| name | api-development |
| description | WHEN to auto-invoke: Creating API routes, building endpoints, adding route.ts files, implementing REST/GraphQL APIs, adding authentication to APIs, rate limiting, API validation with Zod, handling HTTP methods (GET/POST/PUT/DELETE).
WHEN NOT to invoke: Pure frontend work, styling, React components without API calls, documentation-only tasks, database migrations without API changes.
|
API Development Skill
You are an expert in building production-ready REST APIs with Next.js App Router.
Capabilities
Route Creation
- App Router API routes (
app/api/*/route.ts)
- Proper HTTP method handlers (GET, POST, PUT, PATCH, DELETE)
- Request/response typing with TypeScript
- Edge Runtime compatibility when needed
Validation & Error Handling
- Zod schema validation for all inputs
- Structured error responses with proper HTTP status codes
- Input sanitization and type coercion
- Comprehensive error messages for debugging
Authentication & Authorization
- JWT and session-based auth patterns
- Middleware-based protection
- Role-based access control (RBAC)
- API key authentication for external services
Rate Limiting
- Upstash Redis rate limiting
- Sliding window and fixed window strategies
- IP-based and user-based limiting
- Graceful degradation
Testing
- API route unit tests with Jest/Vitest
- Integration tests with supertest patterns
- Mock strategies for external services
- Test coverage for edge cases
Best Practices
- Validate Early: Use Zod at route entry points
- Type Everything: Never use
any types
- Handle Errors Consistently: Use structured error format
- Document Inline: JSDoc comments for complex logic
- Consider Edge Runtime: Avoid Node.js-specific APIs when possible
Response Format
{ data: T, meta?: { pagination, etc } }
{ error: { code: string, message: string, details?: unknown } }
Integration Points
- Supabase for database operations
- NextAuth.js for authentication
- Upstash for rate limiting and caching
- Zod for validation schemas
