Backend & APIs skills for Codex
Skills for building services that behave under load: REST, GraphQL and gRPC design, OpenAPI-first workflows, idempotency, pagination and rate limits, webhooks in both directions, background jobs, realtime connections, authentication, and framework playbooks for Express, Fastify, NestJS, FastAPI, Django, Rails, Laravel, Spring Boot, Go, Axum and ASP.NET Core.
curl -fsSL codexskills.dev/install.sh | sh -s -- --category backend Installs all 51 into ~/.agents/skills/. Or download the zip.
All 51 Backend & APIs skills
Each opens the full SKILL.md, example prompts and every way to install it.
-
API Pagination
Every row once, page 10,000 as fast as page 1 -
API Rate Limiting
Fair limits that hold under concurrency -
API Versioning
Break APIs rarely, retire old versions on schedule -
ASP.NET Core
Typed results, honest DI lifetimes, lean EF Core -
Auth Libraries
Pick the right auth stack, then wire it safely -
Background Jobs
Jobs that survive retries, crashes and deploys -
Bun Runtime
Adopt Bun without surprise Node fallbacks -
Cron Scheduling
Scheduled jobs that run once, on time, visibly -
Deno 2 Apps
Scoped permissions instead of -A everywhere -
Django Apps
Django apps with real constraints and safe settings -
Django REST Framework
DRF endpoints scoped, paginated and N+1 free -
Express 5 API
Express services with one error path and typed input -
FastAPI Services
Thin routes, typed dependencies, no blocked loop -
Fastify API
Schema-first Fastify with deliberate encapsulation -
File Uploads
Size-capped, sniffed, scanned before anyone sees it -
Flask Apps
From one app.py to a testable Flask factory -
Full-Text Search
Relevant results, an index that never drifts -
Gin APIs in Go
Bind, validate and abort the way Gin expects -
Go HTTP Services
Stdlib routing, real timeouts, clean shutdown -
GraphQL Federation
One owner per field across every subgraph -
GraphQL Resolvers
Constant query counts and auth on every path -
GraphQL Schema Design
Nullability, connections and typed errors on purpose -
gRPC Services
Protos that evolve, calls that always have deadlines -
Hono Edge API
One typed Hono app for Workers, Bun, Deno and Node -
Idempotency Keys
Retries that never double charge -
Input Validation
Parse untrusted data once, at the edge -
JWT Auth
Short-lived access, rotating refresh, no surprises -
Ktor Server
Kotlin APIs with plugins that tests can swap -
Laravel Apps
Laravel 12 features with policies, strict models and queues -
Multi-Tenancy
One customer never sees another's data -
NestJS Modules
Clean module graphs and DI that tests can swap -
Node.js Streams
Flat memory for files of any size -
OAuth 2.1 and OIDC
SSO logins that validate every hop -
OpenAPI-First
The spec leads, the server proves it matches -
Phoenix and LiveView
Contexts, streams and PubSub without data leaks -
Problem Details Errors
One error shape clients can branch on -
RabbitMQ Messaging
Confirmed publishes, acked work, no poison loops -
Rails 8 Apps
Omakase Rails: REST, Hotwire and Solid Queue done right -
Redis Caching
Faster reads without stale or leaked data -
REST API Design
Endpoints clients can predict before reading docs -
Rust Axum
Extractors, state and tower layers that compile -
Server-Sent Events
Live HTTP streams that no proxy can buffer -
Session Auth
Revocable logins behind a locked-down cookie -
Spring Boot
Typed config, thin controllers, fast test slices -
Symfony Apps
Autowired services, clean Doctrine, reliable Messenger -
Temporal Workflows
Durable flows that replay cleanly after every deploy -
Transactional Email
Sent once, after commit, into the inbox -
tRPC APIs
End-to-end types without leaking data or auth -
Webhook Delivery
Send signed webhooks that never get lost -
Webhook Receivers
Verify, store, ack fast, process exactly once -
WebSockets Realtime
Sockets that survive proxies, deploys and replicas
No Backend & APIs skill matches that.
Where to start
Install the ones that match requests you make every week. Name one with $oauth2-oidc when you want it for sure; otherwise Codex picks by description.
Start with
- OAuth 2.1 and OIDCSSO logins that validate every hop
- Temporal WorkflowsDurable flows that replay cleanly after every deploy
- Webhook ReceiversVerify, store, ack fast, process exactly once
Install a few by name
curl -fsSL codexskills.dev/install.sh | sh -s -- api-pagination api-rate-limiting 104-line POSIX script. No sudo, no telemetry. Read install.sh
Backend & APIs FAQ
How do I install every Backend & APIs skill at once?
Run curl -fsSL https://codexskills.dev/install.sh | sh -s -- --category backend to put all 51 in ~/.agents/skills/, or add --project to install them into the current repository's .agents/skills/. You can also download the category zip and unpack it yourself.
Does installing 51 skills slow Codex down?
Hardly. At startup Codex sees only each skill's name and description, a few dozen words apiece, and reads a full SKILL.md only when a task needs it. Install the whole category if the work fits; unused skills cost almost nothing.
Which Backend & APIs skill should I start with?
Start with OAuth 2.1 and OIDC, Temporal Workflows, Webhook Receivers. They cover the requests that come up most in this category. Mention one with $oauth2-oidc to try it.