Api Key Auth Setup - Auto-activating skill for API Development. Triggers on: api key auth setup, api key auth setup Part of the API Development skill category.
36
3%
Does it follow best practices?
Impact
100%
1.00xAverage score across 3 eval scenarios
Passed
No known issues
Optimize this skill with Tessl
npx tessl skill review --optimize ./planned-skills/generated/15-api-development/api-key-auth-setup/SKILL.mdProduction-ready API key middleware
Standard auth header
100%
100%
401 for missing key
100%
100%
401 or 403 for invalid key
100%
100%
Error response body
100%
100%
Middleware is reusable
100%
100%
All routes protected
100%
100%
No key in response
100%
100%
curl test commands
100%
100%
curl only in test script
100%
100%
Test covers failure case
100%
100%
Step-by-step API key auth guidance
Numbered steps structure
100%
100%
Key generation step
100%
100%
Standard header transmission
100%
100%
Validation step
100%
100%
HTTP status codes covered
100%
100%
curl verification commands
100%
100%
curl only for commands
100%
100%
Security consideration
100%
100%
Common standards reference
100%
100%
OpenAPI spec security scheme definition
components/securitySchemes present
100%
100%
apiKey type used
100%
100%
in field specified
100%
100%
name field specified
100%
100%
Security applied to endpoints
100%
100%
401 response documented
100%
100%
OpenAPI 3.0 syntax (not Swagger 2.0)
100%
100%
openapi version preserved
100%
100%
curl verify command
100%
100%
curl only in verify script
100%
100%
b8a3b3e
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.