[Tool] Add API tool

[marcusschiesser]

Backend

• set OpenAPI spec in backend

Extension

• use tool if configured in the backend
• when the tool is called, reload the page so the user sees the changes
• the user's authentication must be reused (the api will be called in the same way as the FE would call it (i.e. fetch JS function) - the extension has to snoop the header and inject it in the fetch call.

Feasibility test

Run the following fetch in X - will update your profile (need to use right header)

fetch("https://api.x.com/1.1/account/update_profile.json", {
  "headers": {
    "authorization": "Bearer xxxx",
    "content-type": "application/x-www-form-urlencoded",
    "sec-ch-ua": "\"Brave\";v=\"131\", \"Chromium\";v=\"131\", \"Not_A Brand\";v=\"24\"",
    "sec-ch-ua-mobile": "?0",
    "sec-ch-ua-platform": "\"macOS\"",
    "x-client-transaction-id": "xxxxx",
    "x-csrf-token": "xxxx",
    "x-twitter-active-user": "yes",
    "x-twitter-auth-type": "OAuth2Session",
    "x-twitter-client-language": "en"
  },
  "referrer": "https://x.com/",
  "referrerPolicy": "strict-origin-when-cross-origin",
  "body": "displayNameMaxLength=50&url=http%3A%2F%2Fwww.marcusschiesser.de&name=Marcus%20Schiesser&description=AI%20Knowledge%20Assistants%20for%20Enterprises.%20Tech%20enthusiast%20and%20nature%20lover.&location=Thailand",
  "method": "POST",
  "mode": "cors",
  "credentials": "include"
});

Use case

"Change the description of my profile. Mention that I also like bubble gum".
(tool needs to read the profile data first, then modify it and then update it)

[marcusschiesser]

using gpt4o i could generate the following openapi spec based on the fetch:

{
  "openapi": "3.0.3",
  "info": {
    "title": "Profile Update API",
    "version": "1.0.0",
    "description": "API for updating user profile information."
  },
  "servers": [
    {
      "url": "https://api.x.com/1.1"
    }
  ],
  "paths": {
    "/account/update_profile.json": {
      "post": {
        "summary": "Update Profile",
        "description": "Allows updating the user's profile details including name, URL, description, and location.",
        "operationId": "updateProfile",
        "requestBody": {
          "required": true,
          "content": {
            "application/x-www-form-urlencoded": {
              "schema": {
                "type": "object",
                "properties": {
                  "displayNameMaxLength": {
                    "type": "integer",
                    "example": 50,
                    "description": "Maximum length of the display name."
                  },
                  "url": {
                    "type": "string",
                    "format": "uri",
                    "example": "http://www.marcusschiesser.de",
                    "description": "URL to associate with the profile."
                  },
                  "name": {
                    "type": "string",
                    "example": "Marcus Schiesser",
                    "description": "Name of the user."
                  },
                  "description": {
                    "type": "string",
                    "example": "AI Knowledge Assistants for Enterprises. Tech enthusiast and nature lover.",
                    "description": "Profile description."
                  },
                  "location": {
                    "type": "string",
                    "example": "Thailand",
                    "description": "Location of the user."
                  }
                },
                "required": ["url", "name", "description", "location"]
              }
            }
          }
        },
        "responses": {
          "200": {
            "description": "Profile successfully updated.",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "success": {
                      "type": "boolean",
                      "example": true
                    },
                    "message": {
                      "type": "string",
                      "example": "Profile updated successfully."
                    }
                  }
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "application/json": {
                "schema": {
                  "type": "object",
                  "properties": {
                    "error": {
                      "type": "string",
                      "example": "Invalid input data."
                    }
                  }
                }
              }
            }
          }
        },
        "parameters": [
          {
            "name": "authorization",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Bearer token for authorization."
          },
          {
            "name": "content-type",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "example": "application/x-www-form-urlencoded"
            }
          },
          {
            "name": "x-client-transaction-id",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "Client transaction ID for tracking."
          },
          {
            "name": "x-csrf-token",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string"
            },
            "description": "CSRF token for protection against cross-site request forgery."
          },
          {
            "name": "x-twitter-active-user",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "example": "yes"
            }
          },
          {
            "name": "x-twitter-auth-type",
            "in": "header",
            "required": true,
            "schema": {
              "type": "string",
              "example": "OAuth2Session"
            }
          },
          {
            "name": "x-twitter-client-language",
            "in": "header",
            "required": false,
            "schema": {
              "type": "string",
              "example": "en"
            }
          }
        ]
      }
    }
  }
}