OpenAPI Operation Extractor
schema.extract_openapi_operations
Overview
You send an OpenAPI 3.x document in JSON or YAML and get back one small entry per operation: HTTP method, path, operationId, summary, description, tags, parameters, whether it takes a request body, the response codes it declares, and whether it is deprecated. Summaries and descriptions are cut to a length you choose, so the result fits in a planning context instead of swallowing it. We read the document exactly as written and never follow a $ref. For a compliance verdict on the document itself, use schema.validate_openapi. Accepts file input via file_ref — no need to extract file content first.
A full API document rarely fits in a planning context, and most of it is detail you do not need to choose an endpoint. You get the callable surface, and nothing else.
Reliability
Deterministic: the same document and the same options always produce the same catalog, and summaries are cut at exactly maxDescriptionLength characters with three dots appended. We reject the call, and retrying unchanged will not help, when neither document nor file_ref is present, when the text is not a parseable OpenAPI 3.x document, when it exceeds 2097152 bytes, when a referenced file is missing, unreadable or over 5000000 bytes, or when the YAML trips our safety limits — a line longer than we allow, more than 50 alias expansions, or nesting deeper than 64 levels. Simplify or repair the document, then call again.
Context footprint
Content is capped at 2097152 characters whether it arrives inline or through a file reference, and each operation costs you only a handful of short fields. A successful call costs 1 execution credit.
When to use it
When you have an OpenAPI document and want the list of operations, their parameters and their response codes in a form small enough to reason over.
When the document may be broken and you need a verdict first, or when you want generated code rather than a summary.
Powered by Swagger Parser, the reference OpenAPI parser maintained by the Swagger/OpenAPI community.
Scope
Non-goals
- We never judge whether the document is compliant — that is schema.validate_openapi
- We never generate client or server code from the document
- We never follow a $ref, local or remote, and never fetch anything from the network
Properties
Capabilities
Cost & billing
Flat rate per invocation
File handling
File limits
Constraints this skill applies to your input and generated files. The “Limited by” column shows the static source of each cap; none of these can be raised by upgrading your plan.
| Limit | Value | Limited by |
|---|---|---|
| Maximum size per input file | 4.8 MiB | Skill maximum |
How we handle your data
What this means
This skill may receive sensitive content and may return submitted, transformed, extracted, or reformatted content.
Squillify guarantees
- Runs inside Squillify
- This skill runs inside Squillify.
- Payloads are not sent to an external service by this skill.
- Squillify does not permanently store submitted payloads.
- Telemetry records metadata only, not submitted content.
- Submitted payloads are not used for training.
- Submitted payloads are not reviewed by humans.
- This skill does not target sensitive data.
- The response may contain submitted or transformed content.
Your responsibility
Squillify does not determine whether submitted content is sensitive. Your application is responsible for deciding what data it is allowed to submit. Your application is responsible for securing the response.
Input schema
| Field | Type | Required | Description |
|---|---|---|---|
| document | string | No | OpenAPI 3.x document as JSON or YAML text, 1 to 2097152 characters. Required unless file_ref is provided. |
| file_ref | string | No | Tenant-owned OpenAPI file reference; omit it to read document. When both are sent this one wins. |
| includeSchemas | boolean | No | Accepted and currently ignored. Omit it for false. Response codes come back regardless. |
| includeSecurity | boolean | No | Whether to add security scheme names on operations that declare them; omit it for false. |
| maxDescriptionLength | integer | No | How many characters of summary and description to keep, 1 through 4000; omit it for 200. |
Output schema
| Field | Type | Required | Description |
|---|---|---|---|
| operations | array | Yes | Extracted operations, 0 through 10000 closed method/path objects in document order. |
| operationCount | integer | Yes | How many operations were extracted. |
| apiTitle | string | No | API title from the info block; omit it when none is declared. |
| apiVersion | string | No | API version from the info block; omit it when none is declared. |
| openapiVersion | string | No | Declared OpenAPI specification version such as 3.0.3; omit it when unknown. |
| warnings | array | Yes | Non-fatal advisory notices as 0 through 256 strings, each one sentence long; empty when nothing was worth flagging. |
API contract
POST /v1/executecurl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"schema.extract_openapi_operations","input":{"document":"openapi: 3.0.3\ninfo:\n title: Billing API\n version: 2.1.0\npaths:\n /invoices:\n get:\n operationId: listInvoices\n summary: List invoices","includeSecurity":true,"maxDescriptionLength":120}}'import { Squillify } from "@squillify/sdk";
const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });
const { output } = await sq.execute("schema.extract_openapi_operations", {"document":"openapi: '3.0.3'\ninfo:\n title: Pet Store\n version: '1.0.0'\npaths:\n /pets:\n get:\n summary: List all pets\n operationId: listPets\n post:\n summary: Create a pet\n operationId: createPet"});Errors
| Code | HTTP | Retryable | Description |
|---|---|---|---|
| VALIDATION_ERROR | 400 | No | The request payload failed schema validation. |
| UNAUTHORIZED | 401 | No | Missing or invalid API key. |
| SKILL_NOT_ACCESSIBLE | 403 | No | The API key is not granted access to this skill. |
| SKILL_NOT_AVAILABLE_FOR_PLAN | 403 | No | This skill is not included in your current plan. |
| PLAN_ELIGIBILITY_UNAVAILABLE | 503 | Yes | Plan eligibility could not be decided. Retry after backoff. |
| SKILL_NOT_FOUND | 404 | No | The requested skill or version does not exist. |
| TENANT_RATE_LIMITED | 429 | Yes | Request rate limit exceeded. Retry after backoff. |
| QUOTA_EXCEEDED | 429 | Yes | Plan quota exhausted. Retryable once the quota period resets. |
| EXECUTION_TIMEOUT | 504 | Yes | Execution exceeded the allowed time budget. |
Other limits
| Limit | Value |
|---|---|
| Recommended inline bytes | 32 KiB |
Limitations
- We never judge whether the document is compliant — that is schema.validate_openapi
- We never generate client or server code from the document
- We never follow a $ref, local or remote, and never fetch anything from the network
- Deciding whether the document is valid (schema.validate_openapi)
- Generating client or server code from the document
- Reading a plain JSON Schema rather than an OpenAPI document
How to call
POST /v1/execute (requires authentication)
{
"skillKey": "schema.extract_openapi_operations",
"input": {
"document": "openapi: '3.0.3'\ninfo:\n title: Pet Store\n version: '1.0.0'\npaths:\n /pets:\n get:\n summary: List all pets\n operationId: listPets\n post:\n summary: Create a pet\n operationId: createPet"
}
}Examples
List the operations of a small API
{
"document": "openapi: '3.0.3'\ninfo:\n title: Pet Store\n version: '1.0.0'\npaths:\n /pets:\n get:\n summary: List all pets\n operationId: listPets\n post:\n summary: Create a pet\n operationId: createPet"
}{
"apiTitle": "Pet Store",
"operationCount": 2,
"openapiVersion": "3.0.3",
"apiVersion": "1.0.0",
"warnings": [],
"operations": [
{
"path": "/pets",
"summary": "List all pets",
"method": "GET",
"operationId": "listPets"
},
{
"path": "/pets",
"summary": "Create a pet",
"method": "POST",
"operationId": "createPet"
}
]
}Include parameters and security requirements
{
"includeSecurity": true,
"document": "openapi: '3.0.3'\ninfo:\n title: Pet Store\n version: '1.0.0'\npaths:\n /pets/{petId}:\n get:\n summary: Fetch one pet\n operationId: getPet\n parameters:\n - name: petId\n in: path\n required: true\n schema:\n type: string\n security:\n - apiKey: []\n responses:\n '200':\n description: ok",
"maxDescriptionLength": 80
}{
"apiTitle": "Pet Store",
"operationCount": 1,
"openapiVersion": "3.0.3",
"apiVersion": "1.0.0",
"warnings": [],
"operations": [
{
"method": "GET",
"responseCodes": [
"200"
],
"path": "/pets/{petId}",
"parameters": [
{
"name": "petId",
"in": "path",
"required": true
}
],
"operationId": "getPet",
"summary": "Fetch one pet",
"security": [
"apiKey"
]
}
]
}Recommended use cases
- Turn a partner API document into a short list of operations you can plan against
- Answer which endpoints exist, what they take, and which ones are deprecated
- Feed a planner only the operations it needs instead of the whole document
Avoid for
- Deciding whether the document is valid (schema.validate_openapi)
- Generating client or server code from the document
- Reading a plain JSON Schema rather than an OpenAPI document
Related skills
Composable with
Safety & privacy
- Runs without calling any external service.
- Your payloads are never stored permanently.
- Telemetry captures metadata only — never your payload contents.
- We never train models on your payloads.
- No human reviews your payloads.