What's wrong with your API?

Give the doctor a spec, a running endpoint and/or your ASP.NET Core code. You'll get a health score and a prioritised list of inconsistencies, errors, documentation gaps and security issues, each with a fix.

OpenAPI / Swagger spec

JSON or YAML, OpenAPI 3.x or Swagger 2.0

Drop openapi.json / swagger.yaml here or click to browse

The server downloads it. Swashbuckle's default is /swagger/v1/swagger.json.

Live probe

Calls the real API and checks it against the spec

Base URL

Auth header Value

Parameter values (name=value, comma separated)

Timeout (s) Slow threshold (ms)

Accept invalid TLS certificates (local dev certs only)

Only GET requests are sent; nothing is created, changed or deleted.

ASP.NET Core source

Controllers and minimal APIs, analysed with Roslyn

Drop .cs files or a zipped project (bin/obj are skipped) …or paste code

Options

Ignore rules (IDs, comma separated) Minimum severity

Any combination of the three inputs works.