generated: '2026-08-12'
method: generated
source: openapi/delos-wellcube-cloud-be-openapi.yml
note: >-
  Delos publishes no AGENTS.md, no skills directory and no agent guidance of any kind — the site,
  sitemap and the Delos-tech GitHub organization were all searched. These skills are generated by API
  Evangelist from the provider's public OpenAPI at https://cloud.wellcube.io/api/v1/docs/. Every
  operationId, parameter, enum and error code cited in them was read out of that document or observed
  on a live unauthenticated probe; none is invented.
skills:
- file: delos-authenticate-and-list-installations.md
  name: Authenticate against the WellCube Cloud BE API and list installations
  api: openapi/delos-wellcube-cloud-be-openapi.yml
  operations:
  - limitedSessionCreate
  - limitedSessionRefresh
  - sessionValidate
  - installationsList
  - adminInstallationsList
  - adminInstallationsListAssociatedProducts
  risk: read-only
- file: delos-invite-user-to-product.md
  name: Invite a user to a WellCube product and manage the invitation lifecycle
  api: openapi/delos-wellcube-cloud-be-openapi.yml
  operations:
  - userProductInvitationCreate
  - userProductInvitationShow
  - userProductInvitationConfirm
  - userProductInvitationRenew
  - userProductInvitationRevoke
  - userProductsList
  - adminUserProductsList
  - adminUserProductsCreate
  - adminUserProductsUpdate
  - adminUserProductsDelete
  risk: write — entitlement grants and irreversible revoke/delete; no idempotency key
- file: delos-dispatch-device-action-and-poll-job.md
  name: Dispatch a WellCube device action and poll the resulting job
  api: openapi/delos-wellcube-cloud-be-openapi.yml
  operations:
  - globalExecuteNVA
  - globalJobsShow
  - globalJobsGetResults
  - actionSubmit
  - actionShow
  risk: physical — commands equipment on a live building installation; human-in-the-loop required
cross_cutting_rules:
- Every response is HTTP 200. Branch on body.status (1 success / 0 failure), never on the status line. Verified live 2026-08-12.
- Match failures on body.error.code, not on the x--prefixed response-map key and not on the HTTP status.
- FORMAT_ERROR (missing/invalid Authorization header) is returned live but is absent from the published contract — handle it explicitly.
- No idempotency key exists anywhere in this API. Never blind-retry a write; re-read state and decide.
- No rate-limit headers are returned. Back off conservatively on your own schedule.
- Pagination is limit/offset with no total count and no next link. Page until a response returns fewer rows than limit.