Build Backend HTTP Outcalls in Motoko
Backend canisters need a reliable way to call external APIs. This skill shows how to use the Caffeine AI outcall module for GET and POST requests.
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Review the Skillstore skill "extension-http-outcalls" from https://skillstore.io/skills/caffeinelabs-extension-http-outcalls.md and its manifest at https://skillstore.io/api/skills/caffeinelabs-extension-http-outcalls/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Using "extension-http-outcalls". How should my backend canister call a weather API?
Expected outcome:
Import the prefabricated outcall module, define a query transform callback, and send a GET request from a backend function.
Using "extension-http-outcalls". Can the canister post data and parse the JSON response?
Expected outcome:
The module supports POST requests with headers, a body, and a transform callback. Send JSON responses to the frontend for parsing.
Using "extension-http-outcalls". What parts of the outcall module can I customize?
Expected outcome:
Keep the prefabricated module unchanged. Customize your backend functions, request URL, headers, body, and response workflow.
All five static findings are false positives. Four detections mistake Markdown backticks and Motoko code fences for shell execution, while the URL is a documentation link. No evidence of prompt injection or malicious intent was found.
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
https://skillstore.io/skills/caffeinelabs-extension-http-outcalls/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report[](https://skillstore.io/skills/caffeinelabs-extension-http-outcalls?utm_source=security_passport_badge)<a href="https://skillstore.io/skills/caffeinelabs-extension-http-outcalls?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/caffeinelabs-extension-http-outcalls/security.svg" alt="Skillstore security assessment" loading="lazy"></a><iframe src="https://skillstore.io/embed/skills/caffeinelabs-extension-http-outcalls.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>caffeinelabs. (2026). extension-http-outcalls security audit report (audit version 3) [Author version 0.1.6]. Skillstore. https://skillstore.io/skills/caffeinelabs-extension-http-outcalls/audits/3@techreport{caffeinelabs-caffeinelabs-extension-http-outcalls-2026,
author = {caffeinelabs},
title = {extension-http-outcalls security audit report (audit version 3)},
institution = {Skillstore},
year = {2026},
number = {3},
url = {https://skillstore.io/skills/caffeinelabs-extension-http-outcalls/audits/3},
note = {Author version 0.1.6}
}cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "extension-http-outcalls security audit report (audit version 3)"
version: "0.1.6"
type: report
authors:
- name: "caffeinelabs"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/caffeinelabs-extension-http-outcalls/audits/3"
identifiers:
- type: other
value: "skillstore:caffeinelabs-extension-http-outcalls:audit:3"
description: "Skillstore immutable audit report identifier"
Add a basic backend GET request and transform callback to a Motoko canister.
Plan GET and POST calls from a canister to an external service.
Check module usage, response transformation, and frontend JSON handling before implementation.
Explain how this skill performs a backend GET request to [API URL]. Identify the import, transform callback, and request call.
Draft a Motoko backend function that sends a GET request to [API URL] with [headers] and uses the provided transform callback.
Plan a POST outcall from a backend canister to [service]. Specify headers, body handling, transform usage, and response processing boundaries.
Compare backend GET and POST integration options for [service]. Recommend function boundaries, reusable headers, transform handling, and frontend JSON parsing.
Author
caffeinelabsLicense
MIT
Author version
v0.1.6
Skillstore revision
r2
Ref
a39a91716eadede5f4cdefd78178fed4e837a128
Maintenance freshness
7/24/2026
Usage
0 downloads · 0 views
File structure
📄 SKILL.md
Expose Canister Data Through OQL
Structured canister data is difficult for intelligence agents to query safely. This skill adds OQL entities, schema discovery, query execution, relationships, and per-entity authorization.
Add User Approval to Caffeine AI Apps
Applications need a controlled process for granting access to protected features. This skill guides backend approval checks, admin decisions, and frontend approval workflows.
Add Object Storage to Caffeine AI Apps
Large files need storage beyond Internet Computer canister limits. This skill guides Caffeine AI projects through backend integration, browser uploads, cached display, downloads, and troubleshooting.
Query OQL Canisters with the ICP CLI
Writing OQL queries requires exact schema names, JSON types, Candid escaping, and careful pagination. This skill provides practical patterns for reliable, read-only canister queries.
Add Camera Capture to React Apps
Web camera integration requires permission handling, preview state, and device controls. This skill guides Claude, Codex, and Claude Code through the provided React hook.
Build Caffeine AI Core Infrastructure
Connecting React applications to Internet Computer backends requires coordinated authentication, actor, query, and storage setup. This skill provides proven integration and migration guidance for that foundation.
Build Firecrawl Single-Page Scraping
by firecrawl
Apps often need clean content from one known URL. This skill guides a focused Firecrawl /scrape integration for page extraction.
Build Firecrawl Browser Interactions
by firecrawl
Dynamic pages often hide data behind clicks, forms, and login flows. This skill helps teams choose and scope Firecrawl /interact integrations.
Create Reusable Lark CLI Skills
by larksuite
Building reusable Lark automation requires consistent API research, permissions, and workflow documentation. This skill guides Claude and Codex through focused lark-cli skills for single APIs or multi-step workflows.
Build Python HTTP Clients with HTTPX
by bossjones
Python HTTP integrations require careful handling of async execution, authentication, streaming, and failures. This skill provides focused HTTPX patterns for reliable client code.
Integrate Apify Actors into Your Application
by apify
Adding managed scraping and automation requires correct client setup, Actor inputs, and result handling. This skill provides practical Apify integration patterns for common application workflows.
Build MCP Servers for AI Tools
by anthropics
Building reliable MCP servers requires protocol knowledge, secure API design, and strong evaluation practices. This skill provides structured guidance for planning, coding, testing, and improving MCP integrations.