APIs & services
1,766 rows from 452 repositories
Building the endpoint rather than designing it.
What APIs & services skills agree on
449 skill files read, by 448 of the 471 authors on this shelf whose files we hold, 2026-09-06
The middle one of the 73 measured here is ~1.7k tokens long, counted with cl100k_base
Counted by distinct author, so one author publishing three of these counts once. Where a claim sits in fewer files than authors, that is said: a claim held by forty authors across three files is one file people copied, not forty people who agreed. Near-identical wordings are grouped and the other wordings are shown, so the grouping is yours to check.
What they tell the agent to do
- Use HTTP status codes semantically25 of 448 in 11 filesalso worded as Return semantic HTTP status codes; use standard HTTP status codes
- Return 201 with a Location header on create24 of 448 in 9 filesalso worded as Return 201 with Location header on create; Return 201 with Location header for created resources
- Name resources plural, lowercase, kebab-case23 of 448 in 9 filesalso worded as Name resources as plural kebab-case nouns; Name resources plural, lowercase, kebab-case without verbs
- Configure rate limiting with limit headers22 of 448 in 8 filesalso worded as Configure rate limiting with X-RateLimit headers; Configure rate limiting with standard headers
- Paginate list endpoints with cursor or offset21 of 448 in 10 filesalso worded as Paginate all list endpoints; Use cursor-based pagination instead of offset
- Version APIs in the URL path21 of 448 in 11 filesalso worded as Version APIs in URL path starting at v1; Use URL path versioning for public APIs
- Validate request input with a schema21 of 448 in 7 filesalso worded as Validate input with a schema; Generate request validation schema
- Add pagination to all list endpoints18 of 448 in 15 filesalso worded as Paginate every list endpoint; Implement pagination on all list endpoints
- Match HTTP method to the operation12 of 448 in 6 filesalso worded as match HTTP methods to operation semantics; Use correct HTTP method per operation
- Limit query depth and complexity12 of 448 in 7 filesalso worded as Add query complexity and depth limits; Configure query depth and complexity limits
- Name resources with plural nouns11 of 448also worded as name resources as plural nouns; Identify resources with plural nouns in URLs
- Return errors with machine-readable codes10 of 448 in 5 filesalso worded as Return one consistent error shape with machine-readable codes; Return machine-readable error codes, not messages
- Require authentication on every endpoint10 of 448 in 6 filesalso worded as require authentication or mark endpoints public; Require authentication or explicitly mark endpoints public
- Create DataLoader loaders per request10 of 448 in 7 filesalso worded as Create new DataLoader instances per request; Create DataLoaders per request, not globally
- Retry on 429 using the Retry-After header10 of 448also worded as Honor Retry-After on 429; Surface 429 with Retry-After
What they tell it not to do
- Don't put verbs in resource URLs38 of 448 in 24 filesalso worded as Never use verbs in URLs; Never use verbs in resource URLs
- Don't return 200 for error cases37 of 448 in 23 filesalso worded as Never return 200 for errors or created resources; Don't return 200 for every response
- Don't expose internal error details26 of 448 in 13 filesalso worded as Never expose stack traces, SQL errors, or internal details; Never expose internal details in error responses
- Don't maintain more than two active versions15 of 448 in 4 filesalso worded as keep more than two active API versions; Do not maintain multiple versions simultaneously
- Never skip validation11 of 448 in 6 filesalso worded as Never skip validation; Do not skip validation before activation
- Never hardcode credentials11 of 448 in 7 filesalso worded as never hardcode credentials; Do not hardcode credentials in parameters
- Never expose internal details in responses10 of 448 in 8 filesalso worded as Never expose internal details in responses; Do not expose internal details
- Never use wildcard CORS origins in production10 of 448 in 9 filesalso worded as do not allow wildcard CORS origins together with credentials; Never use wildcard CORS in production
- Don't return 500 for validation errors9 of 448 in 5 filesalso worded as Never return 500 for validation errors; return 500 for validation errors
- Never use blocking calls in async routes9 of 448 in 6 filesalso worded as Never use blocking calls in async routes; Do not call requests in an async route
What they expect to be installed
- curl62 of 448
- Pydantic35 of 448 in 20 files
- Zod32 of 448 in 18 files
- pytest30 of 448 in 29 files
- DataLoader27 of 448 in 22 files
- FastAPI27 of 448 in 26 files
- grep23 of 448 in 22 files
- jq23 of 448 in 21 files
- OpenAPI/Swagger21 of 448 in 7 files
- httpx20 of 448 in 19 files
What they ask it to produce
- Updated OpenAPI/Swagger specification22 of 448 in 8 filesalso worded as Updated OpenAPI/Swagger spec; OpenAPI/Swagger documentation
- OpenAPI specification12 of 448also worded as OpenAPI 3.1 specification; OpenAPI spec
- Typed GraphQL schema10 of 448 in 8 filesalso worded as GraphQL schema; GraphQL schema file
- Pydantic request and response schemas9 of 448 in 8 filesalso worded as Separate Pydantic create, update, and response schemas; Pydantic request and response models
- API documentation8 of 448also worded as API documentation comment; OpenAPI documentation
- Standardized error response bodies7 of 448 in 2 files
- Per-request DataLoader loaders7 of 448 in 4 filesalso worded as Per-request DataLoader instances in context; Per-request DataLoader middleware
- Webhook receiver endpoint with signature verification7 of 448also worded as Webhook receiver endpoint implementation; signature-verifying webhook receiver
When APIs & services authors say to reach for one
The situations these authors wrote into their own files, counted out of the same 448 authors, with the skills that name each one
- Designing new API endpoints31 of 448 in 16 files
- Api design
- Api and interface design
- Ecc api design
- and 15 more on this shelf
- Planning API versioning strategy27 of 448 in 13 files
- Api design
- Discover api
- Ecc api design
- and 15 more on this shelf
- Reviewing existing API contracts26 of 448 in 12 files
- Api design
- Ecc api design
- and 16 more on this shelf
- Adding pagination, filtering, or sorting22 of 448 in 8 files
- Api design
- Rest api node
- Ecc api design
- and 13 more on this shelf
- Implementing API error handling22 of 448 in 8 files
- Api design
- Discover api
- Ecc api design
- and 13 more on this shelf
- Building public or partner-facing APIs21 of 448 in 7 files
- Api design
- Ecc api design
- and 13 more on this shelf
- User asks to design an API15 of 448
- Api design
- Api sculptor
- and 6 more on this shelf
- Designing GraphQL schemas9 of 448 in 7 files
- Graphql architect
- Discover api
- and 1 more on this shelf
How APIs & services skills are built
1,570 skill directories by 421 authors, read from their repositories’ own file trees 2026-08-05
The middle bundle among those shipping files is 3 files, 19.4 KB beside SKILL.md
Counted by distinct author, same as above, so one author publishing forty template copies counts once. SKILL.md itself is not counted as a file, so a single-file skill is one where that file is the whole skill.
The shape
- SKILL.md is the whole skill166 of 421 authors, 849 of 1,570 skills
- files ship beside it255 of 421 authors, 721 of 1,570 skills
- executable scripts ship inside79 of 421 authors, 211 of 1,570 skills
The folders they converge on
- references/180 of 421 authors, 400 of 1,570 skills
- scripts/65 of 421 authors, 184 of 1,570 skills
- assets/36 of 421 authors, 75 of 1,570 skills
- evals/28 of 421 authors, 50 of 1,570 skills
- agents/22 of 421 authors, 40 of 1,570 skills
- examples/17 of 421 authors, 39 of 1,570 skills
delorenj/mcp-server-trello/io.github.delorenj/mcp-server-trello MCP server
432★ repoMCP server for Trello boards with rate limiting, type safety, and comprehensive API integration.
getmockd/mockd/io.mockd/mockd MCP server
141★ repoMulti-protocol API mock server: HTTP, GraphQL, gRPC, WebSocket, MQTT, SSE, SOAP.
ahpxex/open-dashboard/.claude/skills/add-backend Skill
119★ repoA skill catalogue of 36 copy-ready admin UI shapes an AI agent installs and composes into a real back-office. Built on TanStack Start, Drizzle + better-auth, shadcn + Tailwind v4.
gogf/skills/skills/goframe-v2 Skill
no license78★ repoGoFrame Agent Skills empowering AI to deeply understand GoFrame conventions and best practices, generating high-quality, production-ready code.
proyecto26/system-design-skills/skills/api-design Skill
46★ repoA divide-and-conquer wiki of system-design skills for Claude Code — reason about scalable systems, don't memorize architectures.
ea-toolkit/architecture-catalog/.claude/skills/crawl-apis Skill
38★ repoGit-native architecture catalog — Markdown registry, schema-driven UI, AI-ready
aligundogdu/symfony-hexagonal-skill/skills/symfony-api-response Skill
no license32★ repoClaude Code plugin that enforces hexagonal architecture (ports & adapters) in Symfony projects — with 10 auto-triggered skills, 2 review agents, and progressive refactoring support for existing codebases.
vrtalex/bitrix24-skill/skills/bitrix24-agent Skill
24★ repoBitrix24 AI Agent skill: webhook/OAuth, events, retries, safety guardrails, and ops patterns
Orizon-eu/claude-code-pentest/api-breaker Skill
22★ repo6 Claude Code skills that automate the entire pentest lifecycle. From recon to exploit chains to bug bounty reports — just give it a domain. 43 scripts, zero dependencies, pure Python.
scholarly360/owasp-top10-web-skills/skills/authentication-failures Skill
20★ repoAgent Skills for OWASP Top 10 Application Security Risks (https://owasp.org/Top10/2025/)
PaymobAccept/Paymob-AI-Integration-Skill/skills/paymob-integration Skill
19★ repoOfficial Paymob payment integration skill for Claude Code — Intention API, HMAC, mobile wallets, BNPLs, Apple Pay across Node.js, Python, PHP, Flutter and more
ShieldNet-360/secure-vibe/dist/agent-skills/.agents/skills/api-security Skill
15★ repoSecureVibe — prevention-first security for AI-written code. Signed SKILL.md knowledge that makes AI coding assistants write secure code at generation time, plus a deterministic CI gate. Offline · keyless · Ed25519-signed. By ShieldNet360.
steph-dove/klaussy-agents/examples/fastapi/.agents/skills/fastapi-address-review Skill
13★ repoA multi-agent context, rules, and hooks boilerplate generator. With a single command, it scaffolds conventions, namespaced skills, stack-appropriate settings, and interactive guardrails for seven major AI coding environments, matching each agent's native file formats and capability profiles.
martinholovsky/SOTA-skills/skills/sota-api-design Skill
12★ repoState-of-the-Art (2026) AI/LLM engineering skills/agents for building and auditing software — 40+ domain & language skills, BUILD/AUDIT modes, audit checklists.
302ai/302AI-API-Integration-Skill Skill
10★Instantly integrate 1400+ AI APIs into your code - The ultimate Claude Code skill for seamless 302.AI API integration
wundergraph/graphql-federation-skill/skills/graphql-federation Skill
7★ repoAgentic Coding Skill for GraphQL Federation / Apollo Federation
microtech-gmbh/microtech-skills/microtech-graphql Skill
6★ repoKI Skills für das microtech ERP-System. GraphQL-Queries, Vorgangsverwaltung und mehr - optimiert für die Nutzung mit GraphQL MCP-Servern
HK-hub/AgentSkills/Add Admin API Endpoint Skill
6★ repo精选 Claude Code , Open Code等Agent Skills 合集,覆盖 Agent/Skill 工程化、后端架构、事件驱动、CI/CD、前端设计、文档办公自动化与可视化创作
DongDuong2001/pudo-code-system/skills/backend/fastapi Skill
5★ repoModular, scalable, automated development intelligence.
teamtinvio/jaz-ai/.agents/skills/api Skill
5★ repoComplete agent stack for Jaz. Plugins, Skills, MCP tools, and CLI for Claude Code, Cowork, Codex, Copilot, Cursor, and more.
ajaydata-vision/nuclear-bug-fix- Skill
no license4★Single shot Bug Fixing Skill for AI Agents
WESTsyre21/setup-backend-stack Skill
4★This skill bootstraps a local Node.js backend development stack with Docker, PostgreSQL, and an ORM (Prisma or Sequelize). It is designed to help the next user quickly install, configure, and run the skill in a Claude-compatible skill directory.
TeodorMCP/universal-connector-mcp/io.github.TeodorMCP/universal-connector-mcp MCP server
4★ repoSecurity-first MCP server that connects any OpenAPI, GraphQL, gRPC or SOAP API to AI agents.
stakekit/agentkit/plugins/yield-xyz-agentkit-builder/skills/yield-xyz-agentkit-builder Skill
3★ repoThe official tooling for Yield.xyz AgentKit — a Claude Code plugin, standalone skills, and connection guides for the Yield.xyz AgentKit MCP Server.
iwritec0de/app-dev/skills/api-design Skill
3★ repoFull-stack Next.js development plugin for Claude Code
FutureJJ/claude-skills/skills/api-designer Skill
3★ repo40 production-grade skills for Claude Code — progressive disclosure architecture, battle-tested prompts, and deep reference files for full-stack development.
MuhammedZohaib/patchman/plugins/patchman/skills/api-review Skill
2★ repoDefensive AI security audit skill for Claude and Codex. Reviews codebases and web apps for OWASP Top 10, auth and authorization flaws, business logic bugs, tenant isolation gaps, insecure defaults, secret leaks, and ORM or N+1 query issues, then produces clear remediation guidance.
Rootx202/appsec-skills/api-security Skill
no license2★ repoAppSec Skills — 15 plug-and-play Claude Code security skills that audit, harden, and fix any website or app before you ship it. OWASP Top 10, auth, API, database, frontend, backend, cloud, dependencies, secrets, and pentest-style checks — all defensive, all evidence-based.
mturac/hermes-supercode-skills/skills/api-sculptor Skill
2★ repo⚡ 13 production-grade skills for Claude Code · db-whisperer, auth-architect, obs-guardian + 10 more · Zero config · MIT
j-256/claude-code-skills/skills/dsc-endpoint-help Skill
2★ repoSome useful Claude Code Skills
raydeveloperF/App-Store-Connect-release-kit/skills/asc-api Skill
2★ repoA Claude Code and Codex plugin with Agent Skills for localized App Store Connect release workflows
wyre-technology/action1-mcp/io.github.wyre-technology/action1-mcp MCP server
2★ repoAction1 MCP server — endpoint inventory, patch visibility, and policy automation via REST API.
Noorkhalel/saas-ai-skills/skills/api-design-review Skill
1★ repoOpen-source AI Skills library for building, improving, and scaling modern SaaS applications.
hedging8563/tokenlab-skills/skills/tokenlab-api-integration Skill
1★ repoAgent skills for TokenLab API integration, model picking, native endpoints, cost routing, and OpenAI-compatible migration
hicay/claude-code-skills/formcarry Skill
no license1★ repoPublic repository for Claude Code Agent Skills
SkillMedev/full-stack-web-dev/skills/api-design Skill
1★ repoNext.js to Postgres — build and ship a modern web app end to end.
FastBound/skills/skills/fastbound-api Skill
no license1★ repoOfficial FastBound Agent Skills for AI coding assistants — integrate with FastBound's products and APIs.
simanam/theaiteam/team/skills/architecture/api-design Skill
no license1★ repoReusable, provider-agnostic AI team. Drop a project brief, get end-to-end delivery. 12 role agents + 112 skills + orchestrator + self-improvement. Works with Claude Code, Codex, or Gemini.
jyuwaaw/dianpo-skill/skills/dianpo Skill
1★ repoClaude Code skill that explains the mental model behind any technical mechanism — who issues the token, who verifies whom, and why it's designed that way. 点破技术机制背后的信任拓扑。
SkillMedev/technical-writing-studio/skills/api-design Skill
1★ repoDocs people actually read — READMEs, guides, changelogs, and specs.
hookmyapp/agent-skills/skills/integrate-hookmyapp Skill
1★ repoAgent skills for WhatsApp integration with HookMyApp. Install: npx skills add hookmyapp/agent-skills
choutos/agent-skills-spec/examples/api-integration Skill
1★ repoOpen specification for packaging procedural knowledge for AI agents. Framework-agnostic SKILL.md format.
fulit103/fastapi-clean Skill
1★FastAPI clean architecture pragmatic skill — multi-agent (Cursor, Claude Code, Codex, OpenCode, Continue, Aider, Cline, Windsurf). Use cases + repositories + Celery 5.4 + PyMongo async + Clerk JWT + API keys SHA-256.
zhouhuijia/sharp-skills/skills/sharp-api-design Skill
no license1★ repoAI Agent 品控规则合集。Stop AI slop — 六个模块,七平台兼容,一行命令安装。
008993368-yaz/expect-the-unexpected Skill
1★Scenario-driven failure-mode analysis skill for AI coding agents (Cursor, Claude Code, Copilot, Codex)
zetroot/wolverine-skill Skill
1★AI-agent skill for building applications with WolverineFX framework
mohamedzhioua/proofguard/deferred/api-contract-guard/skill Skill
1★ repoKill-tested guard skills for AI coding agents , self-invoking quality gates that catch AI failure modes in security, tests, docs, dependencies, and diffs before the agent says "done." Works with Claude Code, Codex, and Cursor.
dkmqflx/fastapi-best-practices-plugin/plugins/fastapi-best-practices/skills/fastapi-best-practices Skill
1★ repoClaude Code plugin: FastAPI best practices (41 rules, 13 categories) grounded in the official FastAPI docs
Hookwarden — Webhook Integrity
Hookwarden/hookwarden/io.github.Hookwarden/mcp MCP server
1★ repoWebhook signature-verification audit. Stripe, GitHub, Shopify, Twilio +17. Local. Deterministic.
grulex/grpc-invoke-mcp/io.github.grulex/grpc-invoke-mcp MCP server
1★ repoMCP server for describing and invoking gRPC methods
tdries/tableau-graphQL-mcp/io.github.tdries/tableau-graphql-mcp MCP server
1★ repoAsk any Tableau lineage question, in any MCP client, through the Tableau Metadata API.
aneebbaig/app-starter-skills/plugins/app-starter/skills/fastapi-app Skill
0★ repoBootstrap skills for Next.js, Flutter, and FastAPI apps. Current packages, no deprecated APIs, consistent structure. Claude Code plugin + AGENTS.md.
gauravs19/spring-boot-microservices-skill/spring-boot-microservices Skill
0★ repoClaude Code skill to design, scaffold, and review modern Java Spring Boot microservices (Spring Boot 4.x / Java 25 LTS). Installable as a plugin marketplace.
jill6125/Smart-API-Skills Skill
no license0★Complete integration reference for SmartAPI (Angel One's REST API for algorithmic trading). Use this skill whenever the user is building, debugging, or asking about Angel One SmartAPI integrations
vivian254338489/agent-skills-openai-compatible-pack/skills/codex Skill
0★ repoOriginal Claude skills, Codex skills, Cursor rules, Gemini instructions, and prompts for OpenAI-compatible base_url setup.
Marcdaou/claude-qa-suite/qa-suite/skills/api-testing Skill
0★ repoClaude Code plugin marketplace: qa-suite — end-to-end QA (API, E2E, SEO, security, payments) for Next.js + Supabase + Stripe apps
BTN101/claude-skill-pack/skills/engineering/api-design Skill
0★ repoClaude skills organized into domain layers — engineering, product, founder/GTM, design, and documents
AllenShi100/spike-first Skill
no license0★Spike First | 先打靶再造枪 - 抓取/集成任务的强制可行性闸门 Agent Skill:开工前 5 分钟探针验证最大未知点,连跑 3-5 次测成功率,不通过当场喊停
iamursky/nestjs-skill/skills/nestjs Skill
0★ repoReference skill for NestJS — the progressive, TypeScript-first Node.js framework.
digitaldreams/tuhin/skills/api-contract Skill
0★ repoMy dev identity as a Claude Code plugin — a full Laravel team in a box: SDLC pipeline, task board, coding agents, and audit skills.