manifold-api

manifold-api is a skill for Claude Code, Codex from intelligencedev/manifold. It costs 35 tokens per session (409 once invoked), scanned A, original, MIT.

A set of instructions and helper scripts for safely inspecting and calling the local Manifold web API, an HTTP service running on the same computer. It helps inspect one API description path at a time instead of loading the entire specification.

In plain words
What is it for?
Use it to check whether Manifold is running, inspect a specific OpenAPI path, and make API requests while following redaction and destructive-operation safeguards.
Why use it?
It reduces the risk of overwhelming the agent with a large API document and helps keep API keys, login tokens, cookies, and authorization headers out of output.

Skill for Claude CodeCodex

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add skills/intelligencedev/manifold/manifold-api
Any agent
npx skills add intelligencedev/manifold --skill manifold-api
Clone the repo
git clone --depth 1 https://github.com/intelligencedev/manifold

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for manifold-api

README.md
[![agentmods](https://agentmods.dev/badge/skills/intelligencedev/manifold/manifold-api.svg)](https://agentmods.dev/skills/intelligencedev/manifold/manifold-api)
Your own site
<a href="https://agentmods.dev/skills/intelligencedev/manifold/manifold-api"><img src="https://agentmods.dev/badge/skills/intelligencedev/manifold/manifold-api.svg" alt="Measured on agentmods" height="20"></a>
Per session 35 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 409 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00035 $0.00409
Opus 5 $0.00017 $0.00204
Sonnet 5 $0.00007 $0.00082
Haiku 4.5 $0.00003 $0.00041

Measured 4d ago against content hash 39d57cbda2c8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

manifold-api scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (main.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- **Dependencies**: `curl`, `jq`
assets/skills/manifold-api/SKILL.md · 40 lines

What it actually says

Manifold API Skill

Purpose

The Manifold API skill is designed to interact safely with the local Manifold HTTP API running at http:/localhost:32180. It provides helper scripts to inspect the OpenAPI spec (/openapi.json) safely without dumping large documents into context, and rules for avoiding destructive operations and redacting sensitive information.

Usage

Use the provided shell script to interact with the Manifold API spec or health endpoints safely:

# Check if the API is running
./manifold-api/main.sh healthz

# Get the OpenAPI definition for a specific path (e.g., /api/projects)
./manifold-api/main.sh spec-path "/api/projects"

Configuration

  • Dependencies: curl, jq
  • Target URL: Defaults to http:/localhost:32180

File Structure

  • manifold-api/SKILL.md: This documentation template and skill rules.
  • manifold-api/main.sh: Entry point script for interacting with the API safely.

Best Practices & Rules

  1. Filter Specs: Never dump the full openapi.json into context. Use the main.sh spec-path script to inspect one path at a time.
  2. Redaction: Redact apiKey, bearer tokens, cookies, auth headers, and extraHeaders values in API responses.
  3. Safety First: Always ask before modifying /api/config/agentd or deleting objects like specialists, teams, sessions, workflows, datasets, experiments, or prompt versions.
  4. Data Shapes: Use live GET requests to discover the structure of GenericObject fields before sending POST/PUT/PATCH requests. Do not invent request fields.
Files

What ships with it

1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 40 lines · 35 tokens per session scan A 39d57cbda2c8

Subscribe to this mod's changes

manifold-api is a skill published in the GitHub repository intelligencedev/manifold (497 stars, last pushed 26d ago), licensed MIT. It adds 35 tokens to every session and 409 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other skills, from other repositories

release-notes

Draft concise release notes.

ollama/ollama · 9 tokens

ship-and-babysit

End-to-end PR shipping workflow for tinyhumansai/openhuman: commit local changes, push to the user's fork, open or reuse a PR against main, then babysit CI and CodeRabbit feedback until the PR is green and clean. Use when the user asks to ship, open a PR, monitor CI, address review comments, or 'babysit' a branch.

tinyhumansai/openhuman · 83 tokens

adr-skill

Create and maintain Architecture Decision Records (ADRs) optimized for agentic coding workflows. Use when you need to propose, write, update, accept/reject, deprecate, or supersede an ADR; bootstrap an adr folder and index; consult existing ADRs before implementing changes; or enforce ADR conventions. This skill uses…

vercel/ai · 89 tokens

add-harness-package

Guide for adding new AI SDK harness packages. Use when creating a new @ai-sdk/harness- package that adapts a coding-agent runtime to HarnessV1.

vercel/ai · 41 tokens

add-provider-package

Guide for adding first-party AI provider packages to the AI SDK. Use when creating a provider package under packages/ to integrate an external AI service.

vercel/ai · 33 tokens

update-provider-models

Add new or remove obsolete model IDs for existing AI SDK providers. Use when adding a model to a provider, removing an obsolete model, or processing a list of model changes from an issue. Triggers on "add model", "remove model", "new model ID", "obsolete model", "update model IDs".

vercel/ai · 68 tokens