Caplight · API Governance Rules

Caplight API Rules

Spectral linting rules defining API design standards and conventions for Caplight.

61 Rules error 50 warn 9 info 2
Generated by API Evangelist Written by API Evangelist tooling for Caplight's APIs. It is a starting point, not a ruleset Caplight publishes or enforces.
View Rules File View on GitHub

Rule Categories

contact info mediatype operation operationid parameter path property response schema securityscheme server tag

Rules

error
operation-has-operationid
Every operation declares an operationId (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete]
error
operationid-casing-camel
operationIds are camel case (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete].operationId
error
operation-has-summary
Every operation has a summary (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete]
error
operation-has-description
Every operation has a description (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete]
error
operation-has-tags
Every operation is tagged (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete]
error
operation-has-success-response
Every operation declares a 2xx response (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete].responses
error
path-segment-casing-kebab
Path segments are kebab case (measured: 100% of this contract)
$.paths[*]~
error
path-no-trailing-slash
Paths carry no trailing slash (measured: 100% of this contract)
$.paths[*]~
error
path-params-in-braces
Path parameters use {braces}, not :colon (measured: 100% of this contract)
$.paths[*]~
error
response-media-type
Responses are served as application/json (measured: 100% of this contract)
$.paths[*][get,post,put,patch,delete].responses[*].content
error
property-name-casing-camel
Schema property names are camel case (measured: 100% of this contract)
$.components.schemas[*].properties[*]~
error
info-has-description
The contract's info block carries a description (measured: 100% of this contract)
$.info
error
info-has-contact-or-terms
The contract's info block names a contact or terms of service (measured: 100% of this contract)
$.info
error
info-title-present
Info declares title (measured: 100% of this contract)
$.info
error
info-title-min-length
Info.title runs at least 22 characters (measured: 100% of this contract)
$.info.title
error
info-description-present
Info declares description (measured: 100% of this contract)
$.info
error
info-description-min-length
Info.description runs at least 94 characters (measured: 100% of this contract)
$.info.description
error
info-termsofservice-present
Info declares termsOfService (measured: 100% of this contract)
$.info
error
info-termsofservice-https
Info.termsOfService is https (measured: 100% of this contract)
$.info.termsOfService
error
info-contact-present
Info declares contact (measured: 100% of this contract)
$.info
error
info-version-present
Info declares version (measured: 100% of this contract)
$.info
error
info-version-semver
info.version is numeric (measured: 100% of this contract)
$.info.version
error
contact-name-present
Contact declares name (measured: 100% of this contract)
$.info.contact
error
contact-email-present
Contact declares email (measured: 100% of this contract)
$.info.contact
error
server-url-present
Server declares url (measured: 100% of this contract)
$.servers[*]
error
server-description-present
Server declares description (measured: 100% of this contract)
$.servers[*]
error
server-description-min-length
Server.description runs at least 10 characters (measured: 100% of this contract)
$.servers[*].description
error
tag-name-present
Tag declares name (measured: 100% of this contract)
$.tags[*]
error
tag-description-min-length
Tag.description runs at least 41 characters (measured: 100% of this contract)
$.tags[*].description
error
operation-tags-present
Operation declares tags (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace]
error
operation-summary-present
Operation declares summary (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace]
warn
operation-summary-min-length
Operation.summary runs at least 15 characters (measured: 96% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].summary
error
operation-description-present
Operation declares description (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace]
warn
operation-description-min-length
Operation.description runs at least 62 characters (measured: 96% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].description
error
operation-operationid-present
Operation declares operationId (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace]
error
operation-operationid-casing-camel
Operation.operationId is camel case (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].operationId
info
operation-parameters-present
Operation declares parameters (measured: 88% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace]
error
operation-responses-present
Operation declares responses (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace]
error
parameter-name-present
Parameter declares name (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
warn
parameter-name-casing-camel
Parameter.name is camel case (measured: 97% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].name
error
parameter-in-present
Parameter declares in (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
warn
parameter-in-values
Parameter.in is one of path, query (measured: 97% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].in
error
parameter-description-present
Parameter declares description (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
warn
parameter-description-min-length
Parameter.description runs at least 19 characters (measured: 97% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].description
warn
parameter-required-present
Parameter declares required (measured: 97% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
error
parameter-style-values
Parameter.style is one of form (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].style
error
parameter-schema-present
Parameter declares schema (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
info
parameter-example-present
Parameter declares example (measured: 89% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
error
mediatype-schema-present
MediaType declares schema (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].responses[*].content[*]
error
response-description-present
Response declares description (measured: 100% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].responses[*]
warn
response-description-min-length
Response.description runs at least 20 characters (measured: 97% of this contract)
$.paths[*][get,put,post,delete,patch,options,head,trace].responses[*].description
warn
schema-type-present
Schema declares type (measured: 93% of this contract)
$.components.schemas[*]
warn
schema-type-values
Schema.type is one of object, string (measured: 98% of this contract)
$.components.schemas[*].type
error
schema-description-min-length
Schema.description runs at least 22 characters (measured: 100% of this contract)
$.components.schemas[*].description
error
securityscheme-type-present
SecurityScheme declares type (measured: 100% of this contract)
$.components.securitySchemes[*]
error
securityscheme-type-values
SecurityScheme.type is one of apiKey (measured: 100% of this contract)
$.components.securitySchemes[*].type
error
securityscheme-description-present
SecurityScheme declares description (measured: 100% of this contract)
$.components.securitySchemes[*]
error
securityscheme-name-present
SecurityScheme declares name (measured: 100% of this contract)
$.components.securitySchemes[*]
error
securityscheme-name-casing-snake
SecurityScheme.name is snake case (measured: 100% of this contract)
$.components.securitySchemes[*].name
error
securityscheme-in-present
SecurityScheme declares in (measured: 100% of this contract)
$.components.securitySchemes[*]
error
securityscheme-in-values
SecurityScheme.in is one of header (measured: 100% of this contract)
$.components.securitySchemes[*].in

Spectral Ruleset

Raw ↑ 
# authorship: generated by API Evangelist tooling (derive-rules.py, 2026-11-01). x-method: generated
# Every rule below was MEASURED against Caplight's own contract before it was written; a rule is present only
# when the contract satisfies it at 80% or more. Severity: 100% -> error, >= 90% -> warn, else info.
# Provenance:
#   - operation-has-operationid: 100%
#   - operationid-casing-camel: 100%
#   - operation-has-summary: 100%
#   - operation-has-description: 100%
#   - operation-has-tags: 100%
#   - operation-has-success-response: 100%
#   - path-segment-casing-kebab: 100%
#   - path-no-trailing-slash: 100%
#   - path-params-in-braces: 100%
#   - response-media-type: 100%
#   - property-name-casing-camel: 100%
#   - info-has-description: 100%
#   - info-has-contact-or-terms: 100%
#   - info-title-present: 100%
#   - info-title-min-length: 100%
#   - info-description-present: 100%
#   - info-description-min-length: 100%
#   - info-termsofservice-present: 100%
#   - info-termsofservice-https: 100%
#   - info-contact-present: 100%
#   - info-version-present: 100%
#   - info-version-semver: 100%
#   - contact-name-present: 100%
#   - contact-email-present: 100%
#   - server-url-present: 100%
#   - server-description-present: 100%
#   - server-description-min-length: 100%
#   - tag-name-present: 100%
#   - tag-description-min-length: 100%
#   - operation-tags-present: 100%
#   - operation-summary-present: 100%
#   - operation-summary-min-length: 96%
#   - operation-description-present: 100%
#   - operation-description-min-length: 96%
#   - operation-operationid-present: 100%
#   - operation-operationid-casing-camel: 100%
#   - operation-parameters-present: 88%
#   - operation-responses-present: 100%
#   - parameter-name-present: 100%
#   - parameter-name-casing-camel: 97%
#   - parameter-in-present: 100%
#   - parameter-in-values: 97%
#   - parameter-description-present: 100%
#   - parameter-description-min-length: 97%
#   - parameter-required-present: 97%
#   - parameter-style-values: 100%
#   - parameter-schema-present: 100%
#   - parameter-example-present: 89%
#   - mediatype-schema-present: 100%
#   - response-description-present: 100%
#   - response-description-min-length: 97%
#   - schema-type-present: 94%
#   - schema-type-values: 99%
#   - schema-description-min-length: 100%
#   - securityscheme-type-present: 100%
#   - securityscheme-type-values: 100%
#   - securityscheme-description-present: 100%
#   - securityscheme-name-present: 100%
#   - securityscheme-name-casing-snake: 100%
#   - securityscheme-in-present: 100%
#   - securityscheme-in-values: 100%
x-method: generated
x-generator: derive-rules.py
x-generated: '2026-11-01'
x-source:
- openapi/caplight-companies-api-openapi.yml
- openapi/caplight-company-api-openapi.yml
- openapi/caplight-company-details-api-openapi.yml
- openapi/caplight-company-filings-api-openapi.yml
- openapi/caplight-company-lookup-api-openapi.yml
x-self-check:
  status: checked
  rules: 61
  dropped: {}
extends:
- - spectral:oas
  - recommended
formats:
- oas3
rules:
  operation-has-operationid:
    description: 'Every operation declares an operationId (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete]
    then:
      field: operationId
      function: truthy
    x-pattern-key: Operation.operationId|present
  operationid-casing-camel:
    description: 'operationIds are camel case (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete].operationId
    then:
      function: pattern
      functionOptions:
        match: ^[a-z][a-zA-Z0-9]*$
    x-pattern-key: Operation.operationId|pattern:^[a-z][a-zA-Z0-9]*$
  operation-has-summary:
    description: 'Every operation has a summary (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete]
    then:
      field: summary
      function: truthy
    x-pattern-key: Operation.summary|present
  operation-has-description:
    description: 'Every operation has a description (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete]
    then:
      field: description
      function: truthy
    x-pattern-key: Operation.description|present
  operation-has-tags:
    description: 'Every operation is tagged (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete]
    then:
      field: tags
      function: truthy
    x-pattern-key: Operation.tags|present
  operation-has-success-response:
    description: 'Every operation declares a 2xx response (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete].responses
    then:
      function: schema
      functionOptions:
        schema:
          type: object
          patternProperties:
            ^2\d\d$: {}
          minProperties: 1
    x-pattern-key: Operation.responses|schema:07e20b47
  path-segment-casing-kebab:
    description: 'Path segments are kebab case (measured: 100% of this contract)'
    severity: error
    given: $.paths[*]~
    then:
      function: pattern
      functionOptions:
        match: ^(/[a-z0-9]+(-[a-z0-9]+)*|/\{[^}]+\})+/?$
    x-pattern-key: Paths.{key}|pattern:^(/[a-z0-9]+(-[a-z0-9]+)*|/\{[^}]+\})+/?$
  path-no-trailing-slash:
    description: 'Paths carry no trailing slash (measured: 100% of this contract)'
    severity: error
    given: $.paths[*]~
    then:
      function: pattern
      functionOptions:
        notMatch: ./$
    x-pattern-key: Paths.{key}|pattern:!./$
  path-params-in-braces:
    description: 'Path parameters use {braces}, not :colon (measured: 100% of this contract)'
    severity: error
    given: $.paths[*]~
    then:
      function: pattern
      functionOptions:
        notMatch: ':'
    x-pattern-key: 'Paths.{key}|pattern:!:'
  response-media-type:
    description: 'Responses are served as application/json (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,post,put,patch,delete].responses[*].content
    then:
      function: schema
      functionOptions:
        schema:
          type: object
          required:
          - application/json
    x-pattern-key: Response.content|schema:2919cf38
  property-name-casing-camel:
    description: 'Schema property names are camel case (measured: 100% of this contract)'
    severity: error
    given: $.components.schemas[*].properties[*]~
    then:
      function: pattern
      functionOptions:
        match: ^[a-z][a-zA-Z0-9]*$
    x-pattern-key: Schema.properties{key}|pattern:^[a-z][a-zA-Z0-9]*$
  info-has-description:
    description: 'The contract''s info block carries a description (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      field: description
      function: truthy
    x-pattern-key: Info.description|present
  info-has-contact-or-terms:
    description: 'The contract''s info block names a contact or terms of service (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      function: schema
      functionOptions:
        schema:
          anyOf:
          - required:
            - contact
          - required:
            - termsOfService
    x-pattern-key: OpenAPI.info|schema:093268bf
  info-title-present:
    description: 'Info declares title (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      field: title
      function: defined
    x-pattern-key: Info.title|present
  info-title-min-length:
    description: 'Info.title runs at least 22 characters (measured: 100% of this contract)'
    severity: error
    given: $.info.title
    then:
      function: length
      functionOptions:
        min: 22
    x-pattern-key: Info.title|length
  info-description-present:
    description: 'Info declares description (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      field: description
      function: defined
    x-pattern-key: Info.description|present
  info-description-min-length:
    description: 'Info.description runs at least 94 characters (measured: 100% of this contract)'
    severity: error
    given: $.info.description
    then:
      function: length
      functionOptions:
        min: 94
    x-pattern-key: Info.description|length
  info-termsofservice-present:
    description: 'Info declares termsOfService (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      field: termsOfService
      function: defined
    x-pattern-key: Info.termsOfService|present
  info-termsofservice-https:
    description: 'Info.termsOfService is https (measured: 100% of this contract)'
    severity: error
    given: $.info.termsOfService
    then:
      function: pattern
      functionOptions:
        match: ^https://
    x-pattern-key: Info.termsOfService|pattern:^https://
  info-contact-present:
    description: 'Info declares contact (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      field: contact
      function: defined
    x-pattern-key: Info.contact|present
  info-version-present:
    description: 'Info declares version (measured: 100% of this contract)'
    severity: error
    given: $.info
    then:
      field: version
      function: defined
    x-pattern-key: Info.version|present
  info-version-semver:
    description: 'info.version is numeric (measured: 100% of this contract)'
    severity: error
    given: $.info.version
    then:
      function: pattern
      functionOptions:
        match: ^v?\d+(\.\d+)*
    x-pattern-key: Info.version|pattern:^v?\d+(\.\d+)*
  contact-name-present:
    description: 'Contact declares name (measured: 100% of this contract)'
    severity: error
    given: $.info.contact
    then:
      field: name
      function: defined
    x-pattern-key: Contact.name|present
  contact-email-present:
    description: 'Contact declares email (measured: 100% of this contract)'
    severity: error
    given: $.info.contact
    then:
      field: email
      function: defined
    x-pattern-key: Contact.email|present
  server-url-present:
    description: 'Server declares url (measured: 100% of this contract)'
    severity: error
    given: $.servers[*]
    then:
      field: url
      function: defined
    x-pattern-key: Server.url|present
  server-description-present:
    description: 'Server declares description (measured: 100% of this contract)'
    severity: error
    given: $.servers[*]
    then:
      field: description
      function: defined
    x-pattern-key: Server.description|present
  server-description-min-length:
    description: 'Server.description runs at least 10 characters (measured: 100% of this contract)'
    severity: error
    given: $.servers[*].description
    then:
      function: length
      functionOptions:
        min: 10
    x-pattern-key: Server.description|length
  tag-name-present:
    description: 'Tag declares name (measured: 100% of this contract)'
    severity: error
    given: $.tags[*]
    then:
      field: name
      function: defined
    x-pattern-key: Tag.name|present
  tag-description-min-length:
    description: 'Tag.description runs at least 41 characters (measured: 100% of this contract)'
    severity: error
    given: $.tags[*].description
    then:
      function: length
      functionOptions:
        min: 41
    x-pattern-key: Tag.description|length
  operation-tags-present:
    description: 'Operation declares tags (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace]
    then:
      field: tags
      function: defined
    x-pattern-key: Operation.tags|present
  operation-summary-present:
    description: 'Operation declares summary (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace]
    then:
      field: summary
      function: defined
    x-pattern-key: Operation.summary|present
  operation-summary-min-length:
    description: 'Operation.summary runs at least 15 characters (measured: 96% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].summary
    then:
      function: length
      functionOptions:
        min: 15
    x-pattern-key: Operation.summary|length
  operation-description-present:
    description: 'Operation declares description (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace]
    then:
      field: description
      function: defined
    x-pattern-key: Operation.description|present
  operation-description-min-length:
    description: 'Operation.description runs at least 62 characters (measured: 96% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].description
    then:
      function: length
      functionOptions:
        min: 62
    x-pattern-key: Operation.description|length
  operation-operationid-present:
    description: 'Operation declares operationId (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace]
    then:
      field: operationId
      function: defined
    x-pattern-key: Operation.operationId|present
  operation-operationid-casing-camel:
    description: 'Operation.operationId is camel case (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].operationId
    then:
      function: pattern
      functionOptions:
        match: ^[a-z][a-zA-Z0-9]*$
    x-pattern-key: Operation.operationId|pattern:^[a-z][a-zA-Z0-9]*$
  operation-parameters-present:
    description: 'Operation declares parameters (measured: 88% of this contract)'
    severity: info
    given: $.paths[*][get,put,post,delete,patch,options,head,trace]
    then:
      field: parameters
      function: defined
    x-pattern-key: Operation.parameters|present
  operation-responses-present:
    description: 'Operation declares responses (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace]
    then:
      field: responses
      function: defined
    x-pattern-key: Operation.responses|present
  parameter-name-present:
    description: 'Parameter declares name (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
    then:
      field: name
      function: defined
    x-pattern-key: Parameter.name|present
  parameter-name-casing-camel:
    description: 'Parameter.name is camel case (measured: 97% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].name
    then:
      function: pattern
      functionOptions:
        match: ^[a-z][a-zA-Z0-9]*$
    x-pattern-key: Parameter.name|pattern:^[a-z][a-zA-Z0-9]*$
  parameter-in-present:
    description: 'Parameter declares in (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
    then:
      field: in
      function: defined
    x-pattern-key: Parameter.in|present
  parameter-in-values:
    description: 'Parameter.in is one of path, query (measured: 97% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].in
    then:
      function: enumeration
      functionOptions:
        values:
        - path
        - query
    x-pattern-key: Parameter.in|enum:path,query
  parameter-description-present:
    description: 'Parameter declares description (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
    then:
      field: description
      function: defined
    x-pattern-key: Parameter.description|present
  parameter-description-min-length:
    description: 'Parameter.description runs at least 19 characters (measured: 97% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].description
    then:
      function: length
      functionOptions:
        min: 19
    x-pattern-key: Parameter.description|length
  parameter-required-present:
    description: 'Parameter declares required (measured: 97% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
    then:
      field: required
      function: defined
    x-pattern-key: Parameter.required|present
  parameter-style-values:
    description: 'Parameter.style is one of form (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*].style
    then:
      function: enumeration
      functionOptions:
        values:
        - form
    x-pattern-key: Parameter.style|enum:form
  parameter-schema-present:
    description: 'Parameter declares schema (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
    then:
      field: schema
      function: defined
    x-pattern-key: Parameter.schema|present
  parameter-example-present:
    description: 'Parameter declares example (measured: 89% of this contract)'
    severity: info
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].parameters[*]
    then:
      field: example
      function: defined
    x-pattern-key: Parameter.example|present
  mediatype-schema-present:
    description: 'MediaType declares schema (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].responses[*].content[*]
    then:
      field: schema
      function: defined
    x-pattern-key: MediaType.schema|present
  response-description-present:
    description: 'Response declares description (measured: 100% of this contract)'
    severity: error
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].responses[*]
    then:
      field: description
      function: defined
    x-pattern-key: Response.description|present
  response-description-min-length:
    description: 'Response.description runs at least 20 characters (measured: 97% of this contract)'
    severity: warn
    given: $.paths[*][get,put,post,delete,patch,options,head,trace].responses[*].description
    then:
      function: length
      functionOptions:
        min: 20
    x-pattern-key: Response.description|length
  schema-type-present:
    description: 'Schema declares type (measured: 93% of this contract)'
    severity: warn
    given: $.components.schemas[*]
    then:
      field: type
      function: defined
    x-pattern-key: Schema.type|present
  schema-type-values:
    description: 'Schema.type is one of object, string (measured: 98% of this contract)'
    severity: warn
    given: $.components.schemas[*].type
    then:
      function: enumeration
      functionOptions:
        values:
        - object
        - string
    x-pattern-key: Schema.type|enum:object,string
  schema-description-min-length:
    description: 'Schema.description runs at least 22 characters (measured: 100% of this contract)'
    severity: error
    given: $.components.schemas[*].description
    then:
      function: length
      functionOptions:
        min: 22
    x-pattern-key: Schema.description|length
  securityscheme-type-present:
    description: 'SecurityScheme declares type (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*]
    then:
      field: type
      function: defined
    x-pattern-key: SecurityScheme.type|present
  securityscheme-type-values:
    description: 'SecurityScheme.type is one of apiKey (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*].type
    then:
      function: enumeration
      functionOptions:
        values:
        - apiKey
    x-pattern-key: SecurityScheme.type|enum:apiKey
  securityscheme-description-present:
    description: 'SecurityScheme declares description (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*]
    then:
      field: description
      function: defined
    x-pattern-key: SecurityScheme.description|present
  securityscheme-name-present:
    description: 'SecurityScheme declares name (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*]
    then:
      field: name
      function: defined
    x-pattern-key: SecurityScheme.name|present
  securityscheme-name-casing-snake:
    description: 'SecurityScheme.name is snake case (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*].name
    then:
      function: pattern
      functionOptions:
        match: ^[a-z0-9]+(_[a-z0-9]+)*$
    x-pattern-key: SecurityScheme.name|pattern:^[a-z0-9]+(_[a-z0-9]+)*$
  securityscheme-in-present:
    description: 'SecurityScheme declares in (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*]
    then:
      field: in
      function: defined
    x-pattern-key: SecurityScheme.in|present
  securityscheme-in-values:
    description: 'SecurityScheme.in is one of header (measured: 100% of this contract)'
    severity: error
    given: $.components.securitySchemes[*].in
    then:
      function: enumeration
      functionOptions:
        values:
        - header
    x-pattern-key: SecurityScheme.in|enum:header

Work with this as data

Every ruleset here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for spectral rules

4 MCP tools reach this
  • find_rulesBrowse and filter every ruleset in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This ruleset 
curl "https://apis.io/api/v1/rules/caplight-rules"
All spectral rules 
curl "https://apis.io/api/v1/rules?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.