What does this tool check?

It inspects the submitted OpenAPI document and renders backend findings, coverage, warnings, and recommendations in a readable report.

Does this prove a vulnerability?

No. Treat findings as review signals that should be confirmed against runtime configuration and threat model.

Does global security count as authentication coverage?

Yes, OpenAPI operations can inherit root-level security unless an operation explicitly overrides it.

What does security: [] mean?

An empty operation-level security array usually means the operation is intentionally public and should be reviewed carefully.

OpenAPI Validator

Validate OpenAPI 3.x and Swagger 2.0 specs for structural errors, unresolved refs, and contract issues. Free OpenAPI validator online by Graph Tools.

Use this free OpenAPI validator to check your OpenAPI 3.0, 3.1, or Swagger 2.0 specification for structural errors, missing required fields, unresolved $ref references, and common spec issues. Paste or upload your JSON or YAML spec and get a clear pass/fail report with detailed error paths and line numbers.

Related Tools

JSON Payload Comparison Tool
OpenAPI Diff Tool — Evolution Inspector
Contract Completeness Checker