About this tool
Review an API contract as both a standards-validated document and an actionable endpoint inventory without resolving remote references.
- Parses bounded YAML or JSON with alias, merge, depth, node, operation, warning, and execution limits before Swagger Parser validation.
- Resolves local references for inventory but rejects every external $ref before validation without making a network request.
- Reports endpoints, responses, operation IDs, path parameter declarations, applied security, deprecation, request bodies, deterministic review warnings, and timestamped JSON evidence.
How to use OpenAPI Inspector
Paste or load an OpenAPI document, parse and validate it locally, then review operations, security declarations, schemas, and unresolved references.
When this tool is useful
- Reviewing an API contract before documentation or generation.
- Finding missing operation metadata and broken local references.
Practical tips
- Do not paste production secrets into example values.
- Run generated clients and requests separately.
Examples you can test
Load an example, compare the result with the expected output, then replace it with your own input.
Inspect a small API contract
Example input
OpenAPI 3 document with one GET operation and a broken local $ref
Expected output
Operation inventory plus reference validation error
A valid document does not prove the deployed API behaves the same way.
Validation checklist
- Resolve parser and reference errors.
- Review security requirements per operation.
- Compare the contract with the deployed API separately.