openapi-spec-generator

Provide your route code from Express, FastAPI, Spring Boot, Django REST, or Rails, and endpoints are extracted automatically. Route handlers map to paths, request bodies and query parameters map to schemas, and middleware like authentication maps to security requirements.

OpenAPI 3.x uses components/schemas, servers, and securitySchemes, while Swagger 2.0 uses definitions, host/basePath, and securityDefinitions. The Skill supports both versions and adjusts the skeleton structure based on which one you choose.

Define security schemes under components/securitySchemes: use http bearer for JWT, oauth2 with flows for OAuth 2.0, or apiKey for header keys. Apply security globally at the root and override per-operation for public endpoints with security: [].

Yes, every operation includes standard codes: 400, 401, 403, 404, 409, 422, 429, and 500 where applicable. Common errors like 401 and 500 are defined once in components/responses and referenced with $ref to avoid repetition.

The Skill applies an internal quality checklist covering operationIds, $ref targets, required fields, and tag consistency before delivery. Afterward, it offers to validate against external tools like Spectral or swagger-parser and generate Prism mock servers.