Skip to main content

Squillify development is paused indefinitely. Read why, and discover what this experiment achieved. Read the story

MicroSkills Reference

OpenAPI Operation Extractor

schema.extract_openapi_operations

ProductionEngine wrapper (Class A)Deterministicstrictfastv1.0.0
File inputNo network

Overview

You send an OpenAPI 3.x document in JSON or YAML and get back one small entry per operation: HTTP method, path, operationId, summary, description, tags, parameters, whether it takes a request body, the response codes it declares, and whether it is deprecated. Summaries and descriptions are cut to a length you choose, so the result fits in a planning context instead of swallowing it. We read the document exactly as written and never follow a $ref. For a compliance verdict on the document itself, use schema.validate_openapi. Accepts file input via file_ref — no need to extract file content first.

A full API document rarely fits in a planning context, and most of it is detail you do not need to choose an endpoint. You get the callable surface, and nothing else.

Reliability

Deterministic: the same document and the same options always produce the same catalog, and summaries are cut at exactly maxDescriptionLength characters with three dots appended. We reject the call, and retrying unchanged will not help, when neither document nor file_ref is present, when the text is not a parseable OpenAPI 3.x document, when it exceeds 2097152 bytes, when a referenced file is missing, unreadable or over 5000000 bytes, or when the YAML trips our safety limits — a line longer than we allow, more than 50 alias expansions, or nesting deeper than 64 levels. Simplify or repair the document, then call again.

Context footprint

Content is capped at 2097152 characters whether it arrives inline or through a file reference, and each operation costs you only a handful of short fields. A successful call costs 1 execution credit.

When to use it

When you have an OpenAPI document and want the list of operations, their parameters and their response codes in a form small enough to reason over.

When the document may be broken and you need a verdict first, or when you want generated code rather than a summary.

Powered by Swagger Parser, the reference OpenAPI parser maintained by the Swagger/OpenAPI community.

Scope

Note
One OpenAPI 3.x document in, one flat list of operations out, trimmed to the length you ask for and read literally, with no reference resolution.

Non-goals

  • We never judge whether the document is compliant — that is schema.validate_openapi
  • We never generate client or server code from the document
  • We never follow a $ref, local or remote, and never fetch anything from the network

Properties

IdempotentRetry safeStreaming supportedFile input supportedRequires external service

Capabilities

analysisparsing

Cost & billing

Flat rate per invocation

MetercallsBillable onsuccessCost per call1 credit

File handling

Accepts file_refProduces file_refMax input2 MBMax file size4.8 MB

File limits

Constraints this skill applies to your input and generated files. The “Limited by” column shows the static source of each cap; none of these can be raised by upgrading your plan.

LimitValueLimited by
Maximum size per input file4.8 MiBSkill maximum

How we handle your data

Sensitive output possible
What this means

This skill may receive sensitive content and may return submitted, transformed, extracted, or reformatted content.

Squillify guarantees
  • Runs inside Squillify
  • This skill runs inside Squillify.
  • Payloads are not sent to an external service by this skill.
  • Squillify does not permanently store submitted payloads.
  • Telemetry records metadata only, not submitted content.
  • Submitted payloads are not used for training.
  • Submitted payloads are not reviewed by humans.
  • This skill does not target sensitive data.
  • The response may contain submitted or transformed content.
Your responsibility

Squillify does not determine whether submitted content is sensitive. Your application is responsible for deciding what data it is allowed to submit. Your application is responsible for securing the response.

Read the Microskill Data Handling Policy

Input schema

FieldTypeRequiredDescription
documentstringNoOpenAPI 3.x document as JSON or YAML text, 1 to 2097152 characters. Required unless file_ref is provided.
file_refstringNoTenant-owned OpenAPI file reference; omit it to read document. When both are sent this one wins.
includeSchemasbooleanNoAccepted and currently ignored. Omit it for false. Response codes come back regardless.
includeSecuritybooleanNoWhether to add security scheme names on operations that declare them; omit it for false.
maxDescriptionLengthintegerNoHow many characters of summary and description to keep, 1 through 4000; omit it for 200.

Output schema

FieldTypeRequiredDescription
operationsarrayYesExtracted operations, 0 through 10000 closed method/path objects in document order.
operationCountintegerYesHow many operations were extracted.
apiTitlestringNoAPI title from the info block; omit it when none is declared.
apiVersionstringNoAPI version from the info block; omit it when none is declared.
openapiVersionstringNoDeclared OpenAPI specification version such as 3.0.3; omit it when unknown.
warningsarrayYesNon-fatal advisory notices as 0 through 256 strings, each one sentence long; empty when nothing was worth flagging.

API contract

POST /v1/execute
curl
curl -sS -X POST "$BASE/v1/execute" -H "Authorization: Bearer $KEY" -H 'Content-Type: application/json' -d '{"skillKey":"schema.extract_openapi_operations","input":{"document":"openapi: 3.0.3\ninfo:\n  title: Billing API\n  version: 2.1.0\npaths:\n  /invoices:\n    get:\n      operationId: listInvoices\n      summary: List invoices","includeSecurity":true,"maxDescriptionLength":120}}'
Integrations
TypeScript SDK
import { Squillify } from "@squillify/sdk";

const sq = new Squillify({ apiKey: process.env.SQUILLIFY_API_KEY });

const { output } = await sq.execute("schema.extract_openapi_operations", {"document":"openapi: '3.0.3'\ninfo:\n  title: Pet Store\n  version: '1.0.0'\npaths:\n  /pets:\n    get:\n      summary: List all pets\n      operationId: listPets\n    post:\n      summary: Create a pet\n      operationId: createPet"});

Errors

CodeHTTPRetryableDescription
VALIDATION_ERROR400NoThe request payload failed schema validation.
UNAUTHORIZED401NoMissing or invalid API key.
SKILL_NOT_ACCESSIBLE403NoThe API key is not granted access to this skill.
SKILL_NOT_AVAILABLE_FOR_PLAN403NoThis skill is not included in your current plan.
PLAN_ELIGIBILITY_UNAVAILABLE503YesPlan eligibility could not be decided. Retry after backoff.
SKILL_NOT_FOUND404NoThe requested skill or version does not exist.
TENANT_RATE_LIMITED429YesRequest rate limit exceeded. Retry after backoff.
QUOTA_EXCEEDED429YesPlan quota exhausted. Retryable once the quota period resets.
EXECUTION_TIMEOUT504YesExecution exceeded the allowed time budget.

Other limits

LimitValue
Recommended inline bytes32 KiB

Limitations

  • We never judge whether the document is compliant — that is schema.validate_openapi
  • We never generate client or server code from the document
  • We never follow a $ref, local or remote, and never fetch anything from the network
  • Deciding whether the document is valid (schema.validate_openapi)
  • Generating client or server code from the document
  • Reading a plain JSON Schema rather than an OpenAPI document

How to call

POST /v1/execute (requires authentication)

Request bodyjson
{
  "skillKey": "schema.extract_openapi_operations",
  "input": {
    "document": "openapi: '3.0.3'\ninfo:\n  title: Pet Store\n  version: '1.0.0'\npaths:\n  /pets:\n    get:\n      summary: List all pets\n      operationId: listPets\n    post:\n      summary: Create a pet\n      operationId: createPet"
  }
}

Examples

List the operations of a small API

Inputjson
{
  "document": "openapi: '3.0.3'\ninfo:\n  title: Pet Store\n  version: '1.0.0'\npaths:\n  /pets:\n    get:\n      summary: List all pets\n      operationId: listPets\n    post:\n      summary: Create a pet\n      operationId: createPet"
}
Expected outputjson
{
  "apiTitle": "Pet Store",
  "operationCount": 2,
  "openapiVersion": "3.0.3",
  "apiVersion": "1.0.0",
  "warnings": [],
  "operations": [
    {
      "path": "/pets",
      "summary": "List all pets",
      "method": "GET",
      "operationId": "listPets"
    },
    {
      "path": "/pets",
      "summary": "Create a pet",
      "method": "POST",
      "operationId": "createPet"
    }
  ]
}

Include parameters and security requirements

Inputjson
{
  "includeSecurity": true,
  "document": "openapi: '3.0.3'\ninfo:\n  title: Pet Store\n  version: '1.0.0'\npaths:\n  /pets/{petId}:\n    get:\n      summary: Fetch one pet\n      operationId: getPet\n      parameters:\n        - name: petId\n          in: path\n          required: true\n          schema:\n            type: string\n      security:\n        - apiKey: []\n      responses:\n        '200':\n          description: ok",
  "maxDescriptionLength": 80
}
Expected outputjson
{
  "apiTitle": "Pet Store",
  "operationCount": 1,
  "openapiVersion": "3.0.3",
  "apiVersion": "1.0.0",
  "warnings": [],
  "operations": [
    {
      "method": "GET",
      "responseCodes": [
        "200"
      ],
      "path": "/pets/{petId}",
      "parameters": [
        {
          "name": "petId",
          "in": "path",
          "required": true
        }
      ],
      "operationId": "getPet",
      "summary": "Fetch one pet",
      "security": [
        "apiKey"
      ]
    }
  ]
}
  • Turn a partner API document into a short list of operations you can plan against
  • Answer which endpoints exist, what they take, and which ones are deprecated
  • Feed a planner only the operations it needs instead of the whole document

Avoid for

  • Deciding whether the document is valid (schema.validate_openapi)
  • Generating client or server code from the document
  • Reading a plain JSON Schema rather than an OpenAPI document

Composable with

Safety & privacy

  • Runs without calling any external service.
  • Your payloads are never stored permanently.
  • Telemetry captures metadata only — never your payload contents.
  • We never train models on your payloads.
  • No human reviews your payloads.

Tags

analysisparsing