|
| 1 | +# API AI-Readiness Framework |
| 2 | + |
| 3 | +**Current Version**: {{VERSION}} |
| 4 | +**Last Updated**: {{TIMESTAMP}} |
| 5 | + |
| 6 | +[View Full Specification](specification.md){ .md-button .md-button--primary } |
| 7 | + |
| 8 | +## What is the API AI-Readiness Framework? |
| 9 | + |
| 10 | +The Jentic API AI-Readiness Framework provides a standardized methodology for evaluating how well an API supports consumption by AI agents, LLMs, and automated systems. |
| 11 | + |
| 12 | +Most APIs today are designed for human developers. They rely on documentation, implicit conventions, and tribal knowledge. AI agents need something different: **machine-readable semantics, predictable structures, and explicit operational contracts**. |
| 13 | + |
| 14 | +This framework defines **six scored dimensions** that measure an API's ability to be: |
| 15 | + |
| 16 | +- **Interpretable** — easily understood by reasoning systems |
| 17 | +- **Operable** — safe and predictable to execute |
| 18 | +- **Discoverable** — findable, indexable, and contextually exposed |
| 19 | +- **Governable** — aligned with secure and trustworthy practices |
| 20 | + |
| 21 | +The scoring model produces an overall AI-Readiness Index between **0 and 100**, mapped to five readiness levels that guide improvement efforts. |
| 22 | + |
| 23 | +## The Six Dimensions |
| 24 | + |
| 25 | +The framework evaluates APIs across six dimensions, grouped into three pillars: |
| 26 | + |
| 27 | +### Foundational & Developer Experience (FDX) |
| 28 | + |
| 29 | +**1. Foundational Compliance (FC)** |
| 30 | +Structural validity, standards-conformance, and parsability. Can modern API tooling reliably interpret this specification? |
| 31 | + |
| 32 | +**2. Developer Experience & Tooling Compatibility (DXJ)** |
| 33 | +Documentation clarity, example coverage, response completeness, and ingestion health. Is this API pleasant and predictable for humans and tools? |
| 34 | + |
| 35 | +### AI-Readiness & Usability (AIRU) |
| 36 | + |
| 37 | +**3. AI-Readiness & Agent Experience (ARAX)** |
| 38 | +Semantic clarity, intent expression, datatype specificity, and error standardization. Can AI systems infer purpose and constraints? |
| 39 | + |
| 40 | +**4. Agent Usability (AU)** |
| 41 | +Operational composability, complexity comfort, navigation affordances, and safety patterns. Can agents operate this API reliably and efficiently? |
| 42 | + |
| 43 | +### Trust, Safety, & Discoverability (TSD) |
| 44 | + |
| 45 | +**5. Security (SEC)** |
| 46 | +Authentication strength, transport security, secret hygiene, and OWASP risk posture. Can this API be safely exposed to AI systems? |
| 47 | + |
| 48 | +**6. AI Discoverability (AID)** |
| 49 | +Descriptive richness, intent phrasing, workflow context, and registry signals. Can AI systems locate and classify this API? |
| 50 | + |
| 51 | +## Readiness Levels |
| 52 | + |
| 53 | +The final AI-Readiness score maps to one of five levels: |
| 54 | + |
| 55 | +| Level | Score Range | Name | Meaning | |
| 56 | +|-------|-------------|------|---------| |
| 57 | +| **Level 0** | < 40 | **Not Ready** | Fundamentally unsuitable for AI or agents | |
| 58 | +| **Level 1** | 40–60 | **Foundational** | Developer-ready, partially AI-usable | |
| 59 | +| **Level 2** | 60–75 | **AI-Aware** | Semantically interpretable, safe for guided use | |
| 60 | +| **Level 3** | 75–90 | **AI-Ready** | Structurally rich, semantically clear, agent-friendly | |
| 61 | +| **Level 4** | 90+ | **Agent-Optimized** | Highly composable, predictable, automation-ready | |
| 62 | + |
| 63 | +## When to Use This Framework |
| 64 | + |
| 65 | +Apply this framework when you need to: |
| 66 | + |
| 67 | +- **Validate API designs** for AI-readiness during development |
| 68 | +- **Assess existing APIs** for compatibility with LLM-driven systems |
| 69 | +- **Establish governance controls** with measurable quality gates |
| 70 | +- **Improve discoverability** for AI agents searching API catalogs |
| 71 | +- **Benchmark API portfolios** across enterprise or ecosystem-wide collections |
| 72 | +- **Guide modernization** efforts with prioritized, actionable recommendations |
| 73 | + |
| 74 | +The framework works with OpenAPI 3.x and 2.x specifications. It's implementation-agnostic, vendor-neutral, and designed for both design-time validation and runtime assessment. |
| 75 | + |
| 76 | +## How It Works |
| 77 | + |
| 78 | +1. **Signal Extraction** — Measurable properties are extracted from the API specification (e.g., authentication coverage, example density, operation complexity) |
| 79 | +2. **Normalization** — Raw measurements are converted to a 0–1 scale using defined normalization rules |
| 80 | +3. **Dimension Scoring** — Normalized signals are aggregated into six dimension scores (0–100) |
| 81 | +4. **Weighted Harmonic Aggregation** — Dimension scores are combined using a weighted harmonic mean to prevent weak dimensions from being masked by strong ones |
| 82 | +5. **Gating Rules** — Safety constraints (e.g., hardcoded credentials, missing auth on sensitive operations) cap scores where appropriate |
| 83 | +6. **Readiness Classification** — The final score is mapped to a readiness level with actionable guidance |
| 84 | + |
| 85 | +## Key Principles |
| 86 | + |
| 87 | +**Validity ≠ Usability**: A syntactically valid OpenAPI specification doesn't guarantee an API is interpretable by AI systems. This framework measures **semantic clarity and operational safety**, not just schema correctness. |
| 88 | + |
| 89 | +**Harmonic Penalization**: The scoring model uses a weighted harmonic mean rather than arithmetic averaging. Weak dimensions pull down the overall score more aggressively, ensuring balanced improvement across all areas. |
| 90 | + |
| 91 | +**Context-Aware Security**: Security scores are adjusted based on API sensitivity (low/moderate/high) and exposure (internal/partner/public). A public API with sensitive operations faces stricter requirements than an internal API. |
| 92 | + |
| 93 | +**No Silver Bullets**: There's no single fix that makes an API AI-ready. The framework identifies **prioritized improvements** across structural, semantic, operational, and security domains. |
| 94 | + |
| 95 | +## Related Resources |
| 96 | + |
| 97 | +- **[Full Specification](specification.md)** — Complete technical specification with normative requirements |
| 98 | +- **[Jentic Public APIs](https://github.com/jentic/jentic-public-apis)** — Collection of scored API specifications demonstrating the framework in practice |
| 99 | +- **Blog Posts**: |
| 100 | + - [Why Most APIs Fail in AI Systems and How to Fix It](https://thenewstack.io/why-most-apis-fail-in-ai-systems-and-how-to-fix-it/) (The New Stack) |
| 101 | + - [Is Your OpenAPI AI-Ready?](https://jentic.com/blog/is-your-open-api-ai-ready) (Jentic) |
| 102 | + - [Scoring APIs for AI](https://jentic.com/blog/scoring-apis-for-ai) (Jentic) |
| 103 | + |
| 104 | +## Specification Metadata |
| 105 | + |
| 106 | +- **Version**: {{VERSION}} |
| 107 | +- **Last Published**: {{TIMESTAMP}} |
| 108 | +- **License**: [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0.html) |
| 109 | + |
| 110 | +--- |
| 111 | + |
| 112 | +**Questions or feedback?** Reach out to the [Jentic team](https://jentic.com). |
0 commit comments