Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/openapi/openapi-skills/openapi-documentsnpx skills add openapi/openapi-skills --skill openapi-documentsgit clone --depth 1 https://github.com/openapi/openapi-skillsWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00063 | $0.00650 |
| Opus 5 | $0.00032 | $0.00325 |
| Sonnet 5 | $0.00013 | $0.00130 |
| Haiku 4.5 | $0.00006 | $0.00065 |
Grade A, and why
openapi-documents scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Openapi official documents
Two main services deliver official documents; both are asynchronous (request → poll → download PDF) and paid per document — check wallet credit (openapi-auth skill) and confirm with the user before bulk requests.
DocuEngine (preferred) — https://docuengine.openapi.com
Official documents from the Business Register, Revenue Agency, Municipalities and INPS, behind one uniform API:
GET /documents— list available document services (codes, prices).POST /requests— create a request with the service code and subject (VAT/tax code); optionally pass acallbackURL.GET /requests/{id}— poll until the request state is fulfilled (EVASA).GET /requests/{id}/documents— download the resulting documents.PATCH /requests/{id}— update a request when the service asks for it (e.g. optical balance-sheet processing).
Document families: visura camerale (ordinaria/storica, per company type, also in English), fascicolo società (current/historical), bilancio (XBRL, ottico, riclassificato), statuto, certificato di iscrizione, certificato artigiano, DURC online, visura protesti and pregiudizievoli (companies and natural persons), cariche/quote/soci attivi, eventi negativi, atto ottico.
Visure Camerali — https://visurecamerali.openapi.it
Direct chamber-of-commerce endpoints, one resource per document type, all with the same pattern POST /<type> → GET /<type>/{id} → GET /<type>/{id}/allegati (download):
ordinaria-impresa-individuale,storica-impresa-individualeordinaria-societa-capitale,storica-societa-capitaleordinaria-societa-persone,storica-societa-personebilancio-ottico,certificato-iscrizione,certificato-iscrizione-vigenza, …- Company search first:
GET /impresa?...orGET /impresa/{cf_piva_id}to identify the subject.
Visengine (https://visengine2.altravia.com) is the older engine for the same families — prefer DocuEngine for new work.
Notes
- Sandbox responses are illustrative; enable sandbox credit in the console first.
- Full specs: https://console.openapi.com/oas/en/docuengine.openapi.json · https://console.openapi.com/oas/en/visurecamerali.openapi.json · https://console.openapi.com/oas/en/visengine.openapi.json
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 37 lines · 63 tokens per session scan A 8ba97a243f39
openapi-documents is a skill published in the GitHub repository openapi/openapi-skills (2 stars, last pushed 2mo ago), licensed MIT. It adds 63 tokens to every session and 650 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
openapi-glossary
Use consistent OpenAPI terminology and definitions when writing documentation, educational material, and tooling guidance.
scalar-docs
Skill for writing and updating scalar.config.json — Scalar Docs configuration reference for users and LLMs.
scalar-design-system
Scalar's design system — design tokens, theming (@scalar/themes), CSS variables, and the @scalar/components library. Use when designing or implementing Scalar UI, especially with Paper (code-to-design / design-to-code), so output matches real Scalar tokens, colors, typography, spacing, and components instead of…
cloud-agents-starter
Minimal starter runbook for cloud agents to install dependencies, run packages, execute tests, and troubleshoot the Scalar monorepo quickly.
mock-server
Build, customize, and troubleshoot OpenAPI mock servers with @scalar/mock-server, including x-handler, x-seed, authentication, and Docker.
tests
Write clear, maintainable Vitest and Playwright tests with precise assertions, consistent structure, and strong behavioral coverage.