API Route Creation Skill

When to Use

Use this skill when creating:

• New API endpoints
• Route handlers
• Server actions

Security Requirements (NEVER VIOLATE)

1. Always authenticate - Check session
2. Always scope by tenant - Use session.user.tenantId
3. Always validate input - Use Zod schemas
4. Never trust user input - Especially tenant_id
5. Log sensitive ops - Audit trail

Template: API Route Handler