Skills
Markdown files that give Cora domain knowledge specific to your project, stack, or technical conventions.
Last updated
~/.config/Code/User/globalStorage/codemateai.codemate-agent/settings/skills/your-project/.cora/skills/# API conventions
This skill describes the request and response patterns used across
all backend endpoints in this project.
## Authentication
All authenticated endpoints expect a Bearer token in the Authorization
header. The token is a JWT signed with RS256.
Machine-to-machine requests use an API key in the X-Api-Key header —
never a JWT. The two auth flows are separate and must not be conflated.
## Error responses
All errors return JSON in this shape:
{
"error": "human-readable message",
"code": "MACHINE_READABLE_CODE",
"status": 400
}
The `code` field is always SCREAMING_SNAKE_CASE and safe to match on
in client code. The `error` field is for display only.
## Pagination
List endpoints use cursor-based pagination. The response includes
`nextCursor` when more results exist. Pass it as `?cursor=` on the
next request. There is no offset-based pagination in this project.# Edit a global skill
code ~/.config/Code/User/globalStorage/codemateai.codemate-agent/settings/skills/api-conventions.md
# Edit a project skill
code .cora/skills/api-conventions.md