API Onboarding Agent

Generate a typed API client, starter tests, documentation, and a security report from an OpenAPI spec — locally, inside VS Code. Your spec never leaves your machine: no network calls, no sign-up, no telemetry, no secrets stored.

From Anand Tech Inc — the team behind self-serve API onboarding for 120+ APIs, cutting implementation time from weeks to 20 minutes–1 day.

Website: https://anandtechinc.com

Full documentation: see [DOCUMENTATION.md]or detailed usage, authentication handling, the security scoring rubric, YAML notes, troubleshooting, FAQ, and the roadmap.

What you get

For one OpenAPI spec, the extension writes into the output folder you choose:

• A typed client SDK, one method per operation, in the language you pick
• Starter tests for the generated client
• A README with curl examples per endpoint and a usage example
• INVENTORY.md — every endpoint, method, path, and summary in one place
• SECURITY.md — a 0–100 security & readiness score, FAIL/WARN findings, and a go-live checklist

A summary is shown in VS Code with the endpoint count, security score, and files written, and in the API Onboarding Agent output channel.

Install

From the VS Code Marketplace

Open VS Code → Extensions → search API Onboarding Agent → install the extension from AnandTechInc → reload if prompted.

From a .vsix file

vsce package --allow-missing-repository
code --install-extension api-onboarding-agent-0.1.0.vsix

Or in VS Code: Extensions → ... → Install from VSIX → select the .vsix file → reload.

If code is not found on macOS, run in VS Code: Cmd+Shift+P → Shell Command: Install 'code' command in PATH, then open a new terminal.

From source

1. Open this folder in VS Code.
2. Press F5. A new Extension Development Host window opens with the extension loaded.
3. Use the command in that window as described below.

Requires VS Code 1.85.0 or newer. No other runtime is required to run the extension itself.

Use

1. Right-click an openapi.json / openapi.yaml / openapi.yml file in Explorer, or open the Command Palette (Ctrl+Shift+P / Cmd+Shift+P) and run Anand Tech: Generate API Client.
2. If you did not right-click a spec, you will be prompted to pick one.
3. Pick an SDK language.
4. Pick an output folder.

Try it with the included sample-payments.json: 7 endpoints, bearer auth, HTTPS server, security score 100/100.

Languages

Security & readiness report

Every generation produces SECURITY.md with a 0–100 score and FAIL/WARN checks for:

• Non-HTTPS server URL
• Missing authentication scheme
• Undocumented endpoints (no summary/description)
• Missing error responses (no 4xx/5xx documented)
• Deprecated operations

Plus a go-live checklist in the same file. See DOCUMENTATION.md for the full rubric and what a score does — and does not — mean.

Privacy

Local only. No network calls, no telemetry, no account, no secrets stored. Tokens and API keys are never read, stored, or sent by the extension — you supply them to the generated client at runtime, in your own code.

Limitations (honest)

• JSON is the fully supported path. YAML is parsed with a built-in subset parser; complex YAML may need conversion to JSON — see DOCUMENTATION.md.
• Basic auth in the Node.js client is not wired to environment variables in v0.1.0 (bearer and API-key header auth are).
• OAuth2 is treated as a bearer-token scheme: you supply the token, no OAuth flow is run.
• Generated Java code is a client, not a full Spring Boot server application (no @RestController scaffold, no pom.xml/build.gradle in v0.1.0) — add it to your existing Spring Boot project.
• Tests are starter tests, not full mocked integration tests.
• One spec at a time in v0.1.0; no batch/portfolio mode yet.

Need the whole portfolio done, not one API?

The extension is free and local. For a whole API portfolio — onboarding, updates, security reviews, and maintenance — talk to Anand Tech Inc:

• Done-for-you per-API packages: CAD $499–$999
• Operated portfolio retainer: CAD $3,000–$5,000/month

https://anandtechinc.com

Changelog

See [CHANGELOG.md]. Current version: 0.1.0.

License

MIT — see [LICENSE.txt]. Copyright (c) 2026 Anand Tech Inc.