API Design Pack
by mochalatte
Multi-protocol API auditor for REST, GraphQL, tRPC, and OpenAPI design patterns.
Secure checkout via Stripe
Works with the AI tools you already use
See it in action
You say
Review this Express route: app.post('/item', (req, res) => { const item = db.items.create(req.body); res.status(200).send(item); });
Your agent does
Stack
Express.js, JavaScript
Audit
- REST: Wrong status code. POST /item returns 200, but should be 201 Created.
- REST: Resource naming. Route is singular '/item', should be plural '/items'.
- Rate Limiting: No middleware detected for this write operation.
Fixes
res.status(201).send(item);
What you get
About this skill
The problem
API inconsistencies and anti-patterns often go unnoticed until production, leading to brittle integrations, N+1 performance bottlenecks, and poor developer experiences. Manually checking every route for proper status codes, pagination, and rate limiting is tedious and error-prone.
What it does
- Audits REST, GraphQL, and tRPC code for architectural anti-patterns using a multi-skill detection engine.
- Identifies specific violations like missing pagination, incorrect HTTP status codes, and N+1 resolver loops with line-level citations.
- Generates concrete code fixes using detected frameworks like FastAPI, Express, or Apollo.
- Validates OpenAPI/Swagger schemas for completeness, documentation quality, and security definitions.
- Analyzes rate limiting strategies, suggesting token bucket or sliding window implementations based on your stack.
Frameworks & tools
REST (Express, FastAPI), GraphQL (Apollo, DataLoader), tRPC, OpenAPI 3.0/3.1, Swagger, Zod, and Pydantic.
Why this beats prompting it yourself
Generic prompts often miss the nuances of specific protocols, such as RFC 7807 error formats or GraphQL forward compatibility rules. This skill uses a structured matrix to apply deep domain rules specific to your detected stack, ensuring you don't just get "cleaner code" but technically compliant API design.
Use cases
- Reviewing legacy REST controllers for missing idempotency and pagination.
- Fixing N+1 query issues in complex GraphQL resolver chains.
- Converting flat tRPC routers into scalable sub-router architectures.
- Hardening endpoints with RFC-compliant rate limit headers and 429 error handling.
Known limitations
Operates only on provided code and schemas. Does not execute, test, or deploy APIs.
How to install
Drop the file into your AI Agent. Works with Claude, Cursor, ChatGPT, and 20+ more.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
30-day refund
Not a fit? Get your money back
Trust & safety
Security scanned
Verified clean today
- 30-day refund guarantee
- One-time purchase, yours forever
- Secure checkout via Stripe
Frequently Asked Questions
Popular in API Development
api architect persona
A consumer-first API design lead that prioritizes long-term contract stability and consistent error handling.
igdb-api
Professional IGDB v4 API specialist for advanced game data fetching, Apicalypse queries, and image URL construction.
web3-graphql
Query Web3 and on-chain GraphQL endpoints using natural language via the Model Context Protocol.
api-contract-validator
Automatically validate OpenAPI specs, detect breaking changes, and sync API implementation with documentation.