Query String Builder
network.build_query_string
Overview
You send a map of parameters and we return a percent-encoded query string ready to append to a URL. You choose how arrays and nested objects serialize — repeat keys, bracket notation, comma lists, and more — so the output matches what your API or signature scheme expects. Encoding follows RFC 3986 with uppercase hex; reserved characters are encoded unless you opt into form-style plus signs for spaces. We don't execute requests, parse URLs, or guess a server's conventions for you.
Generic URL encoders break signature schemes and APIs disagree on how arrays serialize. You need explicit, reproducible encoding rules.
Reliability
Fully deterministic: the same parameters and options always give you the same string. Parameter order follows your map unless sortKeys is true, and if you are signing the result you almost certainly want sortKeys true so both sides agree. Failures, none of which are worth retrying unchanged: QUERY_STYLE_UNSUPPORTED means arrayStyle, objectStyle or nullPolicy is not one of the listed values, or you asked for comma arrays around a nested object or array, so pick a supported style or flatten that value yourself. QUERY_PARAMETER_LIMIT_EXCEEDED means the flattened pairs went past 500, so send fewer parameters or split the call. QUERY_DEPTH_LIMIT_EXCEEDED means nesting went past 8 levels, so flatten the deep part before you send it. QUERY_OUTPUT_TOO_LARGE means the encoded string went past 8192 characters, so drop or shorten parameters, or move the payload into the request body. QUERY_KEY_INVALID means a key was empty, was not a string, or held a NUL character, so clean the key up and send it again.
Context footprint
Returns the query string plus an echo of the options we applied. A successful call costs 1 execution credit.
When to use it
When you need a correctly encoded query string and you can specify the array and object serialization style.
When you need to fire the HTTP request or decode an existing query string.
Scope
Non-goals
- Does not execute HTTP requests
- Does not parse or decode query strings
- Does not build paths or URL fragments
- Does not inject credentials — put tokens in headers
- Does not guess a server's array convention
Properties
Capabilities
Cost & billing
Flat rate per invocation
File handling
How we handle your data
What this means
This skill may receive sensitive content and may return submitted, transformed, extracted, or reformatted content.
Squillify guarantees
- Runs inside Squillify
- This skill runs inside Squillify.
- Payloads are not sent to an external service by this skill.
- Squillify does not permanently store submitted payloads.
- Telemetry records metadata only, not submitted content.
- Submitted payloads are not used for training.
- Submitted payloads are not reviewed by humans.
- This skill does not target sensitive data.
- The response may contain submitted or transformed content.
Your responsibility
Squillify does not determine whether submitted content is sensitive. Your application is responsible for deciding what data it is allowed to submit. Your application is responsible for securing the response.
Input schema
| Field | Type | Required | Description |
|---|---|---|---|
| parameters | object | Yes | Purpose-bound parameter map of scalars, arrays and nested objects, max nesting depth 8, up to 500 flattened parameters. |
| options | object | No | Closed serialization options for arrays, objects, nulls, spaces and key order; omit the whole object for repeat arrays, bracket objects, omit nulls, percent-encoded spaces and unsorted keys. |
Output schema
| Field | Type | Required | Description |
|---|---|---|---|
| queryString | string | Yes | Percent-encoded query string, at most 8192 characters. |
| parameterCount | integer | Yes | Flattened parameter count. |
| encodedLength | integer | Yes | Character length of queryString. |
| options | object | Yes | Serialization rules actually applied, with omitted defaults filled in; includeLeadingQuestionMark is not echoed. |
| findings | array | Yes | Reserved advisory array that is always empty on success today, from 0 through 0 objects. |
| _meta | object | No | Always present on success, with flattenedKeyCount and reservedCharactersEncoded. |
API contract
POST /v1/executecurl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"network.build_query_string","input":{"parameters":{"q":"hello world"}}}'import { Squillify } from "@squillify/sdk";
const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });
const { output } = await sq.execute("network.build_query_string", {"parameters":{"page":2,"filter":{"min":1,"max":10},"q":"hello world","tags":["a","b"]},"options":{"encodeSpaceAsPlus":false,"nullPolicy":"omit","arrayStyle":"repeat","objectStyle":"bracket","sortKeys":true}});Errors
| Code | HTTP | Retryable | Description |
|---|---|---|---|
| VALIDATION_ERROR | 400 | No | The request payload failed schema validation. |
| UNAUTHORIZED | 401 | No | Missing or invalid API key. |
| SKILL_NOT_ACCESSIBLE | 403 | No | The API key is not granted access to this skill. |
| SKILL_NOT_AVAILABLE_FOR_PLAN | 403 | No | This skill is not included in your current plan. |
| PLAN_ELIGIBILITY_UNAVAILABLE | 503 | Yes | Plan eligibility could not be decided. Retry after backoff. |
| SKILL_NOT_FOUND | 404 | No | The requested skill or version does not exist. |
| TENANT_RATE_LIMITED | 429 | Yes | Request rate limit exceeded. Retry after backoff. |
| QUOTA_EXCEEDED | 429 | Yes | Plan quota exhausted. Retryable once the quota period resets. |
| EXECUTION_TIMEOUT | 504 | Yes | Execution exceeded the allowed time budget. |
| QUERY_PARAMETER_LIMIT_EXCEEDED | 429 | No | A size, quota, rate, or time limit was exceeded. |
| QUERY_DEPTH_LIMIT_EXCEEDED | 429 | No | A size, quota, rate, or time limit was exceeded. |
| QUERY_OUTPUT_TOO_LARGE | 429 | No | A size, quota, rate, or time limit was exceeded. |
| QUERY_KEY_INVALID | 400 | No | The request payload failed this skill's input validation. |
| QUERY_STYLE_UNSUPPORTED | 400 | No | The skill does not support the requested variant. |
Other limits
| Limit | Value |
|---|---|
| Recommended inline bytes | 32 KiB |
Limitations
- Does not execute HTTP requests
- Does not parse or decode query strings
- Does not build paths or URL fragments
- Does not inject credentials — put tokens in headers
- Does not guess a server's array convention
- Sending the HTTP request itself
- Decoding an inbound query string
- Putting API keys in the query when the provider expects headers
How to call
POST /v1/execute (requires authentication)
{
"skillKey": "network.build_query_string",
"input": {
"parameters": {
"page": 2,
"filter": {
"min": 1,
"max": 10
},
"q": "hello world",
"tags": [
"a",
"b"
]
},
"options": {
"encodeSpaceAsPlus": false,
"nullPolicy": "omit",
"arrayStyle": "repeat",
"objectStyle": "bracket",
"sortKeys": true
}
}
}Examples
Search API with sorted keys and bracket-style nested filters
{
"parameters": {
"page": 2,
"filter": {
"min": 1,
"max": 10
},
"q": "hello world",
"tags": [
"a",
"b"
]
},
"options": {
"encodeSpaceAsPlus": false,
"nullPolicy": "omit",
"arrayStyle": "repeat",
"objectStyle": "bracket",
"sortKeys": true
}
}{
"parameterCount": 6,
"options": {
"encodeSpaceAsPlus": false,
"nullPolicy": "omit",
"arrayStyle": "repeat",
"objectStyle": "bracket",
"sortKeys": true
},
"encodedLength": 73,
"findings": [],
"_meta": {
"flattenedKeyCount": 6,
"reservedCharactersEncoded": 5
},
"queryString": "filter%5Bmax%5D=10&filter%5Bmin%5D=1&page=2&q=hello%20world&tags=a&tags=b"
}Comma-separated tags with sorted keys
{
"parameters": {
"q": "search",
"tags": [
"red",
"blue"
]
},
"options": {
"arrayStyle": "comma",
"nullPolicy": "omit",
"objectStyle": "bracket",
"sortKeys": true
}
}{
"parameterCount": 2,
"options": {
"encodeSpaceAsPlus": false,
"nullPolicy": "omit",
"arrayStyle": "comma",
"objectStyle": "bracket",
"sortKeys": true
},
"encodedLength": 24,
"findings": [],
"_meta": {
"flattenedKeyCount": 2,
"reservedCharactersEncoded": 1
},
"queryString": "q=search&tags=red%2Cblue"
}Recommended use cases
- Construct signed URL query strings with stable, repeatable encoding
- Serialize nested filters for APIs that expect bracket or repeat array styles
Avoid for
- Sending the HTTP request itself
- Decoding an inbound query string
- Putting API keys in the query when the provider expects headers
Related skills
Composable with
Safety & privacy
- Runs without calling any external service.
- Your payloads are never stored permanently.
- Telemetry captures metadata only — never your payload contents.
- We never train models on your payloads.
- No human reviews your payloads.