CodeRifts vs Grapity

CodeRifts provides authorization and governance for contract changes made by AI agents and API teams. Its diff engine checks OpenAPI 3.0 and 3.1 specifications for endpoint removals, newly required fields, response-type changes, enum restrictions, authentication changes, and parameter edits. It discovers matching.yaml,.yml, and.json files in repositories. Security analysis flags weakened authentication, and schema scans identify new or changed fields such as SSNs, credit-card numbers, and passports with GDPR/CCPA warnings. YAML rules in.coderifts.yml can block merges over limits, deprecation, or authentication requirements. Integrations include GitHub App, GitHub Actions, GitLab CI, Bitbucket Pipelines, REST API, CLI, and an MCP server with three tools. Specifications are processed in memory and discarded; derived verdicts and metadata remain. Plans are Free at free, Team at $149 a month, and Enterprise at $1,500 a month.

Grapity is an open-source API governance platform for teams coordinating API contracts and their consumers. Its Registry compares each pushed specification with the previous version and blocks breaking changes with an explanation. It enforces semantic version increments and tracks deprecation lifecycles, including consumers and sunset dates. The Hub offers a searchable API list, endpoint exploration, side-by-side version comparisons, and a version timeline. Grapity governs OpenAPI and AsyncAPI formats, with CI/CD integration and role-based access control. For Kong, Grapity Gateway generates configuration from registered specifications, and the CLI provisions it through decK; Kong can also send access logs to the Registry using its http-log plugin for queries and traffic statistics. The project says it is licensed under Apache 2.0 and has no features locked behind paywalls. Self-hosted use costs nothing, billed forever, with unlimited APIs and team members. Cloud costs $29.95 a month and includes five APIs and five users.