Express plugins

Write modern JavaScript/TypeScript applications using ES6+ patterns and advanced type safety, build Node.js backends with Express/Fastify, implement testing with Jest/Vitest, and scaffold projects for Next.js, React, and CLIs.

Master essential developer skills including Git workflows, SQL optimization, error handling, code review, E2E testing, authentication, debugging, and monorepo management with Nx, Turborepo, and Bazel.

Guides full-stack development with opinionated best practices for API design (REST/GraphQL/tRPC), layered backend architecture (Express/TypeScript/Prisma), database schema and ORM selection, React/Next.js frontend components, and Stripe payment integration. Includes project scaffolding and code quality checks.

Design, build, document, and secure production-ready REST, GraphQL, and WebSocket APIs with patterns for versioning, pagination, auth, error handling, load testing, and monitoring

Enables full-stack development with guided patterns for API design, authentication, backend architecture, database schema, React/Next.js frontend, testing, and Stripe payment processing.

Build production-ready Node.js backend services with Express or Fastify, implementing middleware patterns, error handling, authentication, database integration, and API design best practices for REST APIs, GraphQL backends, or microservices architectures.

Configure, test, deploy, and maintain Clerk authentication in Next.js applications. Includes SDK setup, sign-in/sign-up flows, route protection, E2E testing with Playwright in CI/CD, production deployment (Vercel/Netlify), error debugging, and security best practices.

Integrates Kling AI video generation into development workflows with skills for text-to-video, image-to-video, async pipelines, CI/CD automation, cost controls, webhook callbacks, and production readiness.

Scaffold and extend full-stack TypeScript monorepos using Better-T-Stack, with an agent that designs a valid stack from a product description and an MCP server that generates project files or adds addons like PWA, Tauri, and Biome.

Build, debug, deploy, and monitor Perplexity Sonar API integrations with production-grade patterns for search-augmented AI applications.

Generate fullstack project scaffolds with React frontend, Express or FastAPI backend, PostgreSQL database, authentication, Docker, and CI/CD setup. Includes AI agents for API design, database schema, deployment, React expertise, and accessibility.

Develop and manage Framer plugins, code components, and Server API integrations end-to-end: scaffold projects with Vite, set up GitHub Actions CI/CD, handle CMS sync, optimize performance, apply security best practices, and diagnose common errors.

Manage the full lifecycle of Fly.io applications: configure CI/CD with GitHub Actions, deploy Docker containers with health checks, set up Postgres and Redis, troubleshoot deployment issues, optimize performance and costs, and apply security best practices.

Automate startup financial operations with Fondo: set up bookkeeping, manage R&D tax credits, sync bank/payroll integrations, run CI/CD pipelines, and troubleshoot compliance issues—all from Claude Code.

Audit web app session management for vulnerabilities including fixation, ID generation, expiration, cookie attributes, storage, and invalidation, and check current session status.

Build, deploy, and monitor Web3 dApps on Alchemy — from SDK setup and multi-chain client patterns to CI/CD, cost optimization, webhooks, and production readiness checks.

Ensure API contract compliance by validating responses against OpenAPI and JSON schemas, detecting schema drift, and verifying data integrity in middleware or tests.

Build, deploy, and monitor Flexport logistics integrations: manage shipments, purchase orders, webhooks, authentication, rate limits, and multi-environment deployments with TypeScript/Python patterns and CI/CD pipelines.

Develop, debug, deploy, and monitor Customer.io marketing automation integrations with Node.js and TypeScript, covering CI/CD pipelines, multi-environment setups, cost optimization, security (PII, webhook HMAC), and performance (rate limiting, caching) with observability via Prometheus and Grafana.

Integrate AssemblyAI's speech-to-text and audio intelligence APIs into development workflows, covering transcription, streaming, LeMUR analysis, CI/CD pipelines, deployment to cloud platforms, cost optimization, security best practices, and SDK management.

Generate production-ready REST APIs from OpenAPI specs or schemas, with CRUD endpoints, pagination, filtering, authentication, validation, and test scaffolding for Express, FastAPI, Spring Boot, Gin, and NestJS.

Build, deploy, and manage Lindy AI agents with full lifecycle support including creation, testing, monitoring, cost optimization, and production deployment. Covers CI/CD, error troubleshooting, webhook integration, RBAC, data privacy, and migration from Zapier/Make/n8n.

Automate Webflow site and CMS operations via the Data API v2 — manage collections, items, sites, ecommerce, and custom code; set up CI/CD, security, monitoring, and migrations for Webflow integrations.

Integrate Bright Data proxy, scraping, and API services into your development workflow with skills for setup, debugging, deployment, cost optimization, and production patterns across Node.js and Python.

Build, deploy, and maintain Apollo.io sales intelligence integrations with full lifecycle support: authentication, search/enrichment, email sequences, webhooks, rate limiting, caching, monitoring, CI/CD, and compliance.

Protect backend services from overload by implementing API throttling with token bucket and sliding window algorithms, concurrency limits, circuit breakers, priority queues, and adaptive controls, including rate limit storage, middleware, usage tracking, and a management API for dynamic rate limits and quota management.

Configure production-ready API gateways with routing, authentication, rate limiting, and health checks for microservices. Supports Kong, Express Gateway, AWS API Gateway, and custom implementations with load balancing and circuit breakers.

Implement standardized API error handling with RFC 7807 responses, custom error classes, middleware, and logging across multiple backends (Node.js, Python, Java, Go).

Automate fundraise pipeline management, investor relations, and data exports using Finta CRM. Includes error diagnostics, performance optimization, deployment guidance, and security checks for Finta integrations.

Generate production-ready webhook endpoints with HMAC signature verification, idempotency checks, retry handling, and event routing for services like Stripe, GitHub, and Twilio, with integrated monitoring setup.

Develop, debug, and deploy Miro REST API v2 integrations with skills for migration, authentication, CRUD operations, monitoring, and CI/CD pipelines.

Automate the full lifecycle of Apify Actors: scaffold with Crawlee, deploy via CI/CD, monitor costs and performance, manage datasets and request queues, integrate with external apps via webhooks and API triggers, and safely upgrade SDKs.

Manage and integrate Fireflies.ai meeting intelligence platform: set up GraphQL API authentication and clients, deploy webhook receivers to Vercel/Docker/Cloud Run, configure CI/CD and environment secrets, monitor health with Prometheus, and automate workflows for transcript processing, migration, auditing, and rate limiting.

Develop, deploy, and maintain Evernote API integrations, covering OAuth setup, note CRUD, search, webhooks, CI/CD pipelines, multi-environment deployment, monitoring, rate-limit handling, security hardening, and data migration.

Integrate with the MindTickle sales enablement platform: manage training content, quizzes, user progress, and webhooks; set up CI/CD pipelines, local dev servers, and multi-tenant infrastructure; diagnose API errors, enforce security, and optimize costs.

Generate mock API servers from OpenAPI specs with realistic fake data, stateful CRUD, and configurable latency/errors for testing frontend applications.

Validate CORS policies in web applications and APIs, detecting security misconfigurations like wildcard origins, origin reflection, and permissive methods/headers. Checks headers and allowed methods for any endpoint or origin.

Initialize, develop, and migrate durable workflows with Vercel's Workflow SDK. Set up isolated dev sessions with branch-scoped URLs, install the SDK with auto-detected framework support, and port existing orchestrations from Temporal, Inngest, Trigger.dev, or AWS Step Functions.

Integrate with the AppFolio Stack API for property management: authenticate, manage properties/tenants/leases, handle work orders, process webhooks, optimize API costs, and deploy containerized services with CI/CD and security best practices.

Guides building Node.js/Express/TypeScript microservices with layered architecture (routes→controllers→services→repositories), Prisma ORM, Sentry error tracking, Zod validation, and testing strategies.

Build and deploy serverless applications and AI agents on EdgeOne Makers: cloud functions (Node.js, Python, Go), edge functions, middleware, KV/Blob storage, project scaffolding, and CLI management. Includes migration paths from LangChain, OpenAI Agents SDK, and other frameworks to the platform.

Design and document REST and GraphQL APIs: plan endpoints, generate OpenAPI specs, auto-create interactive docs from code annotations, and scaffold full GraphQL schemas with resolvers.

Accelerates new project setup by automating dependency audits, development environment configuration, code formatting/linting, monorepo scaffolding, and Express API rate limiting.

Generate structured Markdown API reference documentation by scanning your source code and route definitions, automatically detecting the API framework (Express, FastAPI, Django, Spring Boot), and extracting endpoints, methods, parameters, schemas, and authentication details.

Build, debug, and deploy Microsoft 365 Agents SDK bots with skills for scaffolding multichannel agents (Teams, Copilot Studio, web chat), debugging checklist guidance, and Azure resource provisioning.

Build and manage Microsoft Teams bots by scaffolding TypeScript, C#, or Python code, configuring Azure infrastructure and SSO, and troubleshooting bot deployments.

Implement OAuth 2.0 and OpenID Connect flows including Authorization Code + PKCE, Client Credentials, and token refresh for web apps, SPAs, and services, with examples in Express.js and references for Flask and Spring.

Verifies API contracts between services using consumer-driven Pact tests, provider verification, schema validation, and OpenAPI specs to prevent breaking changes in microservices communication.

Integrate Better Auth authentication into your project: set up auth config, database schema, and route handlers via interactive wizard; add plugins like 2FA, passkeys, and organizations; diagnose and fix authentication issues including OAuth callbacks and database bindings; explain error codes with solutions.

Harden REST APIs by adding authentication, rate limiting, input validation, and security headers to Express or FastAPI applications, with Nginx configuration examples and audit checklists.

Validate OpenAPI, Swagger, and GraphQL schemas against backend implementations (Express, FastAPI, Django), detect breaking changes, and generate TypeScript client code from your API specifications.

Implement secure session management with JWT tokens, Redis storage, refresh flows, and secure cookies in Node.js/Express applications. Use for authentication systems, user sessions, and logout.

Develop, deploy, and debug Cloudflare Workers end-to-end: local dev with Wrangler, CI/CD pipelines, Vitest testing with binding mocks, performance optimization, security auditing, and migration from AWS Lambda/Vercel/Express.

Sanitize user input, encode output, and enforce Content Security Policy to prevent XSS attacks in web applications handling user-generated content, rich text editors, or dynamic HTML.

Implement CSRF protection for web applications using synchronizer tokens, double-submit cookies, and SameSite attributes. Secures web forms, state-changing endpoints, and authentication layers in Express and Flask apps.

Implement offset, cursor, and keyset pagination strategies for APIs handling large datasets, enabling paginated endpoints, infinite scroll, and optimized database queries.

Build flexible API filtering and sorting systems with query parameter parsing, operators like gte/lte/in, validation, and security whitelists for search endpoints and data grids.

Apply configurable rate limiting to Express APIs using token bucket, sliding window, and Redis-based algorithms to protect against abuse, enforce tiered access, and prevent denial-of-service attacks.

Optimize API responses in Node.js/Express apps by reducing payloads with sparse fieldsets, implementing ETag caching, and enabling compression middleware to improve response times and reduce bandwidth.

Manage Azure cloud resources, deploy applications, and monitor services directly from Claude Code. Covers infrastructure provisioning with Bicep/Terraform, cost analysis, security audits, AI model deployment, and production troubleshooting across compute, storage, networking, and AI services.

Configure HTTP security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options) for Express, Nginx, and Flask applications to protect against XSS, clickjacking, and MIME sniffing attacks. Helps harden web apps and pass security audits.

Add liveness, readiness, startup, and deep health check endpoints with dependency monitoring to your Express/Node.js services, enabling Kubernetes probes, load balancer health checks, and auto-scaling.

Integrates payment processing with Stripe, PayPal, or Square, enabling checkout flows, recurring billing, webhook handling, refunds, and PCI-compliant payment operations.

Manage multiple API versions with URL path, header, or query parameter versioning, including deprecation timelines and migration strategies for backward compatibility.

Integrate the PAYUNi (統一金流) payment gateway into Laravel, Next.js, Django, Express, or Node.js backends for checkout, transaction queries, and webhook handling with AES-256 encryption and signature verification.

Implement role-based access control with Node.js/Express middleware and Python ABAC patterns, supporting role inheritance, permission hierarchies, and policy management for admin dashboards and multi-tenant applications.

Accept stablecoin payments (USDT/USDC on Arbitrum) via KryptoGO Payment — create payment intents, process checkouts with React SDK or Direct API, query transaction status, handle webhook callbacks, and execute token transfers and withdrawals.

Manage the full API lifecycle from Claude Code: sync Postman collections, generate OpenAPI specs from codebases, run test suites, create mock servers, audit security against OWASP Top 10, and evaluate AI agent compatibility.

Generates and implements prioritized security hardening specs for backend services, covering auth patterns, security headers, rate limiting, input validation, secrets management, and dependency hygiene.

Instrument any service with OpenTelemetry — add RED metrics, structured logging, distributed tracing, and health checks by generating code and configuration for Node.js, Python, and Go stacks.

Design APIs, generate system architectures, fix performance bottlenecks, audit backend codebases, and scaffold production-ready services with Docker and structured logging.

Designs complete API specifications including endpoints, request/response shapes, error codes, auth patterns, and pagination, following Stripe's consistency principles. Use when asked to design an API, build endpoints, or create a REST API.

Receive and verify Statsig event webhooks with HMAC-SHA256 signature validation, including exposure events and config-change notifications for gates and experiments.

Receive and verify Sanity GROQ-powered webhooks with signature verification, handling document create/update/delete events for cache revalidation and search reindexing.

Receive and verify Polar webhooks with Standard Webhooks signature verification, including code snippets for Node.js and Python and examples for Express, Next.js, and FastAPI

Receive and verify Uber Eats webhooks with HMAC-SHA256 signature validation, handling order events like orders.notification, orders.cancel, and store status changes.

Build and consume GraphQL APIs with Apollo Client and Server: implement caching strategies, queries, mutations, local state in React, and design server-side schemas, resolvers, data sources, and federation; plus GraphQL language server for code intelligence.

Comply with US state privacy laws (CCPA/CPRA, VCDPA, CPA, CTDPA, TDPSA, etc.) by implementing consumer rights workflows, universal opt-out via Global Privacy Control, and applicability assessments.

Build and scaffold TypeScript/Node.js projects on the Bankr Agent API for crypto trading, market analysis, NFT operations, Polymarket betting, token swaps, and multi-chain portfolio management across EVM and Solana chains.

Manage a crypto wallet (USDC, ETH, POL, SOL) with email OTP authentication, onramp funding, token swaps, and transfers, then monetize or consume APIs via the x402 payment protocol on Base, Polygon, and Solana — including querying onchain data and discovering paid API services in the bazaar marketplace.

Web development framework with 22 commands and 5 agents for code analysis, performance benchmarking, framework migration, documentation, testing, security review, and automated workflows across React, Vue, Angular, and backend frameworks.

Build, deploy, and manage full-stack serverless applications on Zoho Catalyst — covering frontend hosting, backend functions, NoSQL/relational databases, authentication, object storage, event-driven signals, browser automation, and ML services via MCP-based natural language management.

Test HTTP APIs (REST/GraphQL) with request/response validation, authentication, and error handling using Supertest for TypeScript/JavaScript and httpx/pytest for Python. Set up contract testing with Pact and OpenAPI spec validation for CI breaking change detection and compliance checks.

Provides Node.js backend conventions and an agent that builds features end-to-end for Express, Fastify, Koa, Hapi, or plain Node projects, automatically detecting package manager, module system, TypeScript config, and validation library.

Run a security audit on vibe-coded SaaS apps, scanning 50 common vulnerabilities such as exposed secrets, missing authorization, and open database rules, and produce a prioritized fix list.

Orchestrate the full software development lifecycle with 53 specialist skills and 43 slash commands — from discovery, UX research, and spec-driven development through backend/frontend implementation, QA, security auditing, canary deployment, and post-deploy monitoring. Includes autonomous multi-agent pipelines, memory vault management, AI-writing detection, and telemetry-driven insights.

Enforces mindful AI coding discipline with tiered modes, 21 slash commands, and 8 specialist agents for code reviews, security audits, backend missions, DevOps runbooks, database migrations, refactoring, and test generation across PHP, Node, Python, and Go stacks.

Deploy websites, apps, and AI agents to the Agentuity cloud platform with managed databases, storage, queues, cron jobs, email, and webhooks. Build backend APIs and AI agent logic using the Agentuity runtime, connect frontends via React hooks with auth and real-time communication, and manage infrastructure through the CLI.

Enforces a 31-stage AI-driven software development lifecycle for Claude Code — from PRD and design through TDD, implementation, code review, release, and retrospective — with hard contracts that persist artifacts to disk and require tests before code.

Implement the Machine Payments Protocol (MPP) for HTTP 402-based autonomous payments, enabling AI agents to pay for API calls, data, and services via Stripe or Tempo blockchain, with middleware, service discovery, and security patterns.

Turns Claude Code into an interactive coding tutor that teaches programming concepts during real development. Explains decisions, quizzes understanding, tracks belt-based progression, and adapts explanations to your skill level — all locally and privately.

Integrate with Webflow to manage tracking consent, build React components via DevLink, create Designer Extensions, configure Enterprise workspace settings, and handle webhook events for forms, CMS, ecommerce, and site publishing.

Build, deploy, and connect AI agents to SAP Joule via the A2A protocol on BTP Cloud Foundry, with scaffolding, CLI management, and automated deployment of Joule capabilities.

Boot a realistic mock API server from an OpenAPI spec, with fake data, stubbed CRUD endpoints, simulated latency, and controlled error responses for rapid testing.

Implement the Agentic Commerce Protocol (ACP) for AI-agent-mediated commerce, including checkout sessions, delegated payments via Stripe SharedPaymentTokens, product feed generation, order lifecycle management, fulfillment options, discount handling, affiliate attribution, and merchant server scaffolding in Python, TypeScript, or Go.

Build and orchestrate multi-agent systems using Google's A2A protocol: create Agent Cards, manage task lifecycles, handle streaming and push notifications, implement authentication, and integrate with frameworks like LangGraph and CrewAI.