Skip to content
SPECIFICTION
Get listed

CodeRifts

coderifts.com

From $149/mo Free plan WebAPI
Visit coderifts.com
Spec score 8.3 #8 of 25 in API Governance Software

What it is

CodeRifts provides authorization and governance for contract changes made by AI agents and API teams. Its diff engine checks OpenAPI 3.0 and 3.1 specifications for endpoint removals, newly required fields, response-type changes, enum restrictions, authentication changes, and parameter edits. It discovers matching.yaml,.yml, and.json files in repositories. Security analysis flags weakened authentication, and schema scans identify new or changed fields such as SSNs, credit-card numbers, and passports with GDPR/CCPA warnings. YAML rules in.coderifts.yml can block merges over limits, deprecation, or authentication requirements. Integrations include GitHub App, GitHub Actions, GitLab CI, Bitbucket Pipelines, REST API, CLI, and an MCP server with three tools. Specifications are processed in memory and discarded; derived verdicts and metadata remain. Plans are Free at free, Team at $149 a month, and Enterprise at $1,500 a month.

Spec sheet

Purpose
CodeRifts provides contract-change authorization and governance for AI agents and API teams.Read 30 Sep 2026 · coderifts.com
Compliance
The Trust Center states GDPR handling practices and says no SOC 2 report or third-party assessment is published.Read 30 Sep 2026 · coderifts.com
Support
Support is provided at [email protected], with no promised response time during public beta.Read 30 Sep 2026 · coderifts.com
API limits
The API documentation states a limit of 100 authenticated requests per API key per minute and 30 anonymous non-agent requests per IP per minute.Read 30 Sep 2026 · app.coderifts.com
Breaking detection
Its core diff engine detects breaking changes in OpenAPI 3.0 and 3.1 schemas, including endpoint removals, required-field additions, response-type changes, enum restrictions, authentication changes and parameter modifications.Read 30 Sep 2026 · coderifts.com
CI integrations
Documented integrations include GitHub App, GitHub Actions, GitLab CI, Bitbucket Pipelines, REST API and CLI.Read 30 Sep 2026 · coderifts.com
CLI support
The CLI command npx coderifts diff works anywhere Node.js runs.Read 30 Sep 2026 · coderifts.com
Data handling
CodeRifts processes API specifications in memory, discards them after analysis and persists derived verdicts and metadata rather than schema bodies or source code.Read 30 Sep 2026 · coderifts.com
GitHub permissions
The GitHub App requests pull-request read/write, contents read, checks write and metadata read permissions.Read 30 Sep 2026 · coderifts.com
MCP
The MCP server exposes three tools: preflight_change_set, verify_receipt and get_decision_details.Read 30 Sep 2026 · coderifts.com
PII detection
It scans new or modified schemas for fields such as SSNs, credit-card numbers and passports and flags them with GDPR/CCPA warnings.Read 30 Sep 2026 · coderifts.com
Policy controls
The policy engine evaluates YAML rules in .coderifts.yml and can block merges that violate limits, deprecation requirements or authentication requirements.Read 30 Sep 2026 · coderifts.com
Security analysis
It detects authentication downgrades such as OAuth2 changes to API keys, removed bearer tokens and weakened security schemes.Read 30 Sep 2026 · coderifts.com
Service level
CodeRifts has no formal SLA yet and targets 99.9% uptime.Read 30 Sep 2026 · coderifts.com
Spec discovery
CodeRifts automatically finds OpenAPI specifications in .yaml, .yml and .json files matching its repository patterns.Read 30 Sep 2026 · coderifts.com

Plans and prices

Free Free public provider-verifiable boundary · 1,000 authorization cases/month · verification always free Read 30 Sep 2026 · coderifts.com
Team $149 a month free during beta private production boundary · 10,000 authorization cases/month · $15 per 1,000 overage, prorated Read 30 Sep 2026 · coderifts.com
Enterprise $1,500 a month per month private bespoke boundary · volume-commitment authorization cases · discounted overage · unlimited users, agents and repositories Read 30 Sep 2026 · coderifts.com

Every CodeRifts plan and price →

Strong points and limits

Strong points

  • OpenAPI 3.0 and 3.1 breaking-change checks
  • Policy rules can block merges
  • GitHub, GitLab, Bitbucket, API, and CLI integrations
  • PII and authentication analysis
  • Free plan includes 1,000 cases/month

Limits

  • No formal SLA yet
  • API request limits apply
  • No SOC 2 report or third-party assessment published
  • Team plan billed free only during beta

Who it suits

CodeRifts suits API teams and organizations governing AI-agent contract changes in CI/CD workflows. It is relevant where OpenAPI validation, policy enforcement, security checks, and lifecycle controls are required.

Verdict

CodeRifts combines schema diffing, policy enforcement, security analysis, and CI integrations for governed API changes. Its plans and request limits are explicit, while formal service-level commitments are not yet available.

Where Specifiction places it

Alternatives to CodeRiftsAll alternatives →