Methodology
Live OpenAPI verification
ia.openapi-live · 4.19
Act
SHOULD
Measured study
AR-ACT-02
Why it matters
A machine-readable API description is more useful when one demonstrably safe operation also behaves as documented.
How to fix it
Make sure that one safe GET operation in the OpenAPI document works as documented.
-
Document at least one GET operation that needs no auth, for example a health or a search endpoint.
-
Make sure that the response matches the documented status and schema.
Verify
curl -sf https://{domain}/openapi.json | jq -r '.paths | keys[]'
Expected: A list of paths. Call one documented GET path with curl to check it.
Run a new scan for this checkpoint:
isagentready results {domain} --checkpoint ia.openapi-live
Details Mapping, lifecycle and references
- AR mapping
- Full match
- Evidence source
- agentready.org AR-ACT-02
- Score role
- Core
- Introduced
- 2026-08-24
- Methodology version
- 2026-10-22