The API Commons — the hub and website (apicommons.org) for open, machine-readable API building blocks, standards, and browser-first tools.

Machine-readable API vocabulary building blocks for the API Commons — shared words and definitions for API operations.

The change log schema for the API Commons — a machine-readable way to publish an API's changelog.

Shared examples for the API Commons building blocks and the APIs.json ecosystem.

Machine-readable API policy building blocks for the API Commons — the business rules behind API governance.

The plans schema for the API Commons — machine-readable API access plans, tiers, and pricing.

A browser-first, ref-resolving design-diff for OpenAPI (and AsyncAPI/Arazzo) — paste an old and a new spec, resolve $ref so reviewers see the real shape, and get a stakeholder-friendly, breaking-flagged change list plus a copyable Markdown summary for the PR.

Sanctioned, owned, expiring API governance exceptions — reconcile a machine-readable waivers file against Spectral output. Browser-first.

Machine-readable API guidance building blocks for the API Commons — the how-to layer that turns governance rules into help.

The API Commons Interface License — apply an open license to your API's interface (its surface, not its implementation).

Forge MCP tools and Agent Skills from your OpenAPI — a browser-first workbench for designing the agent layer of an API

A DX/AX visual layer for any APIs.json — see each REST operation flow to its MCP tool and Agent Skill, with a free/paid coverage scorecard. experience.apicommons.org

Machine-readable API lifecycle building blocks for the API Commons — the stages every API moves through.

The road map schema for the API Commons — a machine-readable way to publish an API's roadmap.

A curated, owned, grounded Spectral ruleset for the API Authorization Profile — lint your OpenAPI and OAuth AS metadata against OAuth 2.1 / FAPI 2.0 at two tiers (normal/high). An API Commons tool.

API Authorization Profile — a jurisdiction-neutral, two-tier, machine-checkable profile for securing APIs with OAuth 2.1 and FAPI 2.0. An API Commons spec.

Consumer-centric API governance: choose what operations/fields your APIs expose to agents; emit a governed Tyk API + MCP surface and a Spectral ruleset (PII/secrets/compliance). Browser-first.

Bind your API governance building blocks — policies, rules, pipelines, and specs — into one navigable graph with a Gaps view. A browser-first API Commons tool at graph.apicommons.org.

Machine-readable team building blocks for the API Commons — the people layer of API operations.

Measure how much of your API description your governance rules actually check — coverage by section, dead rules, per-rule reach. Browser-first.