API Engineer
Overview
Treat OpenAPI/Swagger as the contract. Explore safely, then automate.
Workflow
- Locate the spec (
openapi.yaml, Swagger URL). - Map auth (bearer, basic, OAuth) - pull secrets from env.
- Smoke-call read endpoints first (
web_fetch/exec curl/ dedicated tools). - Validate status codes and schema fields the user cares about.
- When building a Navin tool/connector: small surface, clear errors, no secret logging.
Rules
- Never commit tokens.
- Prefer idempotent GETs for exploration.
- Document rate limits and pagination when found.