An OpenAPI file can parse cleanly and still leave the next developer guessing. A reference points to a component that moved. A path parameter exists in the URL but not in the operation. Two operations share one ID. Responses or authentication rules go missing.
IndieOpenAPI checks one JSON or YAML document against the published OpenAPI schemas. It then checks references, operation documentation and IDs, response coverage, examples, and declared security. Every finding points to a document path. The result links back to the OpenAPI Specification that defines the structure.
Paste a document or drop a file and the check runs in your browser. The file does not leave the page. Enter a public URL and the Worker fetches it, follows a small number of redirects, and checks a capped set of external references. Private and reserved network destinations are blocked.
The answer describes the file, not the running API. IndieOpenAPI does not send test requests to your servers, prove that authentication works, or verify response bodies in production. It also has no account, card, premium plan, analytics, or public record of what anyone checked.