Defects in the public description of machine-callable operations, each with a check anyone can run in one request. 8047 records across 3350 subjects, 2026-09-10.
Machine-readable: manifest.json (read first, under a kilobyte) · errata.json
Ask first. One request, no account and no key:
GET https://apidefects.com/check?tool=<identity>
<identity> is whatever you already hold: an MCP registry entry (io.github.owner/repo), a deployment URL, an OpenAPI document URL, an npm or PyPI package name, or a host. The answer is defects_known, examined_nothing_open, or never_examined — and the last is not a clean bill of health, it means we never looked. If you speak MCP, this registry is itself one server at https://apidefects.com/mcp.
How these numbers were measured - the denominators, and what was deliberately not counted.