apideck-node

A guide to Portman, a tool that turns OpenAPI 3 specifications into Postman collections and automated API tests. OpenAPI describes an API's available requests and data formats; Postman is a tool for sending requests and running tests.

In plain words
What is it for?
Use it to generate contract, variation, content, integration, and fuzz tests, run them with Newman, and include API checks in CI/CD pipelines.
Why use it?
It reduces the manual work of creating API tests and helps check that an API still follows its documented contract.

Skill for Claude CodeCodex

Part of the apideck plugin — 55 skills, 3 commands shipped together

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/apideck-libraries/api-skills/apideck-node
Any agent
npx skills add apideck-libraries/api-skills --skill apideck-node
Clone the repo
git clone --depth 1 https://github.com/apideck-libraries/api-skills

Made for: Claude Code, Codex.

Or install apideck, the plugin that ships this one along with the rest of its 55 skills, 3 commands.

Per session 119 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 2,499 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00119 $0.02499
Opus 5 $0.00060 $0.01249
Sonnet 5 $0.00024 $0.00500
Haiku 4.5 $0.00012 $0.00250

Measured 2d ago against content hash 59199e9cc7e1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

apideck-node scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

providers/claude/plugin/skills/apideck-node/SKILL.md · 277 lines

How it starts

The opening of the file, as written. The whole thing — 277 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Apideck TypeScript SDK Skill

Overview

The Apideck Unified API provides a single integration layer to connect with 200+ third-party services across accounting, CRM, HRIS, file storage, ATS, e-commerce, and more. The official TypeScript SDK (@apideck/unify) provides typed clients for all unified APIs.

Key capabilities:

  • Accounting - Invoices, bills, payments, ledger accounts, journal entries, tax rates, balance sheets, P&L
  • CRM - Contacts, companies, leads, opportunities, activities, pipelines, notes
  • HRIS - Employees, departments, payrolls, time-off requests, schedules
  • File Storage - Files, folders, drives, shared links, upload sessions
  • ATS - Jobs, applicants, applications
  • Vault - Connection management, OAuth flows, custom field mapping
  • Vault JS - Embeddable modal UI for users to authorize connectors and manage settings
  • Webhook - Event subscriptions and real-time notifications

Installation

npm add @apideck/unify

Requires Node.js 18+. The SDK is fully typed with TypeScript definitions.

IMPORTANT RULES

  • ALWAYS use the @apideck/unify SDK. DO NOT make raw fetch/axios calls to the Apideck API.
  • ALWAYS pass apiKey, appId, and consumerId when initializing the client. These are required for all API calls.
  • ALWAYS set the APIDECK_API_KEY environment variable rather than hardcoding API keys.
  • USE serviceId to specify which downstream connector to use (e.g., "salesforce", "quickbooks", "xero"). If a consumer has multiple connections for an API, serviceId is required.
  • USE cursor-based pagination with for await...of for iterating large result sets. DO NOT implement manual pagination.
  • USE the filter parameter to narrow results server-side. DO NOT fetch all records and filter client-side.
  • USE the fields parameter to request only the columns you need. This reduces response size and improves performance.
  • ALWAYS handle errors with try/catch. The SDK throws typed errors for different HTTP status codes.
  • DO NOT store Apideck API keys, App IDs, or Consumer IDs in source code. Use environment variables or a secrets manager.

Read the full file on GitHub · 277 lines

Files

What ships with it

8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 277 lines · 119 tokens per session scan A 59199e9cc7e1

Subscribe to this mod's changes

apideck-node is a skill published in the GitHub repository apideck-libraries/api-skills (3 stars, last pushed 3d ago), licensed Apache-2.0. It adds 119 tokens to every session and 2,499 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

component-family-consistency

Buttons, inputs, pills, badges, calendars, and other interactive components form a visual family — they share the same border-radius, colour logic, shadow scale, border style, and spacing rhythm. Inconsistency between them breaks the sense of a coherent product. Use when building or reviewing a component library…

dembrandt/dembrandt-skills · 76 tokens

extract-design

Extract a complete design system — colors, typography, spacing, components, shadows, and W3C design tokens — from any live website using Dembrandt. Runs a headless browser against the URL and returns real computed values from the DOM. Use when you need a site's actual design tokens, want to reverse-engineer a visual…

dembrandt/dembrandt-skills · 82 tokens

modular-scale-typography

Typography feels cohesive and intentional when font sizes follow a modular scale — a ratio-based sequence where every size is mathematically related to the others. Use when defining type scales, setting up design tokens, reviewing font size choices, or when typography feels inconsistent or arbitrary.

dembrandt/dembrandt-skills · 59 tokens

information-architecture

In large applications, information architecture determines whether users can find, understand, and act on data. Naming matters. The UI should mirror the data model and signal how data can be transformed. Dangerous or irreversible changes always require a confirm dialog. Use when designing navigation, naming entities…

dembrandt/dembrandt-skills · 71 tokens

algorithmic-color-palette

Derive a full UI colour palette algorithmically from one or two brand colours. Darker and lighter variants for interactive states, desaturated greys from the brand hue for borders and backgrounds, and semantic colours that feel coherent with the brand rather than generic. Use when building a colour system from scratch…

dembrandt/dembrandt-skills · 75 tokens

brand-visual-language

A brand's visual tone — playful or serious, rounded or angular — should be consistent across all UI elements. Shape language in typography, border-radius, and iconography communicates personality before a single word is read. Use when establishing a design system, choosing icon libraries, setting border-radius tokens…

dembrandt/dembrandt-skills · 68 tokens