Designs and reviews production APIs across REST/HTTP, OpenAPI, GraphQL, gRPC, webhooks, asynchronous operations, batch endpoints, SSE, and WebSockets. Use when defining resources, routes, methods, status codes, problem details, pagination, idempotency, conditional writes, API schemas, compatibility, deprecation, authentication, authorization, rate limits, or protocol contracts.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# API Design
Mandatory API gates are owned by the API rule
(`${HANDBOOK_ROOT}/rules/320-api-design.mdc`). This skill owns design workflow,
trade-offs, examples, and protocol-specific guidance.
## Non-Negotiables
- Design from consumers, business invariants, trust boundaries, and failure
behavior before choosing endpoint shapes.
- Let resource identifiers name nouns and protocol operations express behavior.
Model a business action as a subordinate resource when that produces a clear
lifecycle.
- Follow HTTP safety, idempotency, cache, conditional-request, and status-code
semantics. Idempotence means the intended server effect is stable, not that
every response is byte-identical.
- Authenticate the principal and authorize every protected object, tenant,
relationship, field, and action on the server.
- Validate and bound every path, query, header, cookie, message, and body input.
Serialize responses from allowlisted schemas rather than persistence objects.
- Use RFC 9457 Problem Details for new public HTTP error contracts unless an
existing compatibility commitment requires another documented shape.
…
The line at the top of this page pins the label git:20260906.0766fec, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_qpjivlhltmmtswoy
GET https://markdownregistry.com/api/v1/resolve?ref=d-padmanabhan/agent-engineering-handbook/api-design
GET https://markdownregistry.com/api/v1/blob/ddfbb41539b6a550e1ce1743bc567f30991dbef2ca8ed23d1cffeda712b3ae46
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
d-padmanabhan/agent-engineering-handbook · skills/agents-sdk/SKILL.md · Build AI agents on Cloudflare Workers using the Agents SDK. Load when creating stateful agents, durable workflows…
d-padmanabhan/agent-engineering-handbook · skills/cloud-platforms/SKILL.md · Cloud platform best practices for AWS, Azure, GCP, and Cloudflare. Covers Zero Trust architecture, IAM patterns…
d-padmanabhan/agent-engineering-handbook · skills/cloudflare-email-service/SKILL.md · Send and receive transactional emails with Cloudflare Email Service (Email Sending + Email Routing). Use when building…
d-padmanabhan/agent-engineering-handbook · skills/cloudflare-waf-author/SKILL.md · Workflow for crafting Cloudflare WAF rules across all three authoring interfaces - Terraform (cloudflare_ruleset), the…
d-padmanabhan/agent-engineering-handbook · skills/cloudflare-workers-author/SKILL.md · Workflow for building production-grade Cloudflare Workers in TypeScript - bootstrap, bindings and storage choice…
d-padmanabhan/agent-engineering-handbook · skills/containers-orchestration/SKILL.md · Docker and container best practices for production images, multi-stage builds, cache reuse, Docker Compose, health…
affaan-m/ecc · docs/es/skills/api-design/SKILL.md · Patrones de diseño REST API incluyendo nomenclatura de recursos, códigos de estado, paginación, filtrado, respuestas de…
ericrisco/rsc-harness · skills/api-design/SKILL.md · Use when settling the contract of an API you expose, before implementation: resources/URLs, REST vs GraphQL…
yonatangross/orchestkit · plugins/ork/skills/api-design/SKILL.md · API wire contracts for REST and GraphQL: resource shape, versioning and deprecation, RFC 9457 errors, OpenAPI. Use when…