api-contract-keeper

A development add-on that keeps API code aligned with its written OpenAPI or GraphQL specification. It also checks endpoint behavior and background-job reliability.

In plain words
What is it for?
Use it to compare API implementations with their specifications, validate requests, standardize error responses, support safe retries, detect breaking changes, and review job-queue reliability.
Why use it?
It helps prevent code and documentation from drifting apart, which can cause client errors and unexpected API changes. It also highlights common reliability and error-handling gaps.

Plugin for Claude Code

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Claude Code
/plugin marketplace add sigistry/marketplace
agentmods
npx agentmods add plugins/sigistry/marketplace/api-contract-keeper
Clone the repo
git clone --depth 1 https://github.com/sigistry/marketplace

Made for: Claude Code.

Per session not measured What this adds to a session before it is invoked.
When invoked not measured Not applicable: nothing here is loaded into a session.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Security

Grade A, and why

api-contract-keeper scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/api-contract-keeper/.claude-plugin/plugin.json · 11 lines

What it actually says

{
  "name": "api-contract-keeper",
  "version": "1.0.0",
  "description": "Keeps your API and its spec in sync: detects and fixes OpenAPI/GraphQL spec-vs-code drift, hardens endpoints with request validation, RFC 9457 error envelopes and idempotency, guards against breaking changes, and audits job-queue reliability.",
  "author": {
    "name": "Sigistry API Contract Keeper",
    "url": "https://github.com/Sigistry/marketplace/tree/main/plugins/api-contract-keeper"
  },
  "license": "MIT"
}
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 11 lines scan A 65e7086ffcf9

Subscribe to this mod's changes

api-contract-keeper is a plugin published in the GitHub repository sigistry/marketplace (3 stars, last pushed 3d ago), licensed MIT. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other plugins, from other repositories

netresearch-claude-code-marketplace

Curated Agentic Skills for AI coding agents — TYPO3, PHP, Go, Docker, Jira, security, and more. Platform-agnostic skills following the open Agent Skills specification.

netresearch/claude-code-marketplace · not measured

overheid-plugins marketplace

Plugin marketplace listing 7 plugins: standaarden, zad-actions, developer-overheid, nerds, internet.

developer-overheid-nl/skills-marketplace · not measured

handbook-agent-spec-kit

Spec-driven development workflow system with structured phases: Requirements → Design → Tasks → Implementation.

NikiforovAll/claude-code-rules · not measured

handbook-qa

Browser automation and QA testing tools with Playwright MCP integration.

NikiforovAll/claude-code-rules · not measured

claude-ops

Claude Code operations toolkit. Twelve skills: audit-skill-visibility (audit whether each installed skill is actually VISIBLE to the model, and diagnose why most of a fleet never gets used — a skill is invisible when its description is dropped by Claude Code's skill-listing context budget, which sheds descriptions…

melodic-software/claude-code-plugins · not measured

computer-use

Operating knowledge for Claude Code's built-in computer-use MCP server — the desktop screen-control surface. /computer-use:diagnose resolves a symptom to a cause instead of retrying: why every screenshot is downscaled to a fixed pixel budget and why zoom (not a bigger display) is the way back to detail, how to read a.

melodic-software/claude-code-plugins · not measured