Requirements
- Target platform
- OpenClaw
- Install method
- Manual import
- Extraction
- Extract archive
- Prerequisites
- OpenClaw
- Primary doc
- SKILL.md
Meta-skill that orchestrates the full API development lifecycle — from design through documentation — by coordinating specialized skills, agents, and commands into a seamless build workflow.
Meta-skill that orchestrates the full API development lifecycle — from design through documentation — by coordinating specialized skills, agents, and commands into a seamless build workflow.
Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually.
I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Then review README.md for any prerequisites, environment setup, or post-install checks. Tell me what you changed and call out any manual steps you could not complete.
I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Then review README.md for any prerequisites, environment setup, or post-install checks. Summarize what changed and any follow-up checks I should run.
Orchestrate the full API development lifecycle by coordinating design, implementation, testing, and documentation into a single workflow.
Building a new API from scratch Adding endpoints to an existing API Redesigning or refactoring an API Planning API versioning and migration Running a complete API development cycle (design → build → test → document → deploy)
Follow these steps in order. Each step routes to the appropriate skill or tool.
Load the api-design skill to establish resource models, URL structure, HTTP method semantics, error formats, and pagination strategy. Deliverables: Resource list, endpoint map, request/response schemas, error format
Produce a machine-readable OpenAPI 3.x specification from the design. Use the OpenAPI template in api-design/assets/openapi-template.yaml as a starting point. Deliverables: openapi.yaml with all endpoints, schemas, auth schemes, and examples
Generate route files, request/response types, and validation schemas for each endpoint. Group routes by resource. Deliverables: Route files, type definitions, validation schemas per resource
Write service-layer logic with input validation, authorization checks, database queries, and proper error propagation. Keep controllers thin — business logic lives in the service layer. Deliverables: Service modules, repository layer, middleware (auth, rate limiting, CORS)
Write tests at three levels: Unit tests — service logic, validation, error handling Integration tests — endpoint behavior with real DB Contract tests — response shapes match OpenAPI spec Deliverables: Test suite with coverage for happy paths, error cases, edge cases, and auth
Generate human-readable API documentation with usage examples and SDK snippets. Ensure every endpoint has description, parameters, request/response examples, and error codes. Deliverables: API docs, changelog, authentication guide
Apply a versioning strategy, tag the release, update changelogs, and deploy through the pipeline. Follow the api-versioning skill for deprecation and migration guidance. Deliverables: Version tag, changelog entry, deployment confirmation
Choose the right paradigm for your use case. CriteriaRESTGraphQLgRPCBest forCRUD-heavy public APIsComplex relational data, client-driven queriesInternal microservices, high-throughputData fetchingFixed response shape per endpointClient specifies exact fieldsStrongly typed protobuf messagesOver/under-fetchingCommon problemSolved by designMinimal — schema is explicitCachingNative HTTP caching (ETags, Cache-Control)Requires custom cachingNo built-in HTTP cachingReal-timePolling or WebSocketsSubscriptions (built-in)Bidirectional streamingToolingMature — OpenAPI, Postman, curlGrowing — Apollo, Relay, GraphiQLMature — protoc, grpcurl, BufLearning curveLowMediumMedium-HighVersioningURL or header versioningSchema evolution with @deprecatedPackage versioning in .proto Rule of thumb: Default to REST for public APIs. Use GraphQL when clients need flexible queries across related data. Use gRPC for internal service-to-service communication.
Run through this checklist before marking any API work as complete.
Authentication mechanism chosen (JWT, OAuth2, API key) Authorization rules enforced at every endpoint Tokens validated and scoped correctly Secrets stored securely (never in code or logs)
Rate limits configured per endpoint or consumer tier RateLimit-* headers included in responses 429 Too Many Requests returned with Retry-After header Rate limit strategy documented for consumers
All collection endpoints paginated Pagination style chosen (cursor-based or offset-based) page_size bounded with a sensible maximum Total count or hasNextPage indicator included
Filter parameters validated and sanitized Sort fields allow-listed (no arbitrary column sorting) Default sort order defined and documented
Consistent error response schema across all endpoints Correct HTTP status codes (4xx for client, 5xx for server) Validation errors return field-level detail Internal errors never leak stack traces or sensitive data
Versioning strategy selected and applied uniformly Breaking vs non-breaking change policy documented Deprecation timeline communicated via Sunset header
Allowed origins configured (no wildcard * in production with credentials) Allowed methods and headers explicitly listed Preflight (OPTIONS) requests handled correctly
OpenAPI / Swagger spec generated and up to date Every endpoint has description, parameters, and example responses Authentication requirements documented Error codes and meanings listed Changelog maintained for each version
Input validation on all fields SQL injection prevention HTTPS enforced Sensitive data never in URLs or logs CORS configured correctly
Structured logging with request IDs Error tracking configured (Sentry, Datadog, etc.) Performance metrics collected (latency, error rate) Health check endpoint available (/health) Alerts configured for error rate spikes
NeedSkillPurposeAPI design principlesapi-designResource modeling, HTTP semantics, pagination, error formatsVersioning strategyapi-versioningVersion lifecycle, deprecation, migration patternsAuthenticationauth-patternsJWT, OAuth2, sessions, RBAC, MFAError handlingerror-handlingError types, retry patterns, circuit breakers, HTTP errorsRate limitingrate-limitingAlgorithms, HTTP headers, tiered limits, distributed limitingCachingcachingCache strategies, HTTP caching, invalidation, Redis patternsDatabase migrationsdatabase-migrationsSchema evolution, zero-downtime patterns, rollback strategies
NEVER skip the design phase — jumping straight to code produces inconsistent APIs that are expensive to fix NEVER expose database schema directly — API resources are not database tables; design around consumer use cases NEVER ship without authentication — every production endpoint must have an auth strategy NEVER return inconsistent error formats — every error response must follow the same schema NEVER break a published API without a versioning plan — breaking changes require a new version, migration guide, and deprecation timeline NEVER deploy without tests and documentation — untested APIs ship bugs, undocumented APIs frustrate developers
Code helpers, APIs, CLIs, browser automation, testing, and developer operations.
Largest current source with strong distribution and engagement signals.