# Api-oas-checker: validate your OpenAPI spec now!

**URL:** <https://forum.italia.it/t/api-oas-checker-validate-your-openapi-spec-now/16502>\
**Category:** Interoperabilità\
**Created:** [11 Settembre 2020, 9:05am UTC](https://forum.italia.it/t/api-oas-checker-validate-your-openapi-spec-now/16502 "2020-09-11T09:05:33Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Roberto\_Polli](https://forum.italia.it/user_avatar/forum.italia.it/roberto_polli/32/1127_2.png) [@Roberto\_Polli](https://forum.italia.it/u/Roberto_Polli)\
**Post date:** [11 Settembre 2020, 9:05am UTC](https://forum.italia.it/t/api-oas-checker-validate-your-openapi-spec-now/16502/1 "2020-09-11T09:05:33Z")

</div>

To improve API interoperability between more than 10’000 Italian agencies, we are working on a [validator tool for OpenAPI 3+ (aka OAS) specifications](https://italia.github.io/api-oas-checker).

The [repository](https://github.com/italia/api-oas-checker) contains the source for the in-browser validator that verifies _some of the Interoperability Framework (Modello di Interoperabilità) rules_ for REST APIs.

Provided [rules](https://italia.github.io/api-oas-checker/spectral.yml) are not specific to the public sector, and can help private companies to produce quality APIs.

We are now working to cover more and more sections of the Interoperability Rules:

- [https://github.com/italia/api-oas-checker/tree/master/rules](https://github.com/italia/api-oas-checker/tree/master/rules)

and add some Security Checks too.

Remember that the checker **is not a certification tool** , but _helps_ your organization to increase the quality of your APIs and quickly fix the major issues in your specs, such as:

- missing OpenAPI3+ properties or headers;
- bad or unused schemas or inconsistent examples;
- use of the unencrypted “http” protocol;
- design pitfalls, like using the old Swagger 2 specifications, or general-purpose media-types together with the PATCH method.

To help the integration in your CI, we are working to a github action based on the spectral one; you can have a [look at the preview here](https://github.com/teamdigitale/api-oas-checker-action)

The validator is based on the opensource project [Spectral](https://github.com/stoplightio/spectral), which we preferred over other good validators:

- [Zally](https://github.com/zalando/zally) - Spectral can be web-packed and run in your (browser) without using a database;
- [openapi-cli](https://github.com/Redocly/openapi-cli) - because while slower, Spectral allows to describe rules YAML files, while openapi-cli rules are [written in javascript](https://github.com/Redocly/openapi-cli/tree/master/src/rules)

Moreover Spectral is the default OAS validator in the [github super-linter](https://github.com/github/super-linter) thus you can easily add it to your current Continuous Integration pipeline.

Use it, have your say and contribute to the project!