API Development

Creates modular Node.js APIs with Express, Prisma, Zod validation, RBAC, and header-based authentication for CRUD workflows.

Updated Jan 8, 2026
One-click install
npx skills add https://github.com/Arnutt-N/hr-ims --skill api-development-arnutt-n
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: API Development
Source: https://github.com/Arnutt-N/hr-ims/tree/main/.agents/skills/api-development
Command: npx skills add https://github.com/Arnutt-N/hr-ims --skill api-development-arnutt-n

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This guide helps developers build robust backend APIs using Express and Prisma, with built-in validation and authentication patterns, reducing boilerplate and security risks.

Core Features & Use Cases

  • Project scaffolding for backend APIs with a modular structure (controllers, routes, middleware, services, utils).
  • Validation with Zod to ensure safe request handling and data integrity.
  • Authentication and authorization patterns, including header-based auth integration and role-based access control.
  • Example endpoints and patterns for common CRUD operations across entities.

Quick Start

Set up a new API endpoint by following the examples below and start the server to verify authentication and CRUD operations.

Frequently Asked Questions about API Development

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I build a RESTful API with Express and Prisma that includes authentication?

To build a RESTful API with Express and Prisma, you can use a modular structure with controllers, routes, and middleware to implement header-based authentication and secure data access across CRUD endpoints.

What's the best way to enforce input validation in a Node.js Express API?

The best way to enforce input validation in a Node.js Express API is using Zod schemas within a modular middleware structure to ensure safe request handling and data integrity before processing CRUD operations.

How does role-based access control work with Prisma and Express?

Role-based access control (RBAC) with Prisma and Express works by implementing middleware that checks user permissions against header-based authentication tokens, restricting secure data access to authorized roles.

Can I use Zod for validation in a Node.js project with a modular folder structure?

Yes, you can use Zod for validation in a Node.js project by organizing your code into a modular structure of controllers, routes, middleware, services, and utils to safely handle request data.

What is the standard project structure for an Express API using Prisma for CRUD operations?

The standard project structure for an Express API using Prisma separates code into modular directories for controllers, routes, middleware, services, and utils to manage CRUD workflows and authentication cleanly.

Why do I need header-based authentication for my Express RESTful endpoints?

You need header-based authentication for Express RESTful endpoints to securely identify users and enforce role-based access control before routing requests to Prisma services for data access.