Agent Security

See the API capabilities your agent could inherit.

Speculynx Agent Security is a three-stage static-analysis workflow for declared OpenAPI surfaces: map capabilities, review integration signals, and gate security-relevant changes.

MAP → REVIEW → GATE

Three products. One capability-control workflow.

Each stage answers a different engineering question and produces deterministic terminal and JSON output.

GATE

Integration Gate

Compare baseline and candidate contracts, then return PASS, REVIEW, or FAIL.

See Integration Gate →

Contract scope

Built around declared evidence.

The analysis uses documented operations, methods, security requirements, permission labels, schema reachability, and scanner signals. It does not connect an agent or test effective runtime enforcement.

Input

OpenAPI 3.0 or 3.1 contracts. Integration Gate takes a baseline and candidate.

Output

Versioned Agent Security 1.0 terminal and JSON results with explicit coverage.

Decision owner

The output informs human and CI policy; it does not approve deployment automatically.

Inspect the contract before the agent acts.

Start with a local OpenAPI review, then choose the Agent Security workflow that matches your decision.

Analyze your API