{"uid":"cap_1OJDHnlVEIVDQOidj0YSj","slug":"openapi-request-audit-53a7fc1f","name":"OpenAPI Request Audit","description":"Audit a real request against the OpenAPI document it should satisfy. Matches the operation the way a router would, checks every path, query and header parameter against its declared schema, validates the body against the declared media type, and reports whether the credential the declared security scheme expects is present. You supply the request, so this works against an API nothing external can reach.","url":"https://api.zfinia.com/x402/v1/openapi-parameter-contract-audit?utm_source=zero.xyz","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"request":{"type":"object","required":["method","path"],"properties":{"body":{},"path":{"type":"string","maxLength":2048},"query":{"type":"object"},"method":{"enum":["get","put","post","delete","options","head","patch","trace","GET","PUT","POST","DELETE","OPTIONS","HEAD","PATCH","TRACE"],"type":"string"},"headers":{"type":"object"},"media_type":{"type":"string","maxLength":128}},"additionalProperties":false},"specification":{"type":"object"}}},"responseSchema":null,"example":null,"exampleRequest":null,"tags":["x402"],"displayCostAmount":"0.14","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"probe","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.14/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.14","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.14","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_F2_JONVGL-XoBVQnL52Ym","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.14","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Validates a real HTTP request against its matching OpenAPI operation, checking path/query/header parameters, request body, and security credentials against the declared schema.","exampleAgentPrompt":"Can you audit this POST request to /orders with a JSON body and Bearer token against our OpenAPI spec to check whether the parameters, body, and security credentials all satisfy the contract?","exampleUseCases":[{"title":"Debug failing API request contract","prompt":"I have a POST request going to /api/payments with a JSON body and an Authorization header — can you check it against our OpenAPI spec and tell me exactly which parameters or body fields are failing the contract?"},{"title":"Verify security credentials presence","prompt":"Before I ship this integration, can you audit my GET request to /users/{id} against our OpenAPI document and confirm the API key credential the spec requires is actually present in the request headers?"},{"title":"Pre-flight check on internal API","prompt":"We have an internal API that nothing external can reach — can you validate this PATCH request to /accounts/42/settings, including the query params and request body, against our OpenAPI spec and report any schema violations?"}],"resultDescription":"A structured audit report indicating whether the request matched a declared OpenAPI operation, the result of validating each path, query, and header parameter against its declared schema, whether the request body satisfies the declared media type and schema, and whether the required security credential is present in the request.","failureModes":["No matching operation found for the given method and path — returns a routing failure","Request body does not match declared media type — schema violations reported per field","Missing or malformed security credential — flagged in audit result","Invalid or incomplete OpenAPI specification object supplied — parsing error returned","Path parameters not extractable from supplied path string — parameter audit skipped or errored"],"whenToPreferThis":"Choose this endpoint when you need to validate a real, fully-formed HTTP request — including headers, body, and credentials — against an OpenAPI document, especially for internal or private APIs that cannot be reached externally. It is ideal for pre-flight contract checks, debugging integration failures, or CI pipeline validation where you supply the request and spec directly rather than hitting a live endpoint.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-10-11T12:30:06.690Z","isFirstParty":false,"canonicalSlug":"openapi-request-audit-53a7fc1f"}