boundary-tested-api-protection-design

Designs and reviews API identity, object-level authorization, input contracts, quotas, data protection and security tests for REST, GraphQL and WebSocket services. Use when the user asks to "secure our API endpoints", "add authentication or role checks", "stop injection or SSRF", "set up rate limiting", "prepare for a security audit", or "review an API for vulnerabilities". Not for unauthorized probing of systems, changing production credentials, or claiming a checklist makes an API fully secure.

Version

v1.0.1

Size

16 KB

Updated

2026-10-06

Your client verifies the signature before reading. This explicit manual read is available on every plan. Free automatically loads five chosen skills; paid plans automatically load relevant skills across the library.