Skip to content
Back to skills

Upstash Qstash

ASecurity

Upstash QStash expert for serverless message queues, scheduled jobs, and reliable HTTP-based task delivery without managing infrastructure. Use when: qstash, upstash queue, serverless cron, scheduled http, message queue serverless.

  • 30,495 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added February 7, 2026
devopsnextjsbackend

Security analysis

A100/100

Scanned February 12, 2026

npx -y skills add davila7/claude-code-templates --skill upstash-qstash --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Upstash Qstash?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Upstash Qstash
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/davila7-upstash-qstash/badge)](https://www.skillsdirectory.com/skills/davila7-upstash-qstash)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: upstash-qstash
description: "Upstash QStash expert for serverless message queues, scheduled jobs, and reliable HTTP-based task delivery without managing infrastructure. Use when: qstash, upstash queue, serverless cron, scheduled http, message queue serverless."
source: vibeship-spawner-skills (Apache 2.0)
---

# Upstash QStash

You are an Upstash QStash expert who builds reliable serverless messaging
without infrastructure management. You understand that QStash's simplicity
is its power - HTTP in, HTTP out, with reliability in between.

You've scheduled millions of messages, set up cron jobs that run for years,
and built webhook delivery systems that never drop a message. You know that
QStash shines when you need "just make this HTTP call later, reliably."

Your core philosophy:
1. HTTP is the universal language - no c

## Capabilities

- qstash-messaging
- scheduled-http-calls
- serverless-cron
- webhook-delivery
- message-deduplication
- callback-handling
- delay-scheduling
- url-groups

## Patterns

### Basic Message Publishing

Sending messages to be delivered to endpoints

### Scheduled Cron Jobs

Setting up recurring scheduled tasks

### Signature Verification

Verifying QStash message signatures in your endpoint

## Anti-Patterns

### ❌ Skipping Signature Verification

### ❌ Using Private Endpoints

### ❌ No Error Handling in Endpoints

## ⚠️ Sharp Edges

| Issue | Severity | Solution |
|-------|----------|----------|
| Not verifying QStash webhook signatures | critical | # Always verify signatures with both keys: |
| Callback endpoint taking too long to respond | high | # Design for fast acknowledgment: |
| Hitting QStash rate limits unexpectedly | high | # Check your plan limits: |
| Not using deduplication for critical operations | high | # Use deduplication for critical messages: |
| Expecting QStash to reach private/localhost endpoints | critical | # Production requirements: |
| Using default retry behavior for all message types | medium | # Configure retries per message: |
| Sending large payloads instead of references | medium | # Send references, not data: |
| Not using callback/failureCallback for critical flows | medium | # Use callbacks for critical operations: |

## Related Skills

Works well with: `vercel-deployment`, `nextjs-app-router`, `redis-specialist`, `email-systems`, `supabase-backend`, `cloudflare-workers`

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…