{ "x402Version": 2, "id": 34029, "slug": "34029", "resource": "https://api.zfinia.com/x402/v1/openapi-parameter-contract-audit", "description": "Audit a real request against the OpenAPI document it should satisfy. Matches the operation the way a router would, checks every path, query and header parameter against its declared schema, validates the body against the declared media type, and reports whether the credential the declared security scheme expects is present. You supply the request, so this works against an API nothing external can reach.", "type": "http", "serviceName": "OpenAPI Request Audit", "resourceType": "Security", "accepts": [ { "scheme": "exact", "network": "eip155:8453", "payTo": "0x25e8245f07d5e4873987293dad666afbe56a9608", "asset": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "amount": "140000", "amountUsd": 0.14, "maxTimeoutSeconds": 60 } ], "outputSchema": { "properties": { "example": { "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" }, "extensions": { "bazaar": { "info": { "input": { "body": { "request": { "headers": { "X-Api-Key": "redacted" }, "method": "GET", "path": "/orders", "query": { "page": "first" } }, "specification": { "components": { "schemas": { "Order": { "properties": { "id": { "type": "string" }, "status": { "enum": [ "open", "shipped", "disputed" ], "type": "string" }, "tenant_id": { "type": "string" }, "total": { "type": "number" } }, "required": [ "id", "total", "tenant_id" ], "type": "object" } }, "securitySchemes": { "apiKey": { "in": "query", "name": "api_key", "type": "apiKey" } } }, "info": { "title": "Orders API", "version": "2.0.0" }, "openapi": "3.1.0", "paths": { "/orders": { "get": { "operationId": "listOrdersV2", "parameters": [ { "in": "query", "name": "tenant", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "items": { "$ref": "#/components/schemas/Order" }, "type": "array" } } }, "description": "A page of orders" } }, "summary": "List orders" }, "parameters": [ { "in": "query", "name": "page", "schema": { "minimum": 1, "type": "integer" } } ], "post": { "operationId": "createOrder", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Order" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Order" } } }, "description": "Created" } }, "summary": "Create an order" } }, "/orders/{id}": { "get": { "deprecated": true, "operationId": "getOrder", "parameters": [ { "in": "path", "name": "id", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Order" } } }, "description": "The order" }, "404": { "description": "Not found" } }, "summary": "Fetch one order" } } }, "security": [ { "apiKey": [] } ] } }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "assumptions": [ "A literal path segment is preferred over a template, as a router would, so /pets/mine is audited against its own operation rather than /pets/{id}.", "Path, query and header values arrive as text, so a value declared as an integer is checked against its text form rather than rejected for being a string.", "Header names are compared case-insensitively." ], "checked": { "body": false, "header_parameters": 0, "path_parameters": 0, "query_parameters": 2 }, "complete": true, "conformant": false, "finding_count": 3, "findings": [ { "code": "TYPE_MISMATCH", "detail": "GET /orders: query parameter page Expected integer, found string.", "location": "query", "operation": "GET /orders", "parameter": "page" }, { "code": "REQUIRED_PARAMETER_MISSING", "detail": "GET /orders: required query parameter tenant is absent from the request.", "location": "query", "operation": "GET /orders", "parameter": "tenant" }, { "code": "SECURITY_REQUIREMENT_UNMET", "detail": "GET /orders requires apiKey and the request carries no matching credential.", "operation": "GET /orders" } ], "findings_by_code": { "REQUIRED_PARAMETER_MISSING": 1, "SECURITY_REQUIREMENT_UNMET": 1, "TYPE_MISMATCH": 1 }, "limitations": [ "Conformance of one request against the supplied specification. Whether the specification is correct is not assessed.", "conformant is true only when every declared constraint for the matched operation was evaluated and none failed." ], "limits": { "maxClientOperations": 200, "maxFindings": 500, "maxOperations": 500, "maxRequestBodyBytes": 262144 }, "matched_operation": "GET /orders", "matched_path_template": "/orders", "not_examined": [], "observed_at": "2026-10-02T00:00:00.000Z", "operation_deprecated": false, "operation_id": "listOrdersV2", "path_variables": {}, "request_id": "example-request", "service_id": "openapi_parameter_contract_audit", "service_version": "1.0.0" }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "additionalProperties": false, "properties": { "request": { "additionalProperties": false, "properties": { "body": {}, "headers": { "type": "object" }, "media_type": { "maxLength": 128, "type": "string" }, "method": { "enum": [ "get", "put", "post", "delete", "options", "head", "patch", "trace", "GET", "PUT", "POST", "DELETE", "OPTIONS", "HEAD", "PATCH", "TRACE" ], "type": "string" }, "path": { "maxLength": 2048, "type": "string" }, "query": { "type": "object" } }, "required": [ "method", "path" ], "type": "object" }, "specification": { "type": "object" } }, "required": [ "specification", "request" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } }, "tags": [ "openapi", "request validation", "api contract", "integration testing", "developer tooling", "bazaar" ], "sourceHost": "api.zfinia.com", "lastUpdated": "2026-10-04T07:53:06.104Z", "quality": { "calls30d": 1, "uniquePayers30d": 1, "lastCalledAt": "2026-10-04T07:53:01.867Z" }, "metadata": { "serviceName": "OpenAPI Request Audit", "extensions": { "bazaar": { "info": { "input": { "body": { "request": { "headers": { "X-Api-Key": "redacted" }, "method": "GET", "path": "/orders", "query": { "page": "first" } }, "specification": { "components": { "schemas": { "Order": { "properties": { "id": { "type": "string" }, "status": { "enum": [ "open", "shipped", "disputed" ], "type": "string" }, "tenant_id": { "type": "string" }, "total": { "type": "number" } }, "required": [ "id", "total", "tenant_id" ], "type": "object" } }, "securitySchemes": { "apiKey": { "in": "query", "name": "api_key", "type": "apiKey" } } }, "info": { "title": "Orders API", "version": "2.0.0" }, "openapi": "3.1.0", "paths": { "/orders": { "get": { "operationId": "listOrdersV2", "parameters": [ { "in": "query", "name": "tenant", "required": true, "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "items": { "$ref": "#/components/schemas/Order" }, "type": "array" } } }, "description": "A page of orders" } }, "summary": "List orders" }, "parameters": [ { "in": "query", "name": "page", "schema": { "minimum": 1, "type": "integer" } } ], "post": { "operationId": "createOrder", "requestBody": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Order" } } }, "required": true }, "responses": { "201": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Order" } } }, "description": "Created" } }, "summary": "Create an order" } }, "/orders/{id}": { "get": { "deprecated": true, "operationId": "getOrder", "parameters": [ { "in": "path", "name": "id", "schema": { "type": "string" } } ], "responses": { "200": { "content": { "application/json": { "schema": { "$ref": "#/components/schemas/Order" } } }, "description": "The order" }, "404": { "description": "Not found" } }, "summary": "Fetch one order" } } }, "security": [ { "apiKey": [] } ] } }, "bodyType": "json", "method": "POST", "type": "http" }, "output": { "example": { "assumptions": [ "A literal path segment is preferred over a template, as a router would, so /pets/mine is audited against its own operation rather than /pets/{id}.", "Path, query and header values arrive as text, so a value declared as an integer is checked against its text form rather than rejected for being a string.", "Header names are compared case-insensitively." ], "checked": { "body": false, "header_parameters": 0, "path_parameters": 0, "query_parameters": 2 }, "complete": true, "conformant": false, "finding_count": 3, "findings": [ { "code": "TYPE_MISMATCH", "detail": "GET /orders: query parameter page Expected integer, found string.", "location": "query", "operation": "GET /orders", "parameter": "page" }, { "code": "REQUIRED_PARAMETER_MISSING", "detail": "GET /orders: required query parameter tenant is absent from the request.", "location": "query", "operation": "GET /orders", "parameter": "tenant" }, { "code": "SECURITY_REQUIREMENT_UNMET", "detail": "GET /orders requires apiKey and the request carries no matching credential.", "operation": "GET /orders" } ], "findings_by_code": { "REQUIRED_PARAMETER_MISSING": 1, "SECURITY_REQUIREMENT_UNMET": 1, "TYPE_MISMATCH": 1 }, "limitations": [ "Conformance of one request against the supplied specification. Whether the specification is correct is not assessed.", "conformant is true only when every declared constraint for the matched operation was evaluated and none failed." ], "limits": { "maxClientOperations": 200, "maxFindings": 500, "maxOperations": 500, "maxRequestBodyBytes": 262144 }, "matched_operation": "GET /orders", "matched_path_template": "/orders", "not_examined": [], "observed_at": "2026-10-02T00:00:00.000Z", "operation_deprecated": false, "operation_id": "listOrdersV2", "path_variables": {}, "request_id": "example-request", "service_id": "openapi_parameter_contract_audit", "service_version": "1.0.0" }, "type": "json" } }, "schema": { "$schema": "https://json-schema.org/draft/2020-12/schema", "properties": { "input": { "additionalProperties": false, "properties": { "body": { "additionalProperties": false, "properties": { "request": { "additionalProperties": false, "properties": { "body": {}, "headers": { "type": "object" }, "media_type": { "maxLength": 128, "type": "string" }, "method": { "enum": [ "get", "put", "post", "delete", "options", "head", "patch", "trace", "GET", "PUT", "POST", "DELETE", "OPTIONS", "HEAD", "PATCH", "TRACE" ], "type": "string" }, "path": { "maxLength": 2048, "type": "string" }, "query": { "type": "object" } }, "required": [ "method", "path" ], "type": "object" }, "specification": { "type": "object" } }, "required": [ "specification", "request" ], "type": "object" }, "bodyType": { "enum": [ "json", "form-data", "text" ], "type": "string" }, "method": { "enum": [ "POST" ], "type": "string" }, "type": { "const": "http", "type": "string" } }, "required": [ "type", "method", "bodyType", "body" ], "type": "object" }, "output": { "properties": { "example": { "type": "object" }, "type": { "type": "string" } }, "required": [ "type" ], "type": "object" } }, "required": [ "input" ], "type": "object" } } } }, "liveness": { "reliability": null }, "verified": false, "featured": false, "provider": { "host": "api.zfinia.com", "manifest_name": "api.zfinia.com", "source": "cdp-mirror", "source_manifest_url": "https://api.cdp.coinbase.com/platform/v2/x402/discovery/resources", "submitted_at": "2026-10-14T01:15:01.050Z" }, "exampleResponse": { "assumptions": [ "A literal path segment is preferred over a template, as a router would, so /pets/mine is audited against its own operation rather than /pets/{id}.", "Path, query and header values arrive as text, so a value declared as an integer is checked against its text form rather than rejected for being a string.", "Header names are compared case-insensitively." ], "checked": { "body": false, "header_parameters": 0, "path_parameters": 0, "query_parameters": 2 }, "complete": true, "conformant": false, "finding_count": 3, "findings": [ { "code": "TYPE_MISMATCH", "detail": "GET /orders: query parameter page Expected integer, found string.", "location": "query", "operation": "GET /orders", "parameter": "page" }, { "code": "REQUIRED_PARAMETER_MISSING", "detail": "GET /orders: required query parameter tenant is absent from the request.", "location": "query", "operation": "GET /orders", "parameter": "tenant" }, { "code": "SECURITY_REQUIREMENT_UNMET", "detail": "GET /orders requires apiKey and the request carries no matching credential.", "operation": "GET /orders" } ], "findings_by_code": { "REQUIRED_PARAMETER_MISSING": 1, "SECURITY_REQUIREMENT_UNMET": 1, "TYPE_MISMATCH": 1 }, "limitations": [ "Conformance of one request against the supplied specification. Whether the specification is correct is not assessed.", "conformant is true only when every declared constraint for the matched operation was evaluated and none failed." ], "limits": { "maxClientOperations": 200, "maxFindings": 500, "maxOperations": 500, "maxRequestBodyBytes": 262144 }, "matched_operation": "GET /orders", "matched_path_template": "/orders", "not_examined": [], "observed_at": "2026-10-02T00:00:00.000Z", "operation_deprecated": false, "operation_id": "listOrdersV2", "path_variables": {}, "request_id": "example-request", "service_id": "openapi_parameter_contract_audit", "service_version": "1.0.0" } }