claude

api-engineering

API engineering specialist team — agents (api-design-architect, api-implementation-engineer, api-security-engineer, api-testing-engineer, api-platform-engineer) for the full lifecycle of an API you produce: paradigm choice (REST/GraphQL/gRPC/webhooks/AsyncAPI), contract-first design (OpenAPI 3.1/3.2, AsyncAPI 3.0, Arazzo), versioning & deprecation; the build craft (RFC 9457 Problem Details, cursor pagination, Idempotency-Key, ETag concurrency, HTTP semantics, 202+polling, RateLimit headers); security (OWASP API Security Top 10 2023 — BOLA/BOPLA/BFLA, token/scope validation, consumption limits, SSRF); and testing & operations (contract tests, Spectral lint in CI, Prism/Postman mocks, k6 load, gateway design, dev portal + SDK codegen, sunset rollout). Knowledge bank with Mermaid decision trees + a dated 2026 capability map, best-practices, templates, commands, an advisory hook. Security verdicts escalate to ravenclaude-core/security-reviewer. Requires ravenclaude-core@>=0.7.0.

9 on GitHubby Matt Corbettv0.2.4MITupdated today
/

Plugin api-engineering from marketplace ravenclaude in mcorbett51090/RavenClaude. Commands read from the repo's manifest — today.

This plugin runs code on your machine — its hooks fire automatically on events like tool use. The exact commands are listed below; read them before installing.

What it installs

Skills (6)

  • api-deprecation-rollout

    Step-by-step playbook for deprecating and sunsetting an API version — header strategy, consumer communication timeline, traffic monitoring gates, and the SDKs/portal update checklist.

  • cursor-pagination-design

    Playbook for designing cursor (keyset) pagination on list endpoints: cursor encoding, response envelope, query parameter contract, and the migration path away from offset pagination.

  • idempotency-key-design

    Playbook for designing safe-to-retry POST and PATCH operations using Idempotency-Key — covers key format, dedup window, stored-response replay, conflict handling, and OpenAPI declaration.

  • openapi-contract-authoring

    Step-by-step playbook for writing a contract-first OpenAPI 3.1 document — from info block to path items, component reuse, and Spectral pre-flight. Covers resource modeling, status codes, error schema, and pagination shape.

  • problem-details-error-design

    Playbook for designing a consistent RFC 9457 Problem Details error model — type URIs, extension members, status code mapping, and a catalog template. Prevents per-endpoint bespoke error shapes.

  • spectral-ruleset-authoring

    Playbook for writing and wiring a Spectral ruleset that enforces an API style guide in CI — covers rule anatomy, severity levels, custom functions, and the recommended core-rules baseline.

Slash commands (6)

  • /api-engineering:design-api

    Design an API contract-first — choose the paradigm (REST/GraphQL/gRPC/webhooks/async) by interaction shape, model resources not RPC verbs, author an OpenAPI 3.1/3.2 or AsyncAPI 3.0 skeleton with RFC 9457 errors + cursor pagination + security schemes, and set the versioning posture.

  • /api-engineering:generate-contract-tests

    Generate contract tests and a mock from an API spec — consumer-driven contract tests (Pact/schema) that gate the provider's CI, a spec-driven mock (Prism/Postman) for parallel consumer dev, and a k6 load test asserted against an SLO.

  • /api-engineering:harden-api

    Run an OWASP API Security Top 10 (2023) pass over an API or endpoint — object-level (BOLA) and function-level (BFLA) authorization, token/scope validation, property-level authorization (BOPLA), resource-consumption limits, SSRF, misconfiguration, inventory, and unsafe upstream consumption. Designs c

  • /api-engineering:lint-api-spec

    Lint an OpenAPI/AsyncAPI spec against the house Spectral ruleset as a governance gate — security on every operation, RFC 9457 errors, cursor pagination, no API key in query, OpenAPI 3.1+ — and wire it into CI to fail the build on violations.

  • /api-engineering:review-api-design

    Review an existing API spec or endpoint against the house design-review checklist — paradigm/contract, resource modeling, HTTP semantics, RFC 9457 errors, cursor pagination, idempotency/concurrency, the OWASP API security pass, and versioning/lifecycle.

  • /api-engineering:scaffold-error-model

    Scaffold a consistent RFC 9457 Problem Details (application/problem+json) error model for an API — a catalog of stable type URIs, validation-error mapping, and the response shape — replacing bespoke per-endpoint error shapes.

Subagents (5)

  • api-design-architect

    Use for designing an API before it is built — paradigm (REST/GraphQL/gRPC/webhooks/AsyncAPI), resource modeling, contract-first OpenAPI 3.1/AsyncAPI authoring, versioning/deprecation, and a Spectral style guide. Build → api-implementation-engineer; security → core/security-reviewer.

  • api-implementation-engineer

    Use for building API endpoints against a contract — status codes, RFC 9457 Problem Details, cursor pagination, filter/sort, Idempotency-Key, ETag/optimistic concurrency, content negotiation, 202+polling, RateLimit headers. Implements api-design-architect; security → api-security-engineer.

  • api-platform-engineer

    Use for the operate layer of an API — gateway/management design (rate-limit policy, quota tiers, caching, routing), developer experience (docs portal, generated reference, SDK codegen), lifecycle & deprecation (Deprecation/Sunset headers), and observability. Routes gateway infra to azure-cloud.

  • api-security-engineer

    Use for securing an API surface against the OWASP API Security Top 10 (2023) — object-level (BOLA) and function-level (BFLA) authorization, object-property (BOPLA), JWT/scope validation, resource consumption, SSRF, CORS, input validation. Escalates every acceptability verdict to security-reviewer.

  • api-testing-engineer

    Use for testing and governing an API — consumer-driven contract testing (Pact/schema), Spectral lint as a CI gate, mocking/virtualization (Prism, Postman), Newman, negative/fuzz/boundary tests, schema-drift detection, k6 load-to-SLO. Turns api-design-architect's contract into automated CI gates.

Hooks (1)

  • PreToolUse

    /usr/bin/env -u BASH_ENV -u ENV -u SHELLOPTS -u BASHOPTS -u LD_PRELOAD -u LD_LIBRARY_PATH -u LD_AUDIT -u DYLD_INSERT_LIBRARIES -u DYLD_LIBRARY_PATH -u PYTHONPATH -u PYTHONSTARTUP PATH=/usr/local/bin:/

Language servers (1)

  • vacuum
View source on GitHub mcorbett51090.github.io

More from mcorbett51090/RavenClaude

All 184 plugins →

Domain-neutral Claude Code foundation: specialist agents, skills, gates, hooks, rules, templates. Capability Grounding Protocol, Structured Output Protocol, Researcher meta-skill, comfort-posture dashboard, opt-in command-review tribunal (the Thing), WebFetch sanitizer, branch-archive escape hatch, brand-extraction (homepage → brand kit), /wireframe (describe anything → validated model + high-fi Artifact + Mermaid), Problems & Resolutions view, declarative-visualization (Vega-Lite/Deneb/SVG, Gate 101 + Gate 103 svg-report-lint, viz-spec-reviewer), and Claude orchestrator escape hatch (/claude-orchestrate). Slash commands: /init-agent-ready, /wrap, /set-posture, /dashboard, /forge, /wireframe, /reset-plugin-cache, /handoff.

70 skills · 14 commands · 18 agents · hooks

9

Power Platform specialist team — agents (incl. power-platform-tester, power-bi-engineer) and skills, with strong ALM/git coverage for solutions, flows, and PBIP. A house-opinions hook flags 8 §3/§4 violations; the knowledge bank carries production decision trees (PA-flow recovery, Dataverse token-acquisition, PCF React surface, PBI deploy/refresh, custom-connector build-path, PBIR Enhanced infinite-spinner debug + full build reference, DAX silent-zero scoring via the `Domain` pattern, sempy.fabric notebook reference, Power BI Copilot report-readiness, Code Apps connector gotchas, PBIP deployment variables + #839, PBIR reference enrichment, PBIP report fast-solve triage router [MCP-optional], main-forms-are-Web-API-authorable grounding) plus a real-engagement scenarios bank. Bundles the community pbix-mcp server (d0nk3yhm/pbix-mcp, MIT) for .pbix/.pbit read/write/DAX-eval (`pip install pbix-mcp`); documents (not bundles) the official Microsoft Dataverse MCP (CLAUDE.md §9a). Extends ravenclaude-core.

24 skills · 8 commands · 11 agents · 1 MCP server · hooks

9

finance

claude

Corporate finance & FP&A specialist team — FP&A analyst (budgets, forecasts, variance commentary), financial modeler (3-statement, DCF, scenarios), controller (close, JEs, reconciliations), treasury analyst (cash, covenants, FX), valuation analyst (DCF + comps + precedent), audit-prep specialist (PBC, walkthroughs, SOC1/2 narratives), and board-pack composer. skills incl. a gold-standard NetSuite close (OAuth2 M2M + SuiteQL BS/IS trial balance, layperson runbook), templates, a knowledge bank (ASC 805 / 718 / 740, accrual-cutoff, WACC, cost accounting, FP&A operating model + decision support, NetSuite integration landscape), advisory hooks (hardcoded rates / plaintext PII / missing Sources / Assumptions; secrets-PII scan). Inherits ravenclaude-core protocols.

23 skills · 7 commands · 7 agents · hooks

9

Web design & build specialist team — web architect (IA, stack, hosting), UX designer (wireframes, flows, conversion), visual designer (brand, typography, tokens), frontend implementer (HTML/CSS/JS, React, Astro, Next), content strategist (copy, microcopy, SEO content), accessibility auditor (WCAG 2.2 AA/AAA), and performance engineer (Core Web Vitals, image/font optimization). skills (the gold-standard-website-pipeline gated build pipeline, static-site build, design-system audit, card/tile UI, accessibility review, Core Web Vitals tuning, technical SEO audit, information architecture, conversion design, content audit, design-tokens scaffolding, third-party hygiene, Fluent UI v9 + React implementation), templates, an advisory hook, and a knowledge bank seeded with a curated 2026 reference set of "cutting edge yet simple" marketing-site donors — the design agents carry compact inline priors plus a pointer to the full brief. Inherits ravenclaude-core protocols.

19 skills · 7 commands · 7 agents · hooks · LSP

9

EdTech-flavored Partner Success Manager team — specialist agents anchored on the PSM lane, with skills, templates, an advisory hook, a knowledge bank with Mermaid decision trees, a engagement bank, and a stdlib psm_calc.py calculator (seat-utilization / renewal-NRR-forecast / time-to-value). Covers QBRs, success plans, health scores, a self-contained Power-BI-style partner-health report, onboarding, touchpoint logs, adoption sequencing, 90-day implementation arcs, train-the-trainer curricula, advocacy/reference pipelines, renewal decision memos, and the integration contract for a centralized CS dashboard (Planhat + Salesforce + Snowflake + Zapier + Granola). Team growth ships as skills + knowledge + templates, not parallel agents. Primary-source citations with retrieval dates. Vertical-explicit but segment-agnostic — fits K-12, higher-ed, corporate L&D, or mixed EdTech books. Inherits ravenclaude-core protocols including the alternate-methods Capability Grounding Protocol.

17 skills · 5 commands · 6 agents · hooks

9

Financial-regulatory & compliance specialist team — function agents (AML/KYC, regulatory-reporting, risk-and-controls, policy & procedure, examination-prep, Bermuda-insurance) PLUS jurisdiction/regulator specialists: BMA financial-institutions (banking, trust, corporate-services, fund-admin, investment-business, money-service, digital-assets — the primary build-out, with deep AML/ATF + supervision/fees + licensing-classification trees), CIMA (Cayman), Bahamas, Channel Islands (Jersey JFSC + Guernsey GFSC), UK PRA, and US federal+state. primary-source-cited regulator knowledge files, best-practice rules, skills, templates, a defensive PreToolUse hook (PII scrub — SSN/IBAN/credit-card/Bermuda TIN/wire instructions). Positioning reflects field experience inside a Tier-1 financial regulator (BMA). Inherits ravenclaude-core protocols.

11 skills · 5 commands · 12 agents · hooks

9

Similar plugins

Claude API and SDK documentation skill for building LLM-powered applications

19 skills

anthropics/skills 193,780

Documentation generation, drift detection, and API docs automation

2 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Skill: add headroom-ai compress() to a Python or TypeScript app to cut LLM input tokens (tool outputs, logs, JSON, chat history). No API key.

1 skill

headroomlabs-ai/headroom 79,508

Install the "AAS Backend & API Platform" workflow plugin from Agentic Awesome Skills.

19 skills

sickn33/agentic-awesome-skills 49,620

expo

claude

Official Expo skills for building, deploying, upgrading, and debugging React Native apps with Expo. Covers UI development with Expo Router, SwiftUI and Jetpack Compose components, Tailwind CSS setup, API routes, data fetching, CI/CD workflows, App Store and Play Store deployment, SDK upgrades, DOM components, and dev client distribution.

23 skills · 1 MCP server

anthropics/claude-plugins-official 47,076

The official CCXT MCP server plus the ccxt-mcp usage skill — market data, balances and opt-in trading across 100+ crypto exchanges and prediction markets, with keys kept local.

1 MCP server

ccxt/ccxt 44,873

Maintain api-engineering?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins184 plugins