API Commons
Repositories list
74 repositories
spotlight-rules
PublicWebsite for Spotlight Rules — the openly-governed build of the Spectral API linter.spotlight-spec
PublicThe Spectral ruleset format as a standalone specification and JSON Schema — normative, independently versioned, implementable by anyone.spotlight-tools
Publicapi-governance-mcp
PublicA Model Context Protocol (MCP) server that lints API artifacts against a best-of-breed API governance ruleset from any AI client. Powered by Spectral.api-discovery
PublicBrowser-first registry for API artifacts — search APIs.io + GitHub/GitLab/Bitbucket, keep provenance, save locally or commit/PR to git, and editapi-commons
PublicThe API Commons — the hub and website (apicommons.org) for open, machine-readable API building blocks, standards, and browser-first tools.identity
PublicSCIM 2.0 profiled as the industry implements it, set beside what RFC 7643 and RFC 7644 actually say — the ratified standard in the API Commons standards-from-pr…storage
PublicDe facto standards for the storage layer — the S3 interface profiled from botocore's model, graded by what adopters declare, with an honest account of why it ca…open-data
PublicDe facto standards for the open-data layer — the CKAN Action API authored from CKAN's own source and graded by probing live government portals across 30 release…blockchain
Publicadopters
PublicThe adopters schema for the API Commons — a machine-readable way to publish who implements a standard, and how strongly each claim is evidenced.models
Publicapi-onboarding
PublicAPI Onboarding Descriptor (AID) — a machine-readable /.well-known/api-onboarding document describing what it takes to onboard with an API: account, plan gates, …kya
PublicKYA — Know Your Agent: a machine-readable way for an API consumer to say who they are, and for a provider to decide whether that is enough. Graded facts, never …api-experience
PublicA DX/AX visual layer for any APIs.json — see each REST operation flow to its MCP tool and Agent Skill, with a free/paid coverage scorecard. experience.apicommon…spotlight-validator
PublicThe Spotlight rule catalog and validator — source of truth for the 740 rules published at apicommons.org/rules/. Restored after the original remote was lost.api-governance-graph
PublicBind your API governance building blocks — policies, rules, pipelines, and specs — into one navigable graph with a Gaps view. A browser-first API Commons tool a…api-validator
PublicBrowser-first API governance validator for OpenAPI, AsyncAPI, Arazzo, and JSON Schema — powered by Spectral, with Swagger 2.0 parity. Search Git hosts for real …component-library
PublicA browser-first tool for a versioned, reusable API model/component library — author or import a library of named JSON Schemas, see which OpenAPI specs consume e…api-reusability
PublicAssess API reusability across your organization — discover (apis.io/GitHub/HAR/gateways), index as APIs.json, and score reuse per API and per org/team/domain. R…spec-review
PublicA browser-first, ref-resolving design-diff for OpenAPI (and AsyncAPI/Arazzo) — paste an old and a new spec, resolve $ref so reviewers see the real shape, and ge…codefirst-governance
PublicA browser-first tool that meets code-first API teams where they are — fingerprint the OpenAPI generator from a generated spec, separate the governance findings …context-gate
PublicConsumer-centric API governance: choose what operations/fields your APIs expose to agents; emit a governed Tyk API + MCP surface and a Spectral ruleset (PII/sec…spectral-ruleset-studio
Publicgovernance-baseline
PublicA browser-first tool to make Spectral/Spotlight governance adoptable on a legacy estate — snapshot a baseline of the violations you have today, then ratchet: fa…governance-scorecard
PublicA browser-first tool for the longitudinal view of API governance — ingest a series of Spectral snapshots over time, compute a 0–100 health score per spec, and s…governance-waivers
PublicSanctioned, owned, expiring API governance exceptions — reconcile a machine-readable waivers file against Spectral output. Browser-first.governance-coverage
Publicgovernance-certification
PublicIssue and verify tamper-evident API governance certificates — SHA-256 fingerprint lets consumers re-verify an API passed a ruleset at a profile. Browser-first.governance-agent-export
Public
ProTip! When viewing an organization's repositories, you can use the
props. filter to filter by custom property.