Skill UI

OpenRouter provides a unified API gateway to access leading AI models (OpenAI, Anthropic, Google, Meta, etc.) from a single endpoint. This skill is essential for developers who need to compare model performance (latency, tokens) across different providers, build resilient cross-provider fallback workflows, or manage complex AI pipelines without writing provider-specific code. It supports feature normalization and BYOK (Bring Your Own Key) for high-volume production use.

This comprehensive guide provides developers with step-by-step instructions for migrating applications from direct calls to proprietary Large Language Model (LLM) APIs (such as OpenAI or Anthropic) to utilizing the unified OpenRouter gateway. It details essential code changes, including updating base URLs, managing API keys, adding custom headers, and correctly prefixing model identifiers. This ensures a seamless transition, enabling multi-model compatibility and simplified API management.

A comprehensive guide to integrating PayPal into applications, covering all aspects of the payment lifecycle. This skill covers client-side implementations using JavaScript SDK for Express Checkout, server-side API interactions (REST API) for order creation and capture, handling recurring billing via Subscriptions, managing asynchronous updates through IPN/Webhooks, and processing refunds and payouts. Ideal for building robust e-commerce payment gateways.

This guide details how to implement Role-Based Access Control (RBAC) for Perplexity API in enterprise environments. Since Perplexity lacks native RBAC, the solution involves building a middleware gateway. This gateway enforces granular policies, including team-specific API key usage, model restriction (e.g., limiting access to 'sonar' only), budget caps, rate limiting, and mandatory search domain filtering for compliance and security.

This guide provides the complete, production-grade reference architecture for integrating the Speak language learning platform. It covers all necessary components, including the client, API gateway, assessment engine, and progress store. Use this blueprint to ensure a robust, scalable, and reliable implementation for managing large-scale language learning operations.

A comprehensive guide for designing and building scalable, resilient serverless applications and event-driven architectures on AWS. It covers best practices using Lambda, API Gateway, DynamoDB, Step Functions, and adheres to the AWS Well-Architected Framework principles, ensuring optimal performance, cost-efficiency, and maintainability.

A robust, production-grade REST API gateway designed to wrap ComfyUI servers. It provides comprehensive features including workflow templating, job queuing (with priorities), webhooks, result caching, authentication, and rate limiting. It transforms ComfyUI into a universal, scalable, and secure service for automated image generation pipelines.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

A comprehensive utility designed to assess the security posture of modern APIs, including REST, GraphQL, and gRPC. It strictly follows the OWASP API Security Top 10 framework, testing for critical vulnerabilities such as Broken Object/Function Level Authorization (BOLA/BFLA), SQL/NoSQL injection flaws, and weaknesses in authentication mechanisms like JWT manipulation. Essential for security engineers and penetration testers validating complex microservice architectures and API gateways.

This tool discovers and inventories 'shadow APIs'—endpoints that operate outside documented specifications (OpenAPI/Swagger). It utilizes advanced traffic analysis against API gateways (e.g., Kong, AWS API Gateway), cloud configuration scanning, and source code mining. Essential for assessing the complete API attack surface, auditing forgotten services, or establishing robust API governance policies.

A comprehensive guide for implementing centralized security controls on API gateways (e.g., Kong, AWS API Gateway, Azure APIM). It covers critical defense layers including JWT-based authentication enforcement, advanced rate limiting and throttling, request validation against schemas, TLS termination, and Web Application Firewall (WAF) integration. Use this when establishing a robust, layer-7 security posture for microservice APIs.

This solution enforces strict data contract validation for all APIs using OpenAPI Specification (OAS) and JSON Schema. It ensures that all incoming requests and outgoing responses conform to predefined structures. By implementing validation at both the API Gateway (runtime) and during development (shift-left), it effectively prevents critical security vulnerabilities such as SQL injection, XSS, unauthorized data leakage, and mass assignment.