SpecShield
specshield.io
What it is
SpecShield checks API contracts for changes that could disrupt existing consumers. It compares OpenAPI descriptions and flags removed endpoints, tightened types and newly required fields in pull requests. Its GitHub App posts a diff and compatibility verdict and can block merges when a registered consumer would break. The consumer registry records dependent services for deploy-gate decisions. SpecShield also scores OpenAPI descriptions against OWASP and design rulesets on a 0–100 scale with a letter grade. Connections include a GitHub App and Action, CI CLI, IntelliJ plugin, SARIF output and an MCP server. The free browser diff accepts OpenAPI 3.0 and 3.1 JSON or YAML and says submitted specifications are not persisted. Free costs nothing for one user; Team costs $89 a month or $900/year ($75/mo billed annually).
Spec sheet
- Purpose
- SpecShield compares OpenAPI descriptions to flag changes that could break existing API consumers and reports results as GitHub checks.Read 29 Sep 2026 · specshield.io
- Integrations
- The product offers a GitHub App and Action, CLI for CI systems, IntelliJ plugin, SARIF output, and an MCP server for AI agents.Read 29 Sep 2026 · specshield.io
- Support
- Free includes community support, Team includes priority email support, and Enterprise includes a dedicated SLA.Read 29 Sep 2026 · specshield.io
- Breaking change detection
- It flags removed endpoints, tightened types, and newly required fields on pull requests.Read 29 Sep 2026 · specshield.io
- Consumer registry
- The consumer registry records which services depend on an API so the deploy gate can assess compatibility.Read 29 Sep 2026 · specshield.io
- Free diff privacy
- The free browser diff compares submitted specs in the request and says it does not persist them.Read 29 Sep 2026 · specshield.io
- Free plan limit
- The Free plan is limited to one user and includes seven-day compare history and one GitHub App pull request check.Read 29 Sep 2026 · specshield.io
- GitHub checks
- The GitHub App posts pull request checks with a diff and compatibility verdict, and can block merges when a consumer would break.Read 29 Sep 2026 · specshield.io
- Governance
- It scores OpenAPI descriptions against OWASP and design rulesets on a 0–100 scale with a letter grade.Read 29 Sep 2026 · specshield.io
- Security evidence
- The maker says its audit log records logins, invites, role changes, contract publishes, deploy verdicts, and breaking-change detections in an append-only table, with CSV export.Read 29 Sep 2026 · specshield.io
- Supported specs
- The browser diff accepts OpenAPI specifications in JSON or YAML, including OpenAPI 3.0 and 3.1.Read 29 Sep 2026 · specshield.io
- Team features
- The Team plan includes an enforced can-i-deploy gate, audit trail, bidirectional contract testing, Slack alerts, shared workspace, and RBAC.Read 29 Sep 2026 · specshield.io
- Who it is for
- The maker describes the product for backend, mobile, platform, microservices, and release engineering teams shipping OpenAPI APIs.Read 29 Sep 2026 · specshield.io
Plans and prices
Strong points and limits
Strong points
- Flags breaking contract changes in pull requests
- Consumer registry supports compatibility gates
- OWASP and design-rule scoring
- GitHub, CI, IntelliJ and MCP integrations
- Free browser diff does not persist specs
Limits
- Free plan limited to one user
- Free history lasts seven days
- Free plan includes one GitHub App check
- Enterprise pricing is custom
Who it suits
It is aimed at backend, mobile, platform, microservices and release-engineering teams shipping OpenAPI APIs. Teams needing consumer verification, governance scoring or GitHub merge checks can use its API, extension and web interfaces.
Verdict
SpecShield combines contract-difference detection, dependency records and governance scoring with developer-tool integrations. The free tier is narrow, while Team adds registry, deploy-gate, audit and collaboration features at the listed price.
Where Specifiction places it
- Contract Testing Tools#15 of 227.7