OpenAPI Editing with API Quality, Conformance and Security Testing

Rich support for the OpenAPI Specification (OAS) / Swagger specification making it quicker and easier to create, edit and navigate your OpenAPI definitions.

Also check the quality, conformance and security of your APIs from inside Visual Studio, with the 42Crunch API security testing tools - API Security Audit and API Scan.

OpenAPI Editing

The extension provides first-class support for authoring OpenAPI definitions directly in Visual Studio:

• Edit OpenAPI files in JSON or YAML - work with your API definitions in either format, using the editor you already know.
• Schema validation - your definition is continuously checked against the OpenAPI schema, so mistakes and inconsistencies are highlighted as you type.
• Outline navigation - a dedicated outline gives you a structured view of paths, operations, components and other elements, making it easy to jump around even in large definitions.

API Security Audit

Check the quality, conformance and security of your API definition without needing a running API. 42Crunch Audit performs a static analysis of your OpenAPI file, running hundreds of checks on best practices and potential vulnerabilities related to authentication, authorization and data constraints, and reports the issues found along with guidance on how to fix them.

API Scan

Test a running API for conformance to its OpenAPI definition and for security vulnerabilities. 42Crunch Scan generates security tests from your definition - injecting bad payloads, bad tokens and invalid HTTP verbs and paths - to surface vulnerabilities early, and validates that the API's responses match what the contract promises.

You must only use 42Crunch Scan against APIs that you own, not those of third parties.

Support and Documentation

For tips, tutorials and videos, visit https://42crunch.com/tutorials/

Feedback

Your bug reports and reviews mean the world to us - please share them with us so we can keep improving the extension.