AI Readiness AuditRef. APM-DD916601 · Confidential
Kiro API
An independent assessment of whether the Kiro API specification is ready for AI-assisted integration and autonomous agents, prepared for Kiro Money.
62/100
Significant gaps
Functional for AI-assisted builds.
Broken for autonomous agents.
Broken for autonomous agents.
Reach AI-ready by Phase 2; resolve all findings → 100 · AI-ready
F
D
C
B
A
62
055708085100
F · Not readyD · Significant gapsC · Needs workB · Mostly readyA · AI-ready
1
Critical blocker stopping entire operation groups for agents
6306
Total instances: 1 critical, 826 high, 2523 medium, 2956 low
62
Rule groups across 4 pillars: 1 critical, 826 high sev. instances
Executive summary
Kiro API scores 61.6/100: Significant gaps · Grade D. The weakest pillar is MCP readiness at 49; the strongest is SDK readiness for AI at 82. We recorded 6306 finding instances: 1 critical, 826 high, 2523 medium, and 2956 low. Functional for AI-assisted builds. Broken for autonomous agents. Every finding lives in the specification, and the roadmap in this report orders the fixes by impact; resolving them projects the score to 100/100.
Readiness by pillar
Significant gaps
62 / 100
FoundationThe spec itself
59/100
Standards Compliance
OpenAPI validity, structural correctness, specification conformance, and import linting: can machines trust your spec?
59Significant gaps
Build Time ReadinessAI writes the code
70/100
Documentation Readiness for AI
Descriptions that say when to use an operation, examples that pin down every shape: whether an AI can learn the truth of your API from what you publish
57Significant gaps
SDK Readiness for AI
Clean types, predictable naming, correct formats: whether production-grade client code can be generated from your spec, by SDK pipelines and AI coding assistants alike
82Mostly ready
Runtime ReadinessAgents make the calls
49/100
MCP Readinesscapped · open criticals
Whether your operations survive being turned into tools: distinct names, descriptions that carry what an agent must know, safe invocation semantics, auth, error recovery, and context budget
49Not ready
Score projection · what fixing each phase unlocks
Todaycurrent score
Phase 1fix criticals
Phase 2+ fix highs
Phase 3+ fix mediums & lows
About this report. We evaluated the Kiro API specification against thousands of deterministic rules we have refined over twelve years of building API tooling, supplemented by AI-based analysis. Every finding is reproducible from the spec itself, scored consistently, and paired with a concrete fix.
What's at stake
Where you’re exposed – and where you’re not
4 failure modes across 3 groups. Some are active risks; others are under control.
Foundation
The spec itself
59 / 100
Elevated risk · Standards compliance
Spec Violations Disrupt Payments Integrations
You must address seven high-severity spec violations that break toolchains and SDK generation for the Kiro API.
22→29
code quality score out of 40: the lift consumers achieve when the underlying spec is clean and standards-compliant
APIMatic Context Plugins research · Series B · June 2026
Build Time Readiness
AI writes the code
70 / 100
Elevated risk · Documentation readiness for AI
AI readers misinterpret Kiro API details
You must provide comprehensive parameter descriptions to prevent coding assistants from building on incorrect assumptions.
74%
of developers name missing or unclear documentation as the top reason they abandon an API. AI readers are stricter: what a human would ask about, an AI assumes.
APIMatic Developer Experience research · June 2026
Managed · SDK readiness for AI
SDKs generate incorrect types and formats
You should refine the schema layer to improve accuracy in AI-generated integration code.
0
fabricated API constructs when a coding assistant was grounded in an AI-ready spec. Ambiguity in the spec is what triggers hallucinated integration code
APIMatic Context Plugins research · 6 APIs · 3 models · June 2026
Runtime Readiness
Agents make the calls
49 / 100
Active risk · MCP readiness
Autonomous agents cannot execute Kiro API
The Kiro API has critical issues with operationId collisions and confusable operations, preventing safe execution by autonomous agents.
65%
reduction in token consumption when agent tools are grounded in authoritative API context. Bloated or confusable tools consume up to 3.3× more.
APIMatic Context Plugins research · Series A · June 2026
The evidence numbers come from our controlled research: 6 experiments across 3 models, 6 commercial APIs, and 3 languages. We derive each card's risk status from this API's pillar scores. Full methodology at apimatic.io.
Contents