|
| 1 | +# Choreo Architect Agent (API Compliance) |
| 2 | + |
| 3 | +## Overview |
| 4 | + |
| 5 | +The **Choreo Architect Agent** is an AI-powered assistant that evaluates your APIs against industry standards and guidelines provided by the user. It acts as an **AI consultant for API design and compliance**, providing deep insights into API structure, design conventions, and security best practices. |
| 6 | + |
| 7 | +When triggered, the Architect Agent automatically analyzes all published API specifications in your project and generates structured output with compliance scores, rule violations, and improvement suggestions. |
| 8 | + |
| 9 | +It helps ensure **consistency, security, and quality** in every API that your teams build on Choreo. |
| 10 | + |
| 11 | +> **Note:** |
| 12 | +> This feature has been verified to work optimally with the **GPT-4.1** model, which delivers the most accurate and detailed API design analyses. |
| 13 | +> The Architect Agent has a limit of **3 successful analyses per organization, per month**. |
| 14 | +> Please note that AI can make mistakes. Always review the recommendations carefully before implementing changes. |
| 15 | +> To run unlimited analyses and achieve the highest-quality results, configure your LLM credentials (see [Step 3: Add Your LLM Model Configuration](#step-3-optional-add-your-llm-model-configuration)). |
| 16 | +
|
| 17 | +--- |
| 18 | + |
| 19 | +## Setup and Configuration |
| 20 | + |
| 21 | +### Step 1: Access the Architect Agent |
| 22 | + |
| 23 | +You can access the Architect Agent under your project’s **Insights → Compliance** section in the Choreo Console. |
| 24 | + |
| 25 | +### Step 2: Trigger an Analysis |
| 26 | + |
| 27 | +To start a compliance check: |
| 28 | + |
| 29 | +1. Navigate to **Insights → Compliance**. |
| 30 | +2. Click **Trigger Analysis**. |
| 31 | +3. The Architect Agent will automatically fetch your organization’s APIs and analyze their OpenAPI specifications. |
| 32 | + |
| 33 | +Once complete, console will display compliance results at the Project, and Component levels. |
| 34 | + |
| 35 | +### Step 3 (Optional): Add Your LLM Model Configuration |
| 36 | + |
| 37 | +If you want to run more analyses without monthly limits, connect your own LLM credentials: |
| 38 | + |
| 39 | +1. Go to **Settings → Credentials → AI Configuration**. |
| 40 | +2. Choose your provider (**OpenAI** or **Azure OpenAI**). |
| 41 | +3. Set it as the **default AI model** for all analyses. |
| 42 | +4. Enter your API key and save. |
| 43 | + |
| 44 | +--- |
| 45 | + |
| 46 | +## Compliance Reports |
| 47 | + |
| 48 | +The Architect Agent generates comprehensive compliance reports at multiple levels to help teams understand their API design adherence: |
| 49 | + |
| 50 | +### Project-Level Analysis |
| 51 | + |
| 52 | +At the **project level**, the Architect Agent generates a summarized compliance report for all APIs defined within the project. This report provides an aggregated view of design and security compliance across your APIs and highlights areas that need improvement. |
| 53 | + |
| 54 | +The project-level report includes: |
| 55 | + |
| 56 | +- **Overall Project Compliance Rating** – The compliance rating from all APIs in the project, representing their adherence to the defined guidelines. Ratings range from Excellent, Good, Fair, Poor, to Very Poor. |
| 57 | +- **Project Analysis Summary** - A summary of the key findings from the project-level analysis. |
| 58 | +- **Area Analysis** – A breakdown of the most common areas, including guideline categories with both compliant and violated rules (e.g., Status codes, Pagination, Error responses). |
| 59 | +- **Individual API Scores** – A list of APIs and their respective analysis, allowing you to identify which APIs require the most attention. |
| 60 | + |
| 61 | +This report helps teams quickly understand how well their APIs align with organizational design standards and where corrective action is required. |
| 62 | + |
| 63 | +### Component-Level Analysis |
| 64 | + |
| 65 | +At the **component level**, the Architect Agent provides a detailed compliance report for each individual API. This report represents the most granular level of analysis and includes all findings and recommendations for that specific API. |
| 66 | + |
| 67 | +The component-level report includes: |
| 68 | + |
| 69 | +- **Overall API Compliance Rating** – Indicates how well the API adheres to the defined design and security guidelines. Ratings range from Excellent, Good, Fair, Poor, to Very Poor. |
| 70 | +- **Guideline Category Breakdown** – Compliance categories such as *Security*, *Conventions*, *Best Practices*, and *Warnings*. |
| 71 | + - **Detailed Violations** - Descriptions of violated guidelines, the nature of each issue, and AI-generated suggestions or practical examples for improvement. |
| 72 | + - **Compliant categories** – Sections where the API meets the expected standards, demonstrating adherence to best practices and design conventions. |
| 73 | + |
| 74 | +The Architect Agent always displays the **most recent report**, ensuring that teams act on up-to-date findings and recommendations. |
| 75 | + |
| 76 | +--- |
| 77 | + |
| 78 | +## Conclusion |
| 79 | + |
| 80 | +The **Choreo Architect Agent** empowers your teams to deliver **consistent, secure, and well-designed APIs** across your organization. |
| 81 | +With real-time AI-driven compliance checks, semantic recommendations, and multi-level dashboards, you can: |
| 82 | + |
| 83 | +- Detect design and security violations. |
| 84 | +- Standardize API design practices across teams. |
| 85 | +- Continuously improve API quality through measurable scores. |
| 86 | +- Integrate guideline compliance into your development lifecycle. |
| 87 | + |
| 88 | +--- |
| 89 | + |
0 commit comments