Introduction
Stoney is continuous API contract verification. It watches your production traffic, learns your API’s behavior, and catches regressions before your customers do.
The Problem
APIs break silently. A field gets renamed, a status code changes, an auth check disappears — and nobody notices until a customer reports it.
How Stoney Works
1. Install the recorder — Add a few lines of middleware. Stoney observes real traffic without adding latency.
2. Review suggestions — Stoney analyzes patterns and generates contract suggestions. You activate the ones that matter.
3. Catch regressions — When behavior drifts, you get alerted immediately.
Core Concepts
A contract is a statement about your API that must remain true:
GET /api/users returns 200
POST /api/auth/login requires authenticationWhen Stoney observes traffic, it generates suggestions. You review these and activate the ones you want to enforce.
When a contract’s expected behavior stops matching reality, that’s drift. Stoney detects drift and alerts you.
Getting Started
- Quickstart — Install the recorder and see suggestions in 5 minutes
- Contracts — Learn what Stoney can verify