bobmatnyc avatar

Api Design Patterns

This is a comprehensive reference covering REST, GraphQL, and gRPC patterns with practical decision trees for choosing between them. It walks through versioning strategies, pagination approaches (offset, cursor, keyset), authentication methods, and error handling with clear examples of what works and what doesn't. The quick reference cards are genuinely useful for remembering things like when cursor pagination beats offset or why you'd pick gRPC for microservices but not browser clients. It's structured for progressive disclosure, so you get the essentials up front and can dive into dedicated files for authentication or versioning details when you need them. Good for both designing new APIs and auditing existing ones against established patterns.

skills.sh installs
579
GitHub stars
79
last updated
Aug 21, 2026

Install

$ npx -y skills add bobmatnyc/claude-mpm-skills --skill api-design-patterns --agent claude-code

Installs into .claude/skills of the current project.

Files

API Design Patterns

Design robust, scalable APIs using proven patterns for REST, GraphQL, and gRPC with proper versioning, authentication, and error handling.

Quick Reference

API Style Selection:

  • REST: Resource-based CRUD, simple clients, HTTP-native caching
  • GraphQL: Client-driven queries, complex data graphs, real-time subscriptions
  • gRPC: High-performance RPC, microservices, strong typing, streaming

Critical Patterns:

  • Versioning: URI (/v1/users), header (Accept: application/vnd.api+json;version=1), content negotiation
  • Pagination: Offset (simple), cursor (stable), keyset (performant)
  • Auth: OAuth2 (delegated), JWT (stateless), API keys (service-to-service)
  • Rate limiting: Token bucket, fixed window, sliding window
  • Idempotency: Idempotency keys, conditional requests, safe retry

See references/ for deep dives: rest-patterns.md, graphql-patterns.md, grpc-patterns.md, versioning-strategies.md, authentication.md

Core Principles

Universal API Design Standards

Apply these principles across all API styles:

Sponsors

Details

Repository
github.com/bobmatnyc/claude-mpm-skills
Categories
Backend & APIs, Security, Design & UI/UX
First seen
Jun 3, 2026

More from bobmatnyc/claude-mpm-skills

All 158
1glitternetwork avatarpinme-authglitternetwork/pinmeUse when a PinMe project (Worker TypeScript) needs to integrate user authentication — creating email/password users, verifying id_tokens, querying user info, or511skills.sh installs
2intellectronica avatarraindrop-apiintellectronica/agent-skillsThis skill provides comprehensive instructions for interacting with the Raindrop.io bookmarks service via its REST API using curl and jq. It covers authenticati507skills.sh installs
3secondsky avatarapi-security-hardeningsecondsky/claude-skillsREST API security hardening with authentication, rate limiting, input validation, security headers. Use for production APIs, security audits, defense-in-depth, 506skills.sh installs
4aj-geddes avatardatabase-migration-managementaj-geddes/useful-ai-promptsManage database migrations and schema versioning. Use when planning migrations, version control, rollback strategies, or data transformations in PostgreSQL and 504skills.sh installs
5aj-geddes avatarapi-reference-documentationaj-geddes/useful-ai-promptsCreate comprehensive API reference documentation with OpenAPI/Swagger specs, REST endpoints, authentication, examples, and SDKs. Use when documenting REST APIs,499skills.sh installs
6yoanbernabeu avatarsupabase-extract-db-stringyoanbernabeu/supabase-pentest-skillsCRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.499skills.sh installs