,"value":255},"Useful command categories:",{"type":47,"tag":257,"props":258,"children":259},"table",{},[260,279],{"type":47,"tag":261,"props":262,"children":263},"thead",{},[264],{"type":47,"tag":265,"props":266,"children":267},"tr",{},[268,274],{"type":47,"tag":269,"props":270,"children":271},"th",{},[272],{"type":52,"value":273},"Category",{"type":47,"tag":269,"props":275,"children":276},{},[277],{"type":52,"value":278},"What it covers",{"type":47,"tag":280,"props":281,"children":282},"tbody",{},[283,324,362,399],{"type":47,"tag":265,"props":284,"children":285},{},[286,296],{"type":47,"tag":287,"props":288,"children":289},"td",{},[290],{"type":47,"tag":111,"props":291,"children":293},{"className":292},[],[294],{"type":52,"value":295},"@read",{"type":47,"tag":287,"props":297,"children":298},{},[299,301,307,309,315,316,322],{"type":52,"value":300},"Read commands (",{"type":47,"tag":111,"props":302,"children":304},{"className":303},[],[305],{"type":52,"value":306},"GET",{"type":52,"value":308},", ",{"type":47,"tag":111,"props":310,"children":312},{"className":311},[],[313],{"type":52,"value":314},"MGET",{"type":52,"value":308},{"type":47,"tag":111,"props":317,"children":319},{"className":318},[],[320],{"type":52,"value":321},"HGET",{"type":52,"value":323},", ...)",{"type":47,"tag":265,"props":325,"children":326},{},[327,336],{"type":47,"tag":287,"props":328,"children":329},{},[330],{"type":47,"tag":111,"props":331,"children":333},{"className":332},[],[334],{"type":52,"value":335},"@write",{"type":47,"tag":287,"props":337,"children":338},{},[339,341,347,348,354,355,361],{"type":52,"value":340},"Write commands (",{"type":47,"tag":111,"props":342,"children":344},{"className":343},[],[345],{"type":52,"value":346},"SET",{"type":52,"value":308},{"type":47,"tag":111,"props":349,"children":351},{"className":350},[],[352],{"type":52,"value":353},"DEL",{"type":52,"value":308},{"type":47,"tag":111,"props":356,"children":358},{"className":357},[],[359],{"type":52,"value":360},"XADD",{"type":52,"value":323},{"type":47,"tag":265,"props":363,"children":364},{},[365,374],{"type":47,"tag":287,"props":366,"children":367},{},[368],{"type":47,"tag":111,"props":369,"children":371},{"className":370},[],[372],{"type":52,"value":373},"@dangerous",{"type":47,"tag":287,"props":375,"children":376},{},[377,383,384,390,391,397],{"type":47,"tag":111,"props":378,"children":380},{"className":379},[],[381],{"type":52,"value":382},"FLUSHALL",{"type":52,"value":308},{"type":47,"tag":111,"props":385,"children":387},{"className":386},[],[388],{"type":52,"value":389},"DEBUG",{"type":52,"value":308},{"type":47,"tag":111,"props":392,"children":394},{"className":393},[],[395],{"type":52,"value":396},"KEYS",{"type":52,"value":398},", etc.",{"type":47,"tag":265,"props":400,"children":401},{},[402,411],{"type":47,"tag":287,"props":403,"children":404},{},[405],{"type":47,"tag":111,"props":406,"children":408},{"className":407},[],[409],{"type":52,"value":410},"@admin",{"type":47,"tag":287,"props":412,"children":413},{},[414],{"type":52,"value":415},"Administrative commands",{"type":47,"tag":55,"props":417,"children":418},{},[419,421,426],{"type":52,"value":420},"If app credentials leak, a tight ACL bounds the blast radius — the attacker can't ",{"type":47,"tag":111,"props":422,"children":424},{"className":423},[],[425],{"type":52,"value":382},{"type":52,"value":427}," your DB just because they grabbed a cache reader's password.",{"type":47,"tag":55,"props":429,"children":430},{},[431,432,437],{"type":52,"value":214},{"type":47,"tag":216,"props":433,"children":435},{"href":434},"references\u002Facls.md",[436],{"type":52,"value":434},{"type":52,"value":222},{"type":47,"tag":61,"props":439,"children":441},{"id":440},"_3-restrict-network-access",[442],{"type":52,"value":443},"3. Restrict network access",{"type":47,"tag":55,"props":445,"children":446},{},[447],{"type":52,"value":448},"The most common Redis breach is a public-internet Redis with no auth. Avoid that with three layers:",{"type":47,"tag":104,"props":450,"children":453},{"className":451,"code":452,"language":52},[107],"# redis.conf — bind to specific interfaces, keep protected-mode on\nbind 127.0.0.1 192.168.1.100\nprotected-mode yes\n",[454],{"type":47,"tag":111,"props":455,"children":456},{"__ignoreMap":113},[457],{"type":52,"value":452},{"type":47,"tag":104,"props":459,"children":463},{"className":460,"code":461,"language":462,"meta":113,"style":113},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","# Firewall — allow only application subnets\niptables -A INPUT -p tcp --dport 6379 -s 192.168.1.0\u002F24 -j ACCEPT\niptables -A INPUT -p tcp --dport 6379 -j DROP\n","bash",[464],{"type":47,"tag":111,"props":465,"children":466},{"__ignoreMap":113},[467,476,537],{"type":47,"tag":126,"props":468,"children":469},{"class":128,"line":129},[470],{"type":47,"tag":126,"props":471,"children":473},{"style":472},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[474],{"type":52,"value":475},"# Firewall — allow only application subnets\n",{"type":47,"tag":126,"props":477,"children":478},{"class":128,"line":138},[479,485,491,496,501,506,511,517,522,527,532],{"type":47,"tag":126,"props":480,"children":482},{"style":481},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[483],{"type":52,"value":484},"iptables",{"type":47,"tag":126,"props":486,"children":488},{"style":487},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[489],{"type":52,"value":490}," -A",{"type":47,"tag":126,"props":492,"children":493},{"style":487},[494],{"type":52,"value":495}," INPUT",{"type":47,"tag":126,"props":497,"children":498},{"style":487},[499],{"type":52,"value":500}," -p",{"type":47,"tag":126,"props":502,"children":503},{"style":487},[504],{"type":52,"value":505}," tcp",{"type":47,"tag":126,"props":507,"children":508},{"style":487},[509],{"type":52,"value":510}," --dport",{"type":47,"tag":126,"props":512,"children":514},{"style":513},"--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C",[515],{"type":52,"value":516}," 6379",{"type":47,"tag":126,"props":518,"children":519},{"style":487},[520],{"type":52,"value":521}," -s",{"type":47,"tag":126,"props":523,"children":524},{"style":487},[525],{"type":52,"value":526}," 192.168.1.0\u002F24",{"type":47,"tag":126,"props":528,"children":529},{"style":487},[530],{"type":52,"value":531}," -j",{"type":47,"tag":126,"props":533,"children":534},{"style":487},[535],{"type":52,"value":536}," ACCEPT\n",{"type":47,"tag":126,"props":538,"children":539},{"class":128,"line":147},[540,544,548,552,556,560,564,568,572],{"type":47,"tag":126,"props":541,"children":542},{"style":481},[543],{"type":52,"value":484},{"type":47,"tag":126,"props":545,"children":546},{"style":487},[547],{"type":52,"value":490},{"type":47,"tag":126,"props":549,"children":550},{"style":487},[551],{"type":52,"value":495},{"type":47,"tag":126,"props":553,"children":554},{"style":487},[555],{"type":52,"value":500},{"type":47,"tag":126,"props":557,"children":558},{"style":487},[559],{"type":52,"value":505},{"type":47,"tag":126,"props":561,"children":562},{"style":487},[563],{"type":52,"value":510},{"type":47,"tag":126,"props":565,"children":566},{"style":513},[567],{"type":52,"value":516},{"type":47,"tag":126,"props":569,"children":570},{"style":487},[571],{"type":52,"value":531},{"type":47,"tag":126,"props":573,"children":574},{"style":487},[575],{"type":52,"value":576}," DROP\n",{"type":47,"tag":55,"props":578,"children":579},{},[580,582,588,590,596],{"type":52,"value":581},"Anti-pattern: ",{"type":47,"tag":111,"props":583,"children":585},{"className":584},[],[586],{"type":52,"value":587},"bind 0.0.0.0",{"type":52,"value":589}," + ",{"type":47,"tag":111,"props":591,"children":593},{"className":592},[],[594],{"type":52,"value":595},"protected-mode no",{"type":52,"value":597}," — exposes Redis to the whole network without protection.",{"type":47,"tag":55,"props":599,"children":600},{},[601],{"type":52,"value":602},"Optional but recommended: rename or disable destructive commands so a compromised client can't trash the DB:",{"type":47,"tag":104,"props":604,"children":607},{"className":605,"code":606,"language":52},[107],"rename-command FLUSHALL \"\"\nrename-command DEBUG \"\"\nrename-command CONFIG \"\"\n",[608],{"type":47,"tag":111,"props":609,"children":610},{"__ignoreMap":113},[611],{"type":52,"value":606},{"type":47,"tag":55,"props":613,"children":614},{},[615,616,621],{"type":52,"value":214},{"type":47,"tag":216,"props":617,"children":619},{"href":618},"references\u002Fnetwork.md",[620],{"type":52,"value":618},{"type":52,"value":222},{"type":47,"tag":61,"props":623,"children":625},{"id":624},"references",[626],{"type":52,"value":627},"References",{"type":47,"tag":68,"props":629,"children":630},{},[631,642],{"type":47,"tag":72,"props":632,"children":633},{},[634],{"type":47,"tag":216,"props":635,"children":639},{"href":636,"rel":637},"https:\u002F\u002Fredis.io\u002Fdocs\u002Flatest\u002Foperate\u002Foss_and_stack\u002Fmanagement\u002Fsecurity\u002F",[638],"nofollow",[640],{"type":52,"value":641},"Redis: Security",{"type":47,"tag":72,"props":643,"children":644},{},[645],{"type":47,"tag":216,"props":646,"children":649},{"href":647,"rel":648},"https:\u002F\u002Fredis.io\u002Fdocs\u002Flatest\u002Foperate\u002Foss_and_stack\u002Fmanagement\u002Fsecurity\u002Facl\u002F",[638],[650],{"type":52,"value":651},"Redis: ACL",{"type":47,"tag":653,"props":654,"children":655},"style",{},[656],{"type":52,"value":657},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":659,"total":768},[660,680,700,713,726,744,760],{"slug":661,"name":661,"fn":662,"description":663,"org":664,"tags":665,"stars":26,"repoUrl":27,"updatedAt":679},"iris-development","integrate with Redis Iris AI products","Iris is Redis's umbrella for AI-focused products. Use this skill when integrating with the Iris Redis Agent Memory (RAM) data plane on Redis Cloud — recording session events for an AI agent, creating or searching long-term memories, configuring a memory store, or tuning background memory promotion. Code examples use the official `redis-agent-memory` (Python) and `@redis-iris\u002Fagent-memory` (TypeScript) SDKs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[666,669,672,675,678],{"name":667,"slug":668,"type":15},"Agents","agents",{"name":670,"slug":671,"type":15},"AI Infrastructure","ai-infrastructure",{"name":673,"slug":674,"type":15},"Backend","backend",{"name":676,"slug":677,"type":15},"Memory","memory",{"name":9,"slug":8,"type":15},"2026-05-27T07:19:45.213725",{"slug":681,"name":681,"fn":682,"description":683,"org":684,"tags":685,"stars":26,"repoUrl":27,"updatedAt":699},"redis-clustering","configure Redis clustering and replication","Redis Cluster and replication guidance covering hash tags for multi-key operations, avoiding CROSSSLOT errors, and reading from replicas to scale read-heavy workloads. Use when designing keys for a sharded Redis Cluster, debugging CROSSSLOT errors on MGET \u002F SDIFF \u002F pipelines, configuring a multi-key transaction in a cluster, or routing reads to replicas for caches, analytics, or dashboards.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[686,689,692,695,698],{"name":687,"slug":688,"type":15},"Architecture","architecture",{"name":690,"slug":691,"type":15},"Database","database",{"name":693,"slug":694,"type":15},"Infrastructure","infrastructure",{"name":696,"slug":697,"type":15},"Performance","performance",{"name":9,"slug":8,"type":15},"2026-05-27T07:19:38.757599",{"slug":701,"name":701,"fn":702,"description":703,"org":704,"tags":705,"stars":26,"repoUrl":27,"updatedAt":712},"redis-connections","optimize Redis client connections","Redis client and connection guidance covering connection pooling, multiplexing, pipelining, client-side caching with RESP3, avoiding slow commands (KEYS, SMEMBERS, HGETALL), and tuning socket timeouts. Use when configuring a Redis client (redis-py, Jedis, Lettuce, NRedisStack), batching commands for throughput, eliminating per-request connection creation, iterating large keyspaces with SCAN, enabling client-side caching for read-heavy workloads, or setting connect and read timeouts.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[706,707,710,711],{"name":673,"slug":674,"type":15},{"name":708,"slug":709,"type":15},"Caching","caching",{"name":696,"slug":697,"type":15},{"name":9,"slug":8,"type":15},"2026-05-27T07:19:42.616757",{"slug":714,"name":714,"fn":715,"description":716,"org":717,"tags":718,"stars":26,"repoUrl":27,"updatedAt":725},"redis-core","model data with Redis structures","Core Redis modeling guidance — choose the right data structure (String, Hash, List, Set, Sorted Set, JSON, Stream, Vector Set) and use consistent colon-separated key names. Use when designing a Redis data model, caching objects, deciding between Hash and JSON, building counters, leaderboards, membership sets, or session stores, or when reviewing\u002Fcleaning up Redis key naming.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[719,720,723,724],{"name":687,"slug":688,"type":15},{"name":721,"slug":722,"type":15},"Data Modeling","data-modeling",{"name":690,"slug":691,"type":15},{"name":9,"slug":8,"type":15},"2026-05-27T07:19:41.317954",{"slug":727,"name":727,"fn":728,"description":729,"org":730,"tags":731,"stars":26,"repoUrl":27,"updatedAt":743},"redis-observability","monitor and triage Redis performance","Redis observability guidance — which metrics to monitor (memory, connections, hit ratio, ops\u002Fsec, rejected connections), which built-in commands to reach for during incident triage (SLOWLOG, INFO, MEMORY DOCTOR, CLIENT LIST, FT.PROFILE), and when to use the Redis Insight GUI. Use when setting up monitoring or alerts for a Redis instance, diagnosing a performance regression, profiling a slow FT.SEARCH query, or wiring Redis metrics into Prometheus, Datadog, or similar.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[732,735,738,741,742],{"name":733,"slug":734,"type":15},"Debugging","debugging",{"name":736,"slug":737,"type":15},"Monitoring","monitoring",{"name":739,"slug":740,"type":15},"Observability","observability",{"name":696,"slug":697,"type":15},{"name":9,"slug":8,"type":15},"2026-05-27T07:19:47.780873",{"slug":745,"name":745,"fn":746,"description":747,"org":748,"tags":749,"stars":26,"repoUrl":27,"updatedAt":759},"redis-search","implement Redis Search indexing and queries","Redis Search guidance covering FT.CREATE schema design, field type selection (TEXT, TAG, NUMERIC, GEO, GEOSHAPE, VECTOR, JSON path), DIALECT 2 query syntax, FT.SEARCH \u002F FT.AGGREGATE \u002F FT.HYBRID command selection, vector similarity with HNSW or FLAT, hybrid retrieval combining lexical and vector ranking, RAG pipelines, zero-downtime index updates via aliases, and debugging with FT.PROFILE and FT.EXPLAIN. Use when defining a search index on Hash or JSON documents, writing FT.SEARCH queries with filters, sorting, aggregation, or vector KNN, tuning HNSW parameters, building a RAG retrieval pipeline, or troubleshooting slow or empty search results.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[750,751,752,755,756],{"name":687,"slug":688,"type":15},{"name":690,"slug":691,"type":15},{"name":753,"slug":754,"type":15},"Engineering","engineering",{"name":9,"slug":8,"type":15},{"name":757,"slug":758,"type":15},"Search","search","2026-06-24T07:39:43.089819",{"slug":4,"name":4,"fn":5,"description":6,"org":761,"tags":762,"stars":26,"repoUrl":27,"updatedAt":28},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[763,764,765,766,767],{"name":24,"slug":25,"type":15},{"name":20,"slug":21,"type":15},{"name":17,"slug":18,"type":15},{"name":9,"slug":8,"type":15},{"name":13,"slug":14,"type":15},8,{"items":770,"total":899},[771,779,787,794,801,809,817,825,839,854,869,886],{"slug":661,"name":661,"fn":662,"description":663,"org":772,"tags":773,"stars":26,"repoUrl":27,"updatedAt":679},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[774,775,776,777,778],{"name":667,"slug":668,"type":15},{"name":670,"slug":671,"type":15},{"name":673,"slug":674,"type":15},{"name":676,"slug":677,"type":15},{"name":9,"slug":8,"type":15},{"slug":681,"name":681,"fn":682,"description":683,"org":780,"tags":781,"stars":26,"repoUrl":27,"updatedAt":699},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[782,783,784,785,786],{"name":687,"slug":688,"type":15},{"name":690,"slug":691,"type":15},{"name":693,"slug":694,"type":15},{"name":696,"slug":697,"type":15},{"name":9,"slug":8,"type":15},{"slug":701,"name":701,"fn":702,"description":703,"org":788,"tags":789,"stars":26,"repoUrl":27,"updatedAt":712},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[790,791,792,793],{"name":673,"slug":674,"type":15},{"name":708,"slug":709,"type":15},{"name":696,"slug":697,"type":15},{"name":9,"slug":8,"type":15},{"slug":714,"name":714,"fn":715,"description":716,"org":795,"tags":796,"stars":26,"repoUrl":27,"updatedAt":725},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[797,798,799,800],{"name":687,"slug":688,"type":15},{"name":721,"slug":722,"type":15},{"name":690,"slug":691,"type":15},{"name":9,"slug":8,"type":15},{"slug":727,"name":727,"fn":728,"description":729,"org":802,"tags":803,"stars":26,"repoUrl":27,"updatedAt":743},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[804,805,806,807,808],{"name":733,"slug":734,"type":15},{"name":736,"slug":737,"type":15},{"name":739,"slug":740,"type":15},{"name":696,"slug":697,"type":15},{"name":9,"slug":8,"type":15},{"slug":745,"name":745,"fn":746,"description":747,"org":810,"tags":811,"stars":26,"repoUrl":27,"updatedAt":759},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[812,813,814,815,816],{"name":687,"slug":688,"type":15},{"name":690,"slug":691,"type":15},{"name":753,"slug":754,"type":15},{"name":9,"slug":8,"type":15},{"name":757,"slug":758,"type":15},{"slug":4,"name":4,"fn":5,"description":6,"org":818,"tags":819,"stars":26,"repoUrl":27,"updatedAt":28},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[820,821,822,823,824],{"name":24,"slug":25,"type":15},{"name":20,"slug":21,"type":15},{"name":17,"slug":18,"type":15},{"name":9,"slug":8,"type":15},{"name":13,"slug":14,"type":15},{"slug":826,"name":826,"fn":827,"description":828,"org":829,"tags":830,"stars":26,"repoUrl":27,"updatedAt":838},"redis-semantic-cache","implement semantic caching with Redis","Redis LangCache guidance for semantic caching of LLM responses on Redis Cloud — calling search\u002Fset via the SDK or REST API, tuning the similarity threshold, separating caches per task type, and filtering with custom attributes. Use when caching LLM completions or RAG answers to cut API cost and latency, building a cache-aside layer in front of OpenAI \u002F Anthropic \u002F etc., tuning hit rate vs precision, or splitting one app's LLM workloads into multiple LangCache caches.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[831,832,833,836,837],{"name":670,"slug":671,"type":15},{"name":708,"slug":709,"type":15},{"name":834,"slug":835,"type":15},"LLM","llm",{"name":9,"slug":8,"type":15},{"name":757,"slug":758,"type":15},"2026-05-27T07:19:43.897283",{"slug":840,"name":840,"fn":841,"description":842,"org":843,"tags":844,"stars":851,"repoUrl":852,"updatedAt":853},"agent-filesystem","manage persistent storage in Redis","Use when agents need persistent shared storage, when saving or restoring workspace state, or when coordinating file access across multiple agents and machines. Creates Redis-backed workspaces, checkpoints and restores agent state, mounts shared filesystems locally, searches workspace contents, and forks workspaces for parallel work.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[845,846,849,850],{"name":667,"slug":668,"type":15},{"name":847,"slug":848,"type":15},"File Storage","file-storage",{"name":676,"slug":677,"type":15},{"name":9,"slug":8,"type":15},22,"https:\u002F\u002Fgithub.com\u002Fredis\u002Fagent-filesystem","2026-04-10T04:51:05.904489",{"slug":855,"name":855,"fn":856,"description":857,"org":858,"tags":859,"stars":851,"repoUrl":852,"updatedAt":868},"codex-settings-sync","sync Codex settings across computers","Use when the user wants to migrate Codex state in ~\u002F.codex into Agent Filesystem and mount the same shared Codex memory\u002Fsettings across multiple computers. Recommends a .afsignore before migration and defaults to excluding worktrees, caches, logs, and temporary files.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[860,863,864,867],{"name":861,"slug":862,"type":15},"Codex","codex",{"name":676,"slug":677,"type":15},{"name":865,"slug":866,"type":15},"Migration","migration",{"name":9,"slug":8,"type":15},"2026-04-10T04:51:07.268248",{"slug":870,"name":870,"fn":871,"description":872,"org":873,"tags":874,"stars":883,"repoUrl":884,"updatedAt":885},"cloud-database-provisioning","provision Redis Cloud databases","Provision a Redis Cloud database end-to-end — Essentials (fixed plan) or Pro (custom) — using Redis Cloud MCP tools",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[875,878,879,882],{"name":876,"slug":877,"type":15},"Cloud","cloud",{"name":690,"slug":691,"type":15},{"name":880,"slug":881,"type":15},"MCP","mcp",{"name":9,"slug":8,"type":15},15,"https:\u002F\u002Fgithub.com\u002Fredis\u002Fredisctl","2026-06-03T07:53:00.906753",{"slug":887,"name":887,"fn":888,"description":889,"org":890,"tags":891,"stars":883,"repoUrl":884,"updatedAt":898},"compare-approaches","prototype Redis data model alternatives","Prototype and compare 2-3 Redis data model alternatives for the same workload",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[892,893,894,897],{"name":721,"slug":722,"type":15},{"name":690,"slug":691,"type":15},{"name":895,"slug":896,"type":15},"Prototyping","prototyping",{"name":9,"slug":8,"type":15},"2026-05-27T07:19:55.591944",27]