REST API plugins

Design and implement backend systems with REST/GraphQL APIs, microservices, event sourcing, CQRS, and Temporal workflows, including testing, security auditing, and performance optimization.

Generate and maintain comprehensive documentation from any codebase: OpenAPI 3.1 specs, Mermaid diagrams, step-by-step tutorials, Architecture Decision Records, and automated changelogs. Supports CI/CD integration and includes agents for creating developer portals and technical references.

Orchestrate cross-platform feature development across web, iOS, Android, and desktop with API-first design, shared business logic, and parallel platform implementation using specialized agents for backend, frontend, mobile, and design systems.

Write and review secure code across the full stack: implement authentication (OAuth2/JWT/RBAC/SSO), secure REST/GraphQL/WebSocket APIs, prevent XSS and DOM-based vulnerabilities, enforce PCI DSS compliance, and audit code for security best practices.

Design and implement secure backend APIs with authentication, authorization, rate limiting, input validation, and protection against common vulnerabilities using architectural guidance and hands-on coding assistance.

Manage an entire Paperclip AI-agent company through chat: hire governance-aware agents, decompose plans into parallel tasks, monitor work product and costs, and persist knowledge across sessions using PARA file memory.

Scaffolds production-ready REST and GraphQL APIs with framework selection (FastAPI, Django), async patterns, dependency injection, microservices architecture, and scalable backend design.

Implement input validation, authentication, API security, and database protection for backend APIs. Use for adding security features or fixing vulnerabilities with defensive coding practices.

Generate mock REST APIs with configurable latency and scenarios for development and testing, then produce OpenAPI 3.1 documentation and interactive developer portals from those APIs

Apply security best practices across the full application stack, from secure backend coding and API authentication to frontend XSS prevention and CI/CD secrets management, with support for threat modeling and compliance standards like PCI DSS.

Design, build, document, and secure production-ready REST, GraphQL, and WebSocket APIs with patterns for versioning, pagination, auth, error handling, load testing, and monitoring

Conduct comprehensive security assessments and penetration testing across web applications, APIs, cloud infrastructure, and Linux systems, using OWASP methodologies, SAST scanning, and threat modeling for DevSecOps.

Secure full-stack applications by implementing authentication, authorization, input validation, API security patterns, dependency vulnerability auditing, XSS prevention, and PCI DSS compliance across REST, GraphQL, and WebSocket APIs.

Automate web application testing across end-to-end, load, and accessibility domains with Playwright, Puppeteer, and k6, enforce test-driven development, debug failures, and review code quality.

Design, build, and document production-ready Python APIs with FastAPI and Django, including async patterns, OpenAPI spec generation, Pydantic models, and testing strategies.

Integrate payment processing, CRM, communication, search, and financial APIs with expert patterns for Stripe, HubSpot, Twilio, Algolia, and Plaid, including webhooks, OAuth, and event-driven architectures.

Plan your day, manage tasks, and build persistent memory of work context. Decodes workplace shorthand and acronyms, and syncs with external calendars, email, chat, and project trackers like Asana, Linear, Jira, and Notion.

Build and audit investment-grade financial models (DCF, LBO, 3-statement), comparable company analyses, and competitive landscape decks directly from Claude, with data sourced from Morningstar, FactSet, Moody's, PitchBook, and other financial APIs.

Automate product management workflows from ideation to delivery—write feature specs, plan roadmaps, synthesize user research, analyze metrics, and generate stakeholder updates, all connected to your existing tools like Jira, Linear, Slack, Notion, and Figma.

Generate and maintain OpenAPI 3.1 specifications from code or design-first specs, enabling API documentation, SDK generation, and contract compliance validation.

Design microservices architectures with service boundaries, event-driven communication, and resilience patterns for distributed systems, monolith decomposition, or microservices implementation.

Guides designing and reviewing REST and GraphQL APIs with best practices for resource modeling, versioning, pagination, error handling, and schema-first development

Automate 90+ Korean daily-life and business tasks: book KTX/SRT trains, search Coupang/Daangn, check real estate prices, look up laws, track parcels, and more via public APIs and browser automation.

Accelerate early-stage life sciences R&D by searching biomedical literature and preprints, querying drug targets and clinical trials, analyzing single-cell RNA-seq data, running nf-core bioinformatics pipelines, and converting lab instrument files to standardized formats for LIMS and data lakes.

Generate professional financial reports—equity earnings previews, company tear sheets, and capital markets briefings—using live S&P Capital IQ data via the Kensho API, outputting HTML, PowerPoint, and Word documents.

Scaffold, build, and deploy MCP servers using the mcp-use framework, including OpenAPI-to-MCP conversion with Zod schemas and cloud deployment.

Add standard REST API operations (GET, POST, PATCH, DELETE) to TypeSpec API definitions with automatic routing, parameter handling, and adaptive card responses.

Orchestrate full-spectrum bug bounty hunting and external red-team engagements across web, mobile, cloud, and infrastructure targets with 80+ specialized skills for vulnerability detection, recon, exploit chaining, and report generation.

Generate structured engineering documents and analyses for code reviews, incident postmortems, API docs, architecture decisions, system design, runbooks, CI/CD, SLOs, database migrations, security threat models, and more — all from natural language prompts in Claude Code.

Deploy a team of expert coding agents for software architecture, backend/frontend development, mobile apps, CMS platforms (Directus, Drupal, WordPress), and legacy modernization — each specialized in specific frameworks and best practices.

De-identify PHI, extract clinical named entities, map to FHIR R4 and OMOP CDM, run compliance audits, and evaluate model fairness—all on-device.

Autonomous multi-agent development framework that orchestrates spec-driven sprints: agents plan, implement, test, and review code in parallel across frontend, backend, and CI/CD, converging on a finished feature without manual handoffs.

Build Python applications on Azure using SDK best practices across AI, storage, identity, messaging, monitoring, and management — including agents, content safety, translation, vision, speech, Cosmos DB, Event Hubs, Service Bus, Key Vault, and OpenTelemetry instrumentation.

Write, rewrite, audit, and optimize blog content for Google rankings and AI citation visibility (GEO/AEO) using a 32-skill orchestrated workflow with topic-cluster planning, multilingual publishing, fact-checking, image generation, and quality scoring.

Develop, debug, deploy, and integrate Apify Actors for serverless web scraping, data extraction, and automation across 15+ platforms, with CLI setup, code migration, schema generation, and SDK integration for JS/TS and Python apps.

Integrate, deploy, and manage OpenEvidence clinical AI in healthcare workflows: API setup, evidence querying with filters, drug interaction checks, guideline lookups, citation management, structured report generation, HIPAA-compliant security, performance monitoring, and cost optimization.

Develop and operate Canva Connect API integrations from authentication to production deployment, including debugging, performance tuning, security hardening, and CI/CD.

Generate interactive API documentation from OpenAPI/Swagger specs with runnable code samples in curl, JavaScript, Python, and Go, including auth guides, error references, versioning, and deployment-ready sites. Also reverse-engineer existing APIs to produce OpenAPI 3.0 specs, test collections, and client SDKs.

Integrates Kling AI video generation into development workflows with skills for text-to-video, image-to-video, async pipelines, CI/CD automation, cost controls, webhook callbacks, and production readiness.

Integrate with the Lucidchart diagramming API to create, edit, export, and collaborate on diagrams programmatically, with support for local development, testing, deployment, debugging, and security best practices.

Orchestrate authorized penetration tests and red team engagements with 50 specialist subagents covering recon, web/API, Active Directory, cloud, mobile, wireless, exploitation, post-exploitation, detection, forensics, and reporting.

Manage the full Salesforce development lifecycle including querying, debugging, deploying, monitoring performance, enforcing security, and building integrations with patterns for CI/CD, data migration, and event-driven architecture.

Generate and run API load/stress/soak tests using k6, Artillery, or Gatling to validate performance, identify bottlenecks, and establish baselines under configurable loads.

Analyze network request patterns in your codebase to identify latency bottlenecks, serial requests, and optimization opportunities, with actionable recommendations for parallelization, batching, connection pooling, and timeout tuning.

Batch process API calls with job queues, concurrency control, and progress tracking. Optimize looped API calls by batching them into bulk operations with error recovery and partial failure handling.

Scan REST APIs for OWASP API Top 10 vulnerabilities including injection, BOLA, broken authentication, mass assignment, excessive data exposure, missing rate limits, and weak validation. Automates security scanning, produces reports with JSON findings and remediation guidance.

Integrate and manage ClickUp workspaces, tasks, and projects via API v2, with tools for authentication, error handling, rate limiting, monitoring, deployment, migration, and security—all from Claude Code.

Manage full Vercel deployment lifecycle: previews, production rollouts, CI/CD pipelines, edge functions, cost optimization, incident response, security hardening, and migrations from other platforms.

Run U.S. legal research by querying Westlaw Deep Research to receive synthesized reports on caselaw, statutes, and regulations with linked inline citations to Westlaw and Practical Law sources.

Develop custom WordPress blocks, block themes, and editor components using modern JavaScript and the Interactivity API. Automate plugin audits, REST API development, performance profiling, and deployment workflows with WP-CLI and Playground environments.

Build and manage data portals with PortalJS: scaffold a portal, add datasets (CSV, GeoJSON, etc.), create charts and maps, connect CKAN backends, migrate from ArcGIS/Socrata/other platforms, deploy to Cloudflare, and audit data quality.

Develop, deploy, and maintain Intercom integrations with skills for API development, CI/CD, monitoring, security, compliance, and migration from other platforms.

Integrate Grammarly's writing analysis, AI content detection, and plagiarism checking APIs into applications. Covers setup, authentication, testing, deployment, monitoring, error handling, performance optimization, and migration from deprecated SDKs.

Generate complete API authentication and authorization systems with JWT, OAuth2, API keys, sessions, MFA, RBAC, rate limiting, and audit logging. Produces user models, middleware, and brute-force protection.

Manage HubSpot CRM at production scale across multi-portal agencies, including authentication, deduplication, pipeline automation, CRM sync from Salesforce/Pipedrive/Copper, webhook hardening, rate-limit survival, and data warehousing to BigQuery/Snowflake/Postgres.

Build and manage Clari revenue intelligence integrations: export forecasts to data warehouses, build analytics, automate pipelines, handle API errors, secure tokens, and monitor changes.

Integrate and operate the Speak AI language learning platform via skills for API authentication, audio preprocessing, testing, deployment, monitoring, security compliance, and incident response.

Ensure API contract compliance by validating responses against OpenAPI and JSON schemas, detecting schema drift, and verifying data integrity in middleware or tests.

Integrate with the Procore construction management API to automate RFI and submittal workflows, manage OAuth2 authentication, handle rate limits and errors, and process webhook events for project data.

Manage Instantly.ai cold email campaigns, email deliverability, and API integrations directly from Claude Code. Automate campaign creation, sender warmup, lead management, webhook deployment, CI/CD pipelines, monitoring, and migration from v1 to v2 API.

Automate API endpoint testing for REST and GraphQL APIs with request generation, response validation, schema compliance, and coverage reporting for regression or new test suites.

Integrate with BambooHR API to manage employee data, time-off, benefits, webhooks, and custom reports. Includes authentication, rate limiting, performance optimization, deployment, security, testing, and migration support for production HR data pipelines.

Build, test, and debug Dart and Flutter applications with language analysis, code generation, widget testing, layout debugging, routing, internationalization, and native interop via FFI

Monitor cross-chain bridge activity including TVL, volume, fees, and transaction status across networks, and analyze security models to detect exploits for bridges like Wormhole, Stargate, Hop, and L2 canonical bridges.

Automate Guidewire InsuranceSuite development and operations: CI/CD pipeline design, PolicyCenter/ClaimCenter lifecycle automation via Cloud API, OAuth2 authentication hardening, Gosu hot-reload and TDD workflows, cloud migration, production-grade API client with retry/pagination, SOC 2 security hardening, and event-driven integrations with AWS/Kafka/webhooks.

Access 20+ live data sources (weather, air quality, currency, crypto, stocks, sports, holidays, Wikipedia, Hacker News, DNS, earthquakes, flight tracking, ISS position, package health, RSS feeds, site outages, and more) via curl with zero API keys, enabling Claude to answer real-world queries with sourced, timestamped data.

Run fuzz tests against REST and GraphQL APIs using malformed inputs and edge cases to discover crashes, vulnerabilities, and input-validation gaps, then review a categorized security report.

Configure, index, secure, and monitor Glean enterprise search—including custom connector deployment, permission mapping, migration from Elasticsearch/Algolia, API rate limiting, and event-driven indexing.

Manage GPU compute on Vast.ai: provision instances, run training/inference, monitor costs, optimize performance, and automate CI/CD pipelines for ML workloads.

Integrate with the MindTickle sales enablement platform: manage training content, quizzes, user progress, and webhooks; set up CI/CD pipelines, local dev servers, and multi-tenant infrastructure; diagnose API errors, enforce security, and optimize costs.

Integrate with the Fathom meeting intelligence API to fetch transcripts, summaries, and action items; build analytics pipelines; sync data to CRMs; handle webhooks, rate limits, authentication, and error diagnostics; and deploy containerized services with CI/CD.

Production-harden Podium SaaS integrations with skills for OAuth2 token management, webhook security, rate-limit survival, multi-tenant routing, data export to vector stores, and Shopify-to-review automation. Includes PII-redacted transcript ingestion and RAG context retrieval for LLM augmentation. Designed for multi-location operators and compliance teams.

Build, deploy, and maintain Apollo.io sales intelligence integrations with full lifecycle support: authentication, search/enrichment, email sequences, webhooks, rate limiting, caching, monitoring, CI/CD, and compliance.

Integrate AssemblyAI's speech-to-text and audio intelligence APIs into development workflows, covering transcription, streaming, LeMUR analysis, CI/CD pipelines, deployment to cloud platforms, cost optimization, security best practices, and SDK management.

Develop OneNote integrations using the Microsoft Graph API, handling CRUD operations, authentication, error handling, rate limiting, and deployment to Docker/Kubernetes.

Integrate Klaviyo marketing automation into development workflows with CI/CD pipelines, API debugging, cost optimization, security compliance, deployment to Vercel/Cloud Run, monitoring, and migration from legacy ESPs.

Analyze NFT collections by calculating rarity scores, ranking tokens by trait uniqueness, and generating structured reports with market insights and investment perspectives using OpenSea metadata. Export results as JSON or CSV.

Migrate APIs between versions or frameworks with automated compatibility layers, breaking change detection, and zero-downtime deployment using strangler fig, traffic shadowing, and phased cutovers.

Integrate with the SalesLoft REST API v2 to manage people, cadences, enrollments, and activity tracking; handle OAuth authentication, rate limiting, and webhook verification; run CI tests and deploy integrations with production-ready architecture.

Manage API versions across URL paths, headers, or query parameters with deprecation workflows, migration strategies, backward compatibility adapters, and OpenAPI-based breaking change detection.

Generate OpenAPI 3.0/3.1 specs, Pact consumer contracts, and Spring Cloud Contract artifacts from API code, designs, or schemas, with verification tests for consumer-driven contract testing.

Build, deploy, and monitor Flexport logistics integrations: manage shipments, purchase orders, webhooks, authentication, rate limits, and multi-environment deployments with TypeScript/Python patterns and CI/CD pipelines.

Automate presentation creation and API integration with Gamma.app: generate slides from templates, manage credentials and rate limits, deploy to cloud platforms, and monitor usage—all from Claude Code.

Manage the full Juicebox recruiting intelligence lifecycle: search 800M+ professional profiles, enrich candidate data, run AI-powered analysis pipelines, handle API auth/rate-limiting/errors, deploy containerized services, configure multi-environment setups, monitor performance, and ensure GDPR compliance with PII protection.

Build API monitoring dashboards with Prometheus metrics, Grafana visualizations, health checks, synthetic probes, and SLO tracking for performance and uptime observability.

Validate API schemas across OpenAPI, JSON Schema, GraphQL, and Zod with linting, structural analysis, breaking change detection, and generate reusable schemas, middleware, TypeScript types, and test suites.

Generate mock API servers from OpenAPI specs with realistic fake data, stateful CRUD, and configurable latency/errors for testing frontend applications.

Integrate with the MaintainX CMMS API to manage work orders, assets, and locations; handle authentication, error debugging, and rate limits; sync, transform, and export data between MaintainX and external systems; set up CI/CD pipelines, local development loops, and production deployments with Docker, GCP, or Kubernetes.

Develop, deploy, and maintain Evernote API integrations, covering OAuth setup, note CRUD, search, webhooks, CI/CD pipelines, multi-environment deployment, monitoring, rate-limit handling, security hardening, and data migration.

Programmatically manage Linktree link-in-bio profiles via REST API: create, update, delete, and reorder links; fetch analytics and webhooks; includes authentication setup, testing pipelines, rate-limit handling, and production deployment patterns.

Generate production-ready REST APIs from OpenAPI specs or schemas, with CRUD endpoints, pagination, filtering, authentication, validation, and test scaffolding for Express, FastAPI, Spring Boot, Gin, and NestJS.

Capture and log API requests with structured logging, correlation IDs, performance metrics, PII redaction, and security audit trails for debugging, analysis, and compliance

Debug, deploy, and optimize Adobe API integrations (Firefly, PDF Services, I/O Events) with authentication setup, CI/CD pipelines, error handling, cost monitoring, and security best practices.

Build, test, deploy, and maintain Attio CRM integrations with a full skill pack covering CRUD operations, webhooks, authentication, rate limiting, error handling, CI/CD, performance optimization, and production readiness.

End-to-end Hex data analytics lifecycle: deploy to Vercel/Fly.io/Cloud Run, set up CI/CD triggers, manage API runs with TypeScript/Python SDKs, handle rate limiting and secrets, and debug production issues via diagnostics and rollback procedures.

End-to-end Documenso e-signature integration: API setup, document creation, signing workflows, deployment, security, monitoring, and migration from DocuSign/HelloSign.