AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Api Design

skill-amey-thakur-ai-skills-api-design · by Amey-Thakur

Design HTTP and library APIs that are predictable, hard to misuse, and stable under growth. Use when creating or reviewing endpoints, public functions, or wire formats.

No reviews yet
0 installs
27 views
0.0% view→install

Install

$ agentstack add skill-amey-thakur-ai-skills-api-design

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access No
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-amey-thakur-ai-skills-api-design)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
22d ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Api Design? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

API design

An API is a promise you keep for years. Design for the caller you cannot see, then keep the promise boring.

Method

  1. Start from the caller's sentence. Write the code or request the

caller wants to make, before any implementation exists: POST /notebooks/{id}/share or client.notebooks.share(id). If the ideal call is awkward to say, the design is wrong at the root.

  1. Name by domain, shape by convention. Nouns for resources, verbs for

actions that are not CRUD. Same word for the same concept everywhere , an API where "document", "file", and "source" mean one thing teaches distrust of every name.

  1. Make the common case one call with obvious defaults, and the rare

case possible with explicit options. Never make every caller pay a configuration tax for flexibility one caller needs.

  1. Errors are API. Every failure a caller can cause gets a distinct,

documented, stable error with: what went wrong, on which input, and what to do. A caller should distinguish "you sent garbage" (4xx / typed error), "we broke" (5xx), and "try later" without parsing prose.

  1. Design for the invalid states not to exist. Required pairs travel in

one object; mutually exclusive options are one enum, not three booleans; ids that must belong together are validated together. If misuse compiles or returns 200, it will ship.

  1. Version from day one, break never. Additive change is free (new

optional field, new endpoint). Breaking change (rename, meaning change, removal) needs a version and a deprecation window. Before renaming a field, remember: someone wrote a cron job against it.

  1. Paginate every list, bound every input. Unbounded responses and

unbounded request sizes are outages on a delay.

Litmus tests

  • Can a caller learn the API from one example call plus type/shape

signatures, without reading your source?

  • Is every operation idempotent that safely can be, and documented where it

cannot?

  • Could you delete the docs page for defaults and have callers unaffected?

Boundaries

Consistency with the existing API's conventions beats abstract elegance , one surprising-but-uniform surface is kinder than a half-migrated ideal. Note the inconsistency you would fix, then follow the house style.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.