bowire.lint
Discover a server's API surface and run design-time lint rules that flag issues like exposed secrets or unbounded lists, returning severities and a summary.
Instructions
Discover a server URL and run Bowire's design-time linter over the API surface — the same rules bowire lint and the workbench Lint rail use. Flags design smells (secrets or PII in responses, unbounded list responses, missing versioning, string-typed timestamps, ...) each with a severity, honouring the workspace's .bowire/rules.json. Returns { findings: [{ ruleId, severity, service, method, field, message }], summary: { total, high, medium, low, info } }.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Server URL to discover + lint (must be on the allowlist unless arbitrary URLs are allowed). | |
| protocol | No | Optional protocol id (grpc, rest, graphql, signalr, mqtt, ws, sse, mcp, odata, socketio) to pin one plugin. | |
| grpcDescriptorSet | No | Optional path to a compiled gRPC descriptor set (protoc --descriptor_set_out=api.protoset --include_imports), for a gRPC server that does not answer Server Reflection. Ignored by every other protocol. |