Skip to content

Conversation

@daveshanley
Copy link
Member

wiretap can be configured to enable strict validation that detects undeclared properties, parameters, headers, and cookies. This mode goes beyond standard OpenAPI validation by reporting values that aren’t explicitly documented in the specification, even when additionalProperties: true would normally allow them.

Strict mode is designed for API governance scenarios where you want to ensure that clients only send properties that are explicitly documented in the OpenAPI specification, helping maintain a clean and well-documented API surface.

Even if the JSON Schema for an object has not defined a param as required, or the schema uses additionalProperties strict mode will not care. Anything in the payload that is not explicitly defined in the contact will be flagged as undeclared

When enabled, strict mode detects:

  • Undeclared properties
  • Undeclared query parameters
  • Undeclared request headers
  • Undeclared response headers
  • Undeclared cookies
  • Enabling strict mode

To enable strict mode, use the --strict-mode flag:

https://pb33f.io/wiretap/configuring/#strict-mode

claude forgets we have a workspace sometimes.
strict mode was actling like its in hard validation mode.
@daveshanley daveshanley merged commit e7033dc into main Dec 31, 2025
2 checks passed
@daveshanley daveshanley deleted the v0.5.0 branch December 31, 2025 20:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants