API 契约变异测试器

对 OpenAPI 请求字段做语义变异，并可发送到真实后端以检查防御性校验覆盖率

json· JSON 结果打开工具

快速开始

用三种语言从你的代码中调用此工具。

cURL

curl -X POST 'https://api.elysiatools.com/zh/api/tools/api-contract-mutation-tester' \
  -H 'Content-Type: application/json' \
  -d '{"openApiSpec":"openapi: 3.0.3\npaths:\n  /users:\n    post:\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              required: [email, role, age]\n              properties:\n                email: { type: string, minLength: 5 }\n                role: { type: string, enum: [admin, member] }\n                age: { type: integer, minimum: 18 }\n      responses:\n        \"201\": { description: created }\n        \"400\": { description: invalid }\n","baseUrl":"","executeMutations":false,"authorizationHeader":"","mutationsPerField":3,"timeoutMs":8000}'

API 参考

以 JSON 形式 POST 提交输入参数。文件类型参数需先单独上传。

请求端点

HTTP

POST https://api.elysiatools.com/zh/api/tools/api-contract-mutation-tester

请求参数

参数名	类型	必填	说明
openApiSpec	textarea	是	—
baseUrl	text	否	—
executeMutations	checkbox	否	—
authorizationHeader	text	否	—
mutationsPerField	number	否	—
timeoutMs	number	否	—

响应格式

JSON 结果

JSON

{
  "key": {...},
  "metadata": {
    "key": "value"
  },
  "error": "Error message (optional)",
  "message": "Notification message (optional)"
}

MCP 集成

将此工具加入你的 Model Context Protocol 服务，让 AI 智能体可以列出并调用它。

服务配置

将以下内容加入你的 MCP 客户端配置：

mcp.json

{
  "mcpServers": {
    "elysiatools-api-contract-mutation-tester": {
      "name": "api-contract-mutation-tester",
      "description": "对 OpenAPI 请求字段做语义变异，并可发送到真实后端以检查防御性校验覆盖率",
      "baseUrl": "https://api.elysiatools.com/mcp/sse?toolId=api-contract-mutation-tester",
      "command": "",
      "args": [],
      "env": {},
      "isActive": true,
      "type": "sse"
    }
  }
}

列出可用工具

连接到 SSE 端点后，列出已开放的工具：

tools/list

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/list"
}

调用此工具

通过工具 id 调用，参数由其参数表构建：

tools/call

{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
    "name": "api-contract-mutation-tester",
    "arguments": {
  "openApiSpec": "openapi: 3.0.3\npaths:\n  /users:\n    post:\n      requestBody:\n        required: true\n        content:\n          application/json:\n            schema:\n              type: object\n              required: [email, role, age]\n              properties:\n                email: { type: string, minLength: 5 }\n                role: { type: string, enum: [admin, member] }\n                age: { type: integer, minimum: 18 }\n      responses:\n        \"201\": { description: created }\n        \"400\": { description: invalid }\n",
  "baseUrl": "",
  "executeMutations": false,
  "authorizationHeader": "",
  "mutationsPerField": 3,
  "timeoutMs": 8000
}
  }
}

可用逗号分隔的 toolId 在一个会话中串联多个工具，例如 /mcp/sse?toolId=png-to-webp,jpg-to-webp,gif-to-webp（最多 20 个）。

有问题或反馈？请联系 [email protected]