CodeRifts vs oasdiff

CodeRifts provides authorization and governance for contract changes made by AI agents and API teams. Its diff engine checks OpenAPI 3.0 and 3.1 specifications for endpoint removals, newly required fields, response-type changes, enum restrictions, authentication changes, and parameter edits. It discovers matching.yaml,.yml, and.json files in repositories. Security analysis flags weakened authentication, and schema scans identify new or changed fields such as SSNs, credit-card numbers, and passports with GDPR/CCPA warnings. YAML rules in.coderifts.yml can block merges over limits, deprecation, or authentication requirements. Integrations include GitHub App, GitHub Actions, GitLab CI, Bitbucket Pipelines, REST API, CLI, and an MCP server with three tools. Specifications are processed in memory and discarded; derived verdicts and metadata remain. Plans are Free at free, Team at $149 a month, and Enterprise at $1,500 a month.

oasdiff compares OpenAPI specifications, produces changelogs, and identifies breaking changes before release. It supports OpenAPI 3.0, 3.1, and 3.2, and detects 755 distinct breaking and non-breaking API changes. The CLI is available through Homebrew, a shell installer, Docker, and pre-built Linux, macOS, and Windows binaries. Output formats include text, JSON, YAML, HTML, Markdown, and GitHub Actions annotations. Its GitHub Action compares pull-request and base-branch specifications, adding inline annotations for breaking changes. A browser diff tool compares OpenAPI or Swagger specifications without installation or sign-up. Specs and changelogs are encrypted client-side before upload, and servers retain ciphertext they cannot read. The open-source engine, CLI, and GitHub Action use the Apache 2.0 license. A free plan includes CLI diffing, changelogs, GitHub Action annotations, side-by-side review, and encrypted spec storage. Pro costs $100/month and adds approval workflow, audit trail, merge gate, and up to five reviewers across five repositories. Free review links expire after seven days; Enterprise can load specs from GitHub without uploading or storing them.