Design Azure API Center as the enterprise inventory and governance plane for APIs, agent tools, OpenAPI definitions, environments, deployments, metadata, linting, and MCP server discovery. Use when building an API or tool catalog, enforcing API standards, registering MCP servers, or making approved tools discoverable to agent builders.
Design Azure API Center as the catalog and governance plane for APIs, tools, versions, definitions, environments, deployments, and MCP servers so agent builders discover approved capabilities instead of ungoverned endpoints.
When to invoke
"Create an API Center catalog for our agent tools."
"Govern OpenAPI definitions and MCP servers for agent builders."
"Design API standards and linting with Azure API Center."
"Make backend APIs discoverable for an agentic platform."
Inputs
Use $ARGUMENTS as the governance scenario: API families, tool types, MCP servers, environments, required metadata, linter standards, consumers, and discovery experience. If the current Azure API Center feature set matters, verify it before stating final design.
Prerequisites and context
Confirm current API Center capabilities, including MCP registration, linting rules, portal features, and extension support, on Microsoft Learn before committing a design.
Do not assert a feature without a source when the platform capability is time-sensitive.
Pair API Center with API Management only when runtime enforcement is in scope; API Center itself is the inventory and governance plane.
Core concepts
Concept
Purpose
Design questions
API
Logical entry for a product, backend, tool, or capability.
Who owns it? What domain does it serve?
Version
Specific version of an API.
What is the lifecycle stage and compatibility policy?
Definition
Contract, typically an OpenAPI document.
Is it linted, complete, and linked to a version?
Environment
Runtime environment such as Azure API Management or a Kubernetes cluster.
Is it dev, staging, production, or sandbox?
Deployment
Runtime location where a version is available.
Which environment, gateway, base URL, and owner apply?
Metadata
Custom governance properties.
Which fields are required for compliance and reporting?
MCP server
Tool server agents can discover and call.
Is it approved, owned, documented, and secured?
Governance model
Governance need
API Center mechanism
Minimum metadata
Ownership
Required custom metadata
owner, team, support contact.
Data sensitivity
Required custom metadata and review workflow
classification, PII, retention, region.
Lifecycle
Version and metadata
stage, deprecation date, replacement API.
Security standards
Linter and required fields
auth type, scopes, network exposure.
Discoverability
Portal or VS Code extension
description, tags, domain, examples.
Agent tool reuse
OpenAPI or MCP registration
tool purpose, side effects, rate limits, safety notes.
Procedure
Model the catalog. Define metadata schema first: owner, classification, lifecycle stage, data sensitivity, cost center, support path, and allowed consumers.
Register APIs and tools. Import OpenAPI definitions for backend APIs and HTTP tools. Register MCP servers so agents can discover them through the governed catalog.
Link environments and deployments. Connect Azure API Management instances and other runtimes so API Center reflects where each API version actually runs.
Govern definitions. Apply the API Center linter and required metadata. Reject or flag definitions that miss security, naming, versioning, or documentation standards.
Publish discovery. Expose the API Center portal or VS Code extension to agent builders with filters for approved tools, environments, and lifecycle stage.
Connect runtime enforcement. Use APIM AI gateway for authentication, token limits, semantic cache, and load balancing when the cataloged API is used at runtime.
Platform fit
Backend APIs / Tools / MCP servers
| register definitions and metadata
Azure API Center (inventory + governance + discovery)
| reference governed APIs
Azure API Management (runtime AI gateway: authN, token limit, cache)
|
Agents (Foundry, Container Apps) select and call governed tools
Related primitives
Name
Type
Use it when
apim-ai-gateway
skill
You need runtime enforcement, authN, token limits, cache, routing, and metrics.
foundry-agent-blueprint
skill
Agents need to consume cataloged APIs as OpenAPI or MCP tools.
agentic-architecture-patterns
skill
You need architecture guidance for tools and MCP boundaries.
Gotchas
Catalogs fail without ownership: require owner and support metadata before publishing an API or tool.
Discovery is not enforcement: API Center does not replace API Management for runtime authentication or throttling.
Linting must run before registration is trusted: imported OpenAPI alone does not guarantee secure or usable APIs.
MCP tool descriptions affect agent behavior: document side effects, auth, and rate limits, not just endpoints.
Open Horizons integration
Scope API Center work to the Developer IDP or Agent IDP objective and current Horizon stage.
Preserve Open Horizons Azure ownership, managed-identity, governance, and evidence boundaries where applicable.
Route cross-domain sequencing through open-horizons-orchestration (skill).
Output template
## Azure API Center governance design
**Scope:** <APIs, tools, MCP servers, or platform>
| Catalog item | Definition source | Required metadata | Environment/deployment | Governance check |
| --- | --- | --- | --- | --- |
| <API or tool> | <OpenAPI, MCP, manual> | <owner, classification, lifecycle> | <dev/stage/prod runtime> | <linter/approval> |
### Discovery model
- Portal or extension: <audience and filters>
- Approved tool criteria: <criteria>
### Runtime handoff
- API Management/APIM AI gateway: <when used>
Quality gate
Current API Center capabilities are verified when feature specificity matters.
API, Version, Definition, Environment, Deployment, Metadata, and MCP server concepts are mapped where relevant.
Required metadata covers owner, classification, lifecycle, data sensitivity, and support path.
OpenAPI definitions and MCP servers have governance checks before discovery.
Runtime concerns are handed to API Management or apim-ai-gateway instead of overstating API Center.
Agent builders have a clear discovery path for approved APIs and tools.
1---2name: azure-api-center-53description: Design Azure API Center as the enterprise inventory and governance plane for APIs, agent tools, OpenAPI definitions, environments, deployments, metadata, linting, and MCP server discovery. Use when building an API or tool catalog, enforcing API standards, registering MCP servers, or making approved tools discoverable to agent builders.4---56# Azure API Center78Design Azure API Center as the catalog and governance plane for APIs, tools, versions, definitions, environments, deployments, and MCP servers so agent builders discover approved capabilities instead of ungoverned endpoints.910## When to invoke1112- "Create an API Center catalog for our agent tools."13- "Govern OpenAPI definitions and MCP servers for agent builders."14- "Design API standards and linting with Azure API Center."15- "Make backend APIs discoverable for an agentic platform."1617## Inputs1819Use `$ARGUMENTS` as the governance scenario: API families, tool types, MCP servers, environments, required metadata, linter standards, consumers, and discovery experience. If the current Azure API Center feature set matters, verify it before stating final design.2021## Prerequisites and context2223- Confirm current API Center capabilities, including MCP registration, linting rules, portal features, and extension support, on Microsoft Learn before committing a design.24- Do not assert a feature without a source when the platform capability is time-sensitive.25- Pair API Center with API Management only when runtime enforcement is in scope; API Center itself is the inventory and governance plane.2627## Core concepts2829| Concept | Purpose | Design questions |30| --- | --- | --- |31| API | Logical entry for a product, backend, tool, or capability. | Who owns it? What domain does it serve? |32| Version | Specific version of an API. | What is the lifecycle stage and compatibility policy? |33| Definition | Contract, typically an OpenAPI document. | Is it linted, complete, and linked to a version? |34| Environment | Runtime environment such as Azure API Management or a Kubernetes cluster. | Is it dev, staging, production, or sandbox? |35| Deployment | Runtime location where a version is available. | Which environment, gateway, base URL, and owner apply? |36| Metadata | Custom governance properties. | Which fields are required for compliance and reporting? |37| MCP server | Tool server agents can discover and call. | Is it approved, owned, documented, and secured? |3839## Governance model4041| Governance need | API Center mechanism | Minimum metadata |42| --- | --- | --- |43| Ownership | Required custom metadata | owner, team, support contact. |44| Data sensitivity | Required custom metadata and review workflow | classification, PII, retention, region. |45| Lifecycle | Version and metadata | stage, deprecation date, replacement API. |46| Security standards | Linter and required fields | auth type, scopes, network exposure. |47| Discoverability | Portal or VS Code extension | description, tags, domain, examples. |48| Agent tool reuse | OpenAPI or MCP registration | tool purpose, side effects, rate limits, safety notes. |4950## Procedure51521. Model the catalog. Define metadata schema first: owner, classification, lifecycle stage, data sensitivity, cost center, support path, and allowed consumers.532. Register APIs and tools. Import OpenAPI definitions for backend APIs and HTTP tools. Register MCP servers so agents can discover them through the governed catalog.543. Link environments and deployments. Connect Azure API Management instances and other runtimes so API Center reflects where each API version actually runs.554. Govern definitions. Apply the API Center linter and required metadata. Reject or flag definitions that miss security, naming, versioning, or documentation standards.565. Publish discovery. Expose the API Center portal or VS Code extension to agent builders with filters for approved tools, environments, and lifecycle stage.576. Connect runtime enforcement. Use APIM AI gateway for authentication, token limits, semantic cache, and load balancing when the cataloged API is used at runtime.5859## Platform fit6061```text62Backend APIs / Tools / MCP servers63 | register definitions and metadata64 Azure API Center (inventory + governance + discovery)65 | reference governed APIs66 Azure API Management (runtime AI gateway: authN, token limit, cache)67 |68 Agents (Foundry, Container Apps) select and call governed tools69```7071## Related primitives7273| Name | Type | Use it when |74| --- | --- | --- |75| `apim-ai-gateway` | skill | You need runtime enforcement, authN, token limits, cache, routing, and metrics. |76| `foundry-agent-blueprint` | skill | Agents need to consume cataloged APIs as OpenAPI or MCP tools. |77| `agentic-architecture-patterns` | skill | You need architecture guidance for tools and MCP boundaries. |7879## Gotchas8081- **Catalogs fail without ownership**: require owner and support metadata before publishing an API or tool.82- **Discovery is not enforcement**: API Center does not replace API Management for runtime authentication or throttling.83- **Linting must run before registration is trusted**: imported OpenAPI alone does not guarantee secure or usable APIs.84- **MCP tool descriptions affect agent behavior**: document side effects, auth, and rate limits, not just endpoints.8586## Open Horizons integration8788- Scope API Center work to the Developer IDP or Agent IDP objective and current Horizon stage.89- Preserve Open Horizons Azure ownership, managed-identity, governance, and evidence boundaries where applicable.90- Route cross-domain sequencing through `open-horizons-orchestration` (`skill`).9192## Output template9394```markdown95## Azure API Center governance design9697**Scope:** <APIs, tools, MCP servers, or platform>9899| Catalog item | Definition source | Required metadata | Environment/deployment | Governance check |100| --- | --- | --- | --- | --- |101| <API or tool> | <OpenAPI, MCP, manual> | <owner, classification, lifecycle> | <dev/stage/prod runtime> | <linter/approval> |102103### Discovery model104- Portal or extension: <audience and filters>105- Approved tool criteria: <criteria>106107### Runtime handoff108- API Management/APIM AI gateway: <when used>109```110111## Quality gate112113- [ ] Current API Center capabilities are verified when feature specificity matters.114- [ ] API, Version, Definition, Environment, Deployment, Metadata, and MCP server concepts are mapped where relevant.115- [ ] Required metadata covers owner, classification, lifecycle, data sensitivity, and support path.116- [ ] OpenAPI definitions and MCP servers have governance checks before discovery.117- [ ] Runtime concerns are handed to API Management or `apim-ai-gateway` instead of overstating API Center.118- [ ] Agent builders have a clear discovery path for approved APIs and tools.119120## References121122- [Azure API Center](https://learn.microsoft.com/azure/api-center/)123- [Register APIs in API Center](https://learn.microsoft.com/azure/api-center/register-apis)124- [API governance and linting](https://learn.microsoft.com/azure/api-center/enable-api-analysis-linting)125- [API Center and API Management](https://learn.microsoft.com/azure/api-center/)
Run npx skillmds@latest add paulasilvatech/azure-api-center-5 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Design Azure API Center as the enterprise inventory and governance plane for APIs, agent tools, OpenAPI definitions, environments, deployments, metadata, linting, and MCP server discovery. Use when building an API or tool catalog, enforcing API standards, registering MCP servers, or making approved tools discoverable to agent builders. It is listed under Product & Planning on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
paulasilvatech (@paulasilvatech) published this skill. Their other Agent Skills are listed on their SkillMD profile.
paulasilvatech