Backend Development Skill
🛠️ MCP Tools Available:
- Context7 / Tavily / BraveSearch / Serper.dev: Prefer for documentation and search; fall back to WebSearch or WebFetch only if needed.
- Sequential Thinking: Break down complex problems into structured reasoning steps
Production-ready backend development with modern technologies, best practices, and proven patterns.
When to Use
- Designing RESTful, GraphQL, or gRPC APIs
- Building authentication/authorization systems
- Optimizing database queries and schemas
- Implementing caching and performance optimization
- OWASP Top 10 security mitigation
- Designing scalable microservices
- Testing strategies (unit, integration, E2E)
- CI/CD pipelines and deployment
- Monitoring and debugging production systems
Technology Selection Guide
Languages: Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance)
Frameworks: NestJS, FastAPI, Django, Express, Gin
Databases: PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching)
APIs: REST (simple), GraphQL (flexible), gRPC (performance)
See: references/backend-technologies.md for detailed comparisons
Reference Navigation
Core Technologies:
backend-technologies.md - Languages, frameworks, databases, message queues, ORMsbackend-api-design.md - REST, GraphQL, gRPC patterns and best practices
Security & Authentication:
backend-security.md - OWASP Top 10 2025, security best practices, input validationbackend-authentication.md - OAuth 2.1, JWT, RBAC, MFA, session management
Performance & Architecture:
backend-performance.md - Caching, query optimization, load balancing, scalingbackend-architecture.md - Microservices, event-driven, CQRS, saga patterns
Quality & Operations:
backend-testing.md - Testing strategies, frameworks, tools, CI/CD testingbackend-code-quality.md - SOLID principles, design patterns, clean codebackend-devops.md - Docker, Kubernetes, deployment strategies, monitoringbackend-debugging.md - Debugging strategies, profiling, logging, production debuggingbackend-mindset.md - Problem-solving, architectural thinking, collaboration
Key Best Practices (2025)
Security: Argon2id passwords, parameterized queries (98% SQL injection reduction), OAuth 2.1 + PKCE, rate limiting, security headers
Performance: Redis caching (90% DB load reduction), database indexing (30% I/O reduction), CDN (50%+ latency cut), connection pooling
Testing: 70-20-10 pyramid (unit-integration-E2E), Vitest 50% faster than Jest, contract testing for microservices, 83% migrations fail without tests
DevOps: Blue-green/canary deployments, feature flags (90% fewer failures), Kubernetes 84% adoption, Prometheus/Grafana monitoring, OpenTelemetry tracing
Quick Decision Matrix
| Need |
Choose |
| Fast development |
Node.js + NestJS |
| Data/ML integration |
Python + FastAPI |
| High concurrency |
Go + Gin |
| Max performance |
Rust + Axum |
| ACID transactions |
PostgreSQL |
| Flexible schema |
MongoDB |
| Caching |
Redis |
| Internal services |
gRPC |
| Public APIs |
GraphQL/REST |
| Real-time events |
Kafka |
Implementation Checklist
API: Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling
Database: Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance
Security: OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords
Testing: Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)
Deployment: Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks
Resources
- OWASP Top 10:
- OAuth 2.1:
- OpenTelemetry:
1---2name: backend-development3description: Build robust backend systems with modern technologies (Node.js, Python, Go, Rust), frameworks (NestJS, FastAPI, Django), databases (PostgreSQL, MongoDB, Redis), APIs (REST, GraphQL, gRPC), authentication (OAuth 2.1, JWT), testing strategies, security best practices (OWASP Top 10), performance optimization, scalability patterns (microservices, caching, sharding), DevOps practices (Docker, Kubernetes, CI/CD), and monitoring. Use when designing APIs, implementing authentication, optimizing database queries, setting up CI/CD pipelines, handling security vulnerabilities, building microservices, or developing production-ready backend systems.4license: MIT5---67# Backend Development Skill89> **🛠️ MCP Tools Available**: 10> - **Context7 / Tavily / BraveSearch / Serper.dev**: Prefer for documentation and search; fall back to **WebSearch** or **WebFetch** only if needed.11> - **Sequential Thinking**: Break down complex problems into structured reasoning steps1213Production-ready backend development with modern technologies, best practices, and proven patterns.1415## When to Use1617- Designing RESTful, GraphQL, or gRPC APIs18- Building authentication/authorization systems19- Optimizing database queries and schemas20- Implementing caching and performance optimization21- OWASP Top 10 security mitigation22- Designing scalable microservices23- Testing strategies (unit, integration, E2E)24- CI/CD pipelines and deployment25- Monitoring and debugging production systems2627## Technology Selection Guide2829**Languages:** Node.js/TypeScript (full-stack), Python (data/ML), Go (concurrency), Rust (performance)30**Frameworks:** NestJS, FastAPI, Django, Express, Gin31**Databases:** PostgreSQL (ACID), MongoDB (flexible schema), Redis (caching)32**APIs:** REST (simple), GraphQL (flexible), gRPC (performance)3334See: `references/backend-technologies.md` for detailed comparisons3536## Reference Navigation3738**Core Technologies:**39- `backend-technologies.md` - Languages, frameworks, databases, message queues, ORMs40- `backend-api-design.md` - REST, GraphQL, gRPC patterns and best practices4142**Security & Authentication:**43- `backend-security.md` - OWASP Top 10 2025, security best practices, input validation44- `backend-authentication.md` - OAuth 2.1, JWT, RBAC, MFA, session management4546**Performance & Architecture:**47- `backend-performance.md` - Caching, query optimization, load balancing, scaling48- `backend-architecture.md` - Microservices, event-driven, CQRS, saga patterns4950**Quality & Operations:**51- `backend-testing.md` - Testing strategies, frameworks, tools, CI/CD testing52- `backend-code-quality.md` - SOLID principles, design patterns, clean code53- `backend-devops.md` - Docker, Kubernetes, deployment strategies, monitoring54- `backend-debugging.md` - Debugging strategies, profiling, logging, production debugging55- `backend-mindset.md` - Problem-solving, architectural thinking, collaboration5657## Key Best Practices (2025)5859**Security:** Argon2id passwords, parameterized queries (98% SQL injection reduction), OAuth 2.1 + PKCE, rate limiting, security headers6061**Performance:** Redis caching (90% DB load reduction), database indexing (30% I/O reduction), CDN (50%+ latency cut), connection pooling6263**Testing:** 70-20-10 pyramid (unit-integration-E2E), Vitest 50% faster than Jest, contract testing for microservices, 83% migrations fail without tests6465**DevOps:** Blue-green/canary deployments, feature flags (90% fewer failures), Kubernetes 84% adoption, Prometheus/Grafana monitoring, OpenTelemetry tracing6667## Quick Decision Matrix6869| Need | Choose |70|------|--------|71| Fast development | Node.js + NestJS |72| Data/ML integration | Python + FastAPI |73| High concurrency | Go + Gin |74| Max performance | Rust + Axum |75| ACID transactions | PostgreSQL |76| Flexible schema | MongoDB |77| Caching | Redis |78| Internal services | gRPC |79| Public APIs | GraphQL/REST |80| Real-time events | Kafka |8182## Implementation Checklist8384**API:** Choose style → Design schema → Validate input → Add auth → Rate limiting → Documentation → Error handling8586**Database:** Choose DB → Design schema → Create indexes → Connection pooling → Migration strategy → Backup/restore → Test performance8788**Security:** OWASP Top 10 → Parameterized queries → OAuth 2.1 + JWT → Security headers → Rate limiting → Input validation → Argon2id passwords8990**Testing:** Unit 70% → Integration 20% → E2E 10% → Load tests → Migration tests → Contract tests (microservices)9192**Deployment:** Docker → CI/CD → Blue-green/canary → Feature flags → Monitoring → Logging → Health checks9394## Resources9596- OWASP Top 10: 97- OAuth 2.1: 98- OpenTelemetry:
darthlinuxer