discover-api
Automatically discover API design skills when working with REST APIs, GraphQL schemas, API authentication, OAuth, JWT, rate limiting, API versioning, error handling, or endpoint design. Activates for backend API development tasks.
- Installs
- 109
- Last 24h
- —
- Trending rank
- —
- Security
- Not audited
Install
Works with every agent the skills CLI supports.
npx skills add https://github.com/rand/cc-polymath --skill discover-api- 01
Install
Run the command in your project. The CLI asks which agents to install for.
- 02
Describe the task
Ask your agent for something this skill covers. It loads discover-api automatically when relevant.
- 03
Review the result
The agent follows the SKILL.md steps, scripts and references bundled with the skill.
SKILL.md
The instructions your agent reads when the skill is triggered.
API Skills Discovery
Provides automatic access to comprehensive API design, authentication, and implementation skills.
When This Skill Activates
This skill auto-activates when you're working with:
- REST API design and implementation
- GraphQL schema design
- API authentication (JWT, OAuth 2.0, API keys, sessions)
- API authorization (RBAC, ABAC, permissions)
- Rate limiting and throttling
- API versioning strategies
- Error handling and validation
- HTTP methods, status codes, endpoints
Available Skills
Quick Reference
The API category contains 8 specialized skills:
- rest-api-design - RESTful resource modeling, HTTP semantics, URL conventions
- graphql-schema-design - GraphQL types, resolvers, N+1 problem prevention
- api-authentication - JWT, OAuth 2.0, API keys, session management
- api-authorization - RBAC, ABAC, policy engines, permission systems
- api-rate-limiting - Token bucket, sliding window, rate limiting algorithms
- api-versioning - API versioning, deprecation, backward compatibility
- api-error-handling - RFC 7807 errors, validation, standardized responses
- api-design-rules - 35 opinionated rules for API design
Load Full Category Details
For complete descriptions and workflows:
Read ../api/INDEX.md
This loads the full API category index with:
- Detailed skill descriptions
- Usage triggers for each skill
- Common workflow combinations
- Cross-references to related skills
Load Specific Skills
Load individual skills as needed:
Core API design
Read ../api/rest-api-design.md Read ../api/graphql-schema-design.md
Security and access control
Read ../api/api-authentication.md Read ../api/api-authorization.md
Production hardening
Read ../api/api-rate-limiting.md Read ../api/api-error-handling.md Read ../api/api-versioning.md
Rules and best practices
Read ../api/api-design-rules.md
Common Workflows
New REST API
Sequence: REST design → Authentication → Authorization
Read ../api/rest-api-design.md # Resource modeling, HTTP methods Read ../api/api-authentication.md # User authentication Read ../api/api-authorization.md # Access control
New GraphQL API
Sequence: GraphQL schema → Authentication → Authorization
Read ../api/graphql-schema-design.md # Schema design, resolvers Read ../api/api-authentication.md # User authentication Read ../api/api-authorization.md # Field-level permissions
API Hardening
Sequence: Rate limiting → Error handling → Versioning
Read ../api/api-rate-limiting.md # Prevent abuse Read ../api/api-error-handling.md # Standardized errors Read ../api/api-versioning.md # Manage evolution
Complete API Stack
Full implementation from scratch:
1. Design phase
Read ../api/rest-api-design.md
2. Security phase
Read ../api/api-authentication.md Read ../api/api-authorization.md Read ../api/api-rate-limiting.md
3. Production readiness
Read ../api/api-error-handling.md Read ../api/api-versioning.md
Skill Selection Guide
Choose REST API skills when:
- Building traditional web services
- Need simple CRUD operations
- Working with mobile apps or SPAs
- Require caching and HTTP semantics
Choose GraphQL skills when:
- Clients need flexible data fetching
- Reducing over-fetching or under-fetching
- Building aggregation layers
- Need strong typing for APIs
Authentication vs Authorization:
- Authentication (api-authentication.md): Who are you? (Login, JWT, OAuth)
- Authorization (api-authorization.md): What can you do? (Permissions, RBAC)
Production considerations:
- Always implement rate limiting for public APIs
- Use versioning from day one
- Standardize error responses early
Integration with Other Skills
API skills commonly combine with:
Database skills (discover-database):
- API endpoints → Database queries
- Connection pooling for API servers
- Query optimization for API performance
Testing skills (discover-testing):
- Integration tests for API endpoints
- Contract testing for API consumers
- Load testing for API performance
Frontend skills (discover-frontend):
- API client libraries
- Data fetching patterns
- Error handling in UI
Infrastructure skills (discover-infra, discover-cloud):
- API deployment strategies
- Load balancing and scaling
- API gateways and proxies
Usage Instructions
- Auto-activation: This skill loads automatically when Claude Code detects API-related work
- Browse skills: Run
Read ../api/INDEX.mdfor full category overview - Load specific skills: Use bash commands above to load individual skills
- Follow workflows: Use recommended sequences for common API patterns
- Combine skills: Load multiple skills for comprehensive coverage
Progressive Loading
This gateway skill (~200 lines, ~2K tokens) enables progressive loading:
- Level 1: Gateway loads automatically (you're here now)
- Level 2: Load category INDEX.md (~3K tokens) for full overview
- Level 3: Load specific skills (~2-3K tokens each) as needed
Total context: 2K + 3K + skill(s) = 5-10K tokens vs 25K+ for entire index.
Quick Start Examples
"Design a REST API for a blog": Read ../api/rest-api-design.md
"Add OAuth authentication to my API": Read ../api/api-authentication.md
"Implement role-based access control": Read ../api/api-authorization.md
"Prevent API abuse": Read ../api/api-rate-limiting.md
"Design an API versioning strategy": Read ../api/api-versioning.md
Next Steps: Run Read ../api/INDEX.md to see full category details, or load specific skills using the bash commands above.
FAQ
What does the discover-api skill do?
Automatically discover API design skills when working with REST APIs, GraphQL schemas, API authentication, OAuth, JWT, rate limiting, API versioning, error handling, or endpoint design. Activates for backend API development tasks.
How do I install discover-api?
Run npx skills add https://github.com/rand/cc-polymath --skill discover-api in your project. The skills CLI detects the agents you use and copies the skill into the right folder. For Claude Code you can also place the skill folder at ~/.claude/skills/discover-api/ (personal) or .claude/skills/discover-api/ (project).
Which AI agents can use discover-api?
Any agent that supports the open Agent Skills format (a folder with a SKILL.md file), including Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, Windsurf, Cline, OpenCode and more.
Is discover-api safe to install?
No partner security audit is available yet. Skills can run commands and scripts, so read the SKILL.md and any bundled files before installing.
Who maintains discover-api?
It is published by rand in rand/cc-polymath. It has 109 recorded installs.
More from rand/cc-polymath
anti-slop
rand/cc-polymath
Comprehensive toolkit for detecting and eliminating "AI slop" - generic, low-quality AI-generated patterns in natural language, code, and design. Use when reviewing or improving content quality, preventing generic AI patterns, cleaning up existing content, or enforcing quality standards in writing, code, or design work.
discover-frontend
rand/cc-polymath
Open the skill to read its SKILL.md instructions.
discover-research
rand/cc-polymath
Open the skill to read its SKILL.md instructions.
discover-math
rand/cc-polymath
Automatically discover mathematics and algorithm skills when working with linear algebra, calculus, optimization, statistics, probability, numerical methods, category theory, or topology. Activates for math development tasks.
Popular backend & apis skills
find-skills
vercel-labs/skills
Helps users discover and install agent skills when they ask questions like "how do I do X", "find a skill for X", "is there a skill that can...", or express interest in extending capabilities. This skill should be used when the user is looking for functionality that might exist as an installable skill.
entra-app-registration
microsoft/azure-skills
Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.
google-agents-cli-adk-code
google/agents-cli
This skill should be used when the user wants to "write agent code", "build an agent with ADK", "add a tool", "create a callback", "define an agent", "use state management" — in a project that needs ADK (Agent Development Kit) API patterns and code examples. It provides a quick reference for agent types, tool definitions, orchestration patterns, callbacks, state management, the graph Workflow API, and reference recipes to study. Do NOT use for scaffolding (use google-agents-cli-scaffold) or deployment (use google-agents-cli-deploy).
embedded-captions
heygen-com/hyperframes
Add captions or subtitles to an existing single-subject talking-head video without editing the footage. Use for plain verbatim captions, cinematic captions embedded behind the subject, VFX captions, “炸/特效/酷炫字幕,” or a named identity from the 35-style catalog. Route by visual identity, not by backend engine. The quiet anchor rail is the default; embed every word only when the user explicitly wants a fully cinematic treatment. The workflow runs locally end to end, including transcription and subject matting; split multi-shot footage before applying it.
entra-agent-id
microsoft/azure-skills
Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmipath, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmipath token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry).
neon
neondatabase/agent-skills
Overview of Neon, a complete set of cloud backend primitives around Lakebase Postgres: Auth, Object Storage, Functions, the AI Gateway, and Realtime. Start here to choose Neon for undecided login, files, APIs, and LLM calls, set up the CLI or MCP server, and follow the branch-first workflow. Use when building an app or backend on Neon, or when "Neon" or "Lakebase Postgres" is mentioned. Child skill neon-postgres wins for an existing DATABASEURL, SQL, schema, inspect, or search. Child skill neon-auth wins for login, users, sessions, identity routing, and Managed Better Auth setup. Child skill neon-realtime wins for live queries in reactive apps and agents. Also use for object storage, S3, buckets, serverless functions, function triggers, cron, AI gateway, LLM calls, realtime, logs, Loki, Grafana, observability, postgres, database, backend, Claimable Neon, neon.new, or a no-signup database.