Deprecated — 2026-10-28. OpenAPI Guard is no longer maintained. No further releases, fixes, or support are planned for the VS Code extension, IntelliJ plugin, CLI, or MCP adapter. Existing artifacts and documentation are retained for reference; their licensing is unchanged.
To stop using OpenAPI Guard, uninstall the editor plugin or extension, remove its
CI steps and MCP server configuration, and uninstall @stackblender/openapi-guard
if installed. Keep the OpenAPI specifications your applications need.
The usage documentation below is retained for existing installations.
OpenAPI Guard keeps OpenAPI contracts synchronized with Spring Boot Java/Kotlin, NestJS, Express, and AWS Lambda (API Gateway) implementations, in TypeScript or JavaScript, by reporting endpoint-level drift.
This is the public documentation, examples, feedback, and support repository. It is not the source repository for the separately licensed, proprietary OpenAPI Guard products.
| Product | Status | Documentation | Issues |
|---|---|---|---|
| VS Code extension | Deprecated; retained on Visual Studio Marketplace | VS Code docs | VS Code bug form |
| IntelliJ Platform plugin | Deprecated; retained on JetBrains Marketplace (version 0.4.1) | IntelliJ Platform docs | IntelliJ bug form |
| CLI | Deprecated; version 0.4.1 on npm | CLI docs | CLI/MCP bug form |
| MCP adapter | Deprecated; included in the public npm package | MCP docs | CLI/MCP bug form |
Historical listings: OpenAPI Guard from Visual Studio Marketplace, or OpenAPI Guard for IntelliJ IDEA from JetBrains Marketplace. Product pages and documentation: stackblender.com/openapiguard.
Historical CLI invocation (not recommended for new adoption):
npx --yes @stackblender/openapi-guard@0.4.1 .OpenAPI Guard's endpoint-level analysis detects:
- OpenAPI operations with no supported implementation
- implemented endpoints absent from the OpenAPI contract
- HTTP method mismatches for otherwise matching routes
Routing it cannot read, such as a computed path or a custom router, is reported as an analysis limitation instead of as missing implementations.
Analysis is local-first. OpenAPI Guard does not upload source code, OpenAPI specifications, diagnostics, or repository metadata for analysis. See the privacy overview for details.
- Install and use the VS Code extension
- Review release status
- Try the sanitized Java and Kotlin examples
- Get support
- Report a security concern privately
- Read the contribution guide
- Review the repository license
The MIT License applies only to content in this support repository. OpenAPI Guard products and their source code are separately licensed. StackBlender and OpenAPI Guard names and branding are not granted under this license.