OpenAPI Lint

Lints OpenAPI 3.x documents for missing security, responses, descriptions and versioning, and lists or fetches their operations.

What it does

Loads an OpenAPI 3.0 or 3.1 document from a local path or inline JSON/YAML and reports findings sorted by severity with rule id, JSON Pointer path and message. The lint_openapi tool covers version, servers, security schemes, missing responses, undescribed parameters, path parameters, operationIds, unversioned paths, empty request bodies, deprecated operations and undeclared tags. list_operations and get_operation enumerate operations with their effective security, parameters, media types and response codes, and explain_rule describes a rule and how to fix it.

When to use it

Useful when reviewing or maintaining an OpenAPI specification and you want an assistant to check completeness and security declarations, or to summarize the operations a document defines. It suits spec review and documentation work rather than testing a running API.

Requirements

Runs locally over stdio; no network access, accounts, API keys or environment variables are needed. Install via npx with the pinned package version, or run the container image with Docker. It reads one named local file, up to 5 MB.