Skill UI

OpenRouter provides a unified API gateway to access leading AI models (OpenAI, Anthropic, Google, Meta, etc.) from a single endpoint. This skill is essential for developers who need to compare model performance (latency, tokens) across different providers, build resilient cross-provider fallback workflows, or manage complex AI pipelines without writing provider-specific code. It supports feature normalization and BYOK (Bring Your Own Key) for high-volume production use.

This comprehensive guide provides developers with step-by-step instructions for migrating applications from direct calls to proprietary Large Language Model (LLM) APIs (such as OpenAI or Anthropic) to utilizing the unified OpenRouter gateway. It details essential code changes, including updating base URLs, managing API keys, adding custom headers, and correctly prefixing model identifiers. This ensures a seamless transition, enabling multi-model compatibility and simplified API management.

A comprehensive guide to integrating PayPal into applications, covering all aspects of the payment lifecycle. This skill covers client-side implementations using JavaScript SDK for Express Checkout, server-side API interactions (REST API) for order creation and capture, handling recurring billing via Subscriptions, managing asynchronous updates through IPN/Webhooks, and processing refunds and payouts. Ideal for building robust e-commerce payment gateways.

This guide details how to implement Role-Based Access Control (RBAC) for Perplexity API in enterprise environments. Since Perplexity lacks native RBAC, the solution involves building a middleware gateway. This gateway enforces granular policies, including team-specific API key usage, model restriction (e.g., limiting access to 'sonar' only), budget caps, rate limiting, and mandatory search domain filtering for compliance and security.

This guide provides the complete, production-grade reference architecture for integrating the Speak language learning platform. It covers all necessary components, including the client, API gateway, assessment engine, and progress store. Use this blueprint to ensure a robust, scalable, and reliable implementation for managing large-scale language learning operations.

A robust, production-grade REST API gateway designed to wrap ComfyUI servers. It provides comprehensive features including workflow templating, job queuing (with priorities), webhooks, result caching, authentication, and rate limiting. It transforms ComfyUI into a universal, scalable, and secure service for automated image generation pipelines.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

This guide details the implementation of robust API abuse detection mechanisms. It covers advanced rate limiting techniques, such as the Token Bucket and Sliding Window algorithms, to defend APIs against DDoS attacks, brute force attempts, and credential stuffing. It emphasizes using distributed stores like Redis for accurate, scalable, and adaptive security controls in an API gateway context.

This comprehensive guide details how to implement centralized security controls at the API gateway layer. It covers critical functionalities such as JWT authentication enforcement, advanced rate limiting, request/response validation against OpenAPI specs, and integrating Web Application Firewalls (WAF). The process is applicable across major platforms like Kong, AWS API Gateway, and Azure APIM, ensuring robust defense in depth for microservices architecture.

This guide details how to implement robust API schema validation using OpenAPI Specification (OAS) and JSON Schema. It enforces strict input/output contracts, preventing critical vulnerabilities such as injection attacks (SQLi, XSS), data leakage, and mass assignment by validating data types and structure at the API gateway or development level.

This guide details implementing robust, multi-layered security for public-facing API Gateway endpoints using AWS WAF. Key features include configuring managed rule groups for OWASP Top 10 protection, setting up granular rate limiting to prevent abuse, implementing bot mitigation, and performing IP reputation filtering. Essential for maintaining API integrity and availability.