ContractRift: Open-Source Tool Detects Silent API Contract Drift Before It Breaks Production
Silent API changes—such as removed fields, altered response types, or new required parameters—can break production systems even when uptime monitors show no outage. A developer built ContractRift, an open-source tool (AGPL-3.0), to address this gap after encountering repeated real-world failures caused by undocumented provider-side changes. The tool works by sending scheduled, authenticated requests to APIs, learning a structural baseline from early responses, and then flagging deviations such as missing fields or type changes as breaking, warning, or informational. It also tracks specific values like LLM model aliases and MCP tool parameters, deduplicates change alerts by fingerprinting, and can gate deployments on unreviewed breaking drift. ContractRift is self-hostable via Docker and includes a live demo, with the project inviting community feedback on false positives across different APIs.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in