| OpenAPI Object |
Root object, openapi, $self, info, servers, paths, webhooks, components, security, tags |
[core-openapi-object](references/core-openapi-object.md) |
| Format & Structure |
JSON/YAML, case sensitivity, rich text, OAD structure, parsing, base URI |
[core-format-and-structure](references/core-format-and-structure.md) |
| Fixed & Patterned Fields |
Fixed vs patterned fields, paths keys, components keys, extensions (x-) |
[core-fixed-patterned-fields](references/core-fixed-patterned-fields.md) |
| Info & Metadata |
Info, Contact, License objects |
[core-info-metadata](references/core-info-metadata.md) |
| Server |
Server Object, Server Variable, URL templating |
[core-server](references/core-server.md) |
| Paths & Operations |
Paths Object, Path Item, Operation Object, additionalOperations, query |
[paths-and-operations](references/paths-and-operations.md) |
| Path Templating |
Path templating, path parameters, matching, ABNF |
[core-path-templating](references/core-path-templating.md) |
| Parameters |
Parameter Object, in (path/query/header/cookie/querystring), style, schema vs content |
[parameters](references/parameters.md) |
| Request Body & Media Type |
Request Body, Media Type Object, sequential media types, itemSchema |
[request-body-and-media-type](references/request-body-and-media-type.md) |
| Encoding Object |
Encoding by name/position, contentType, style, explode, form, multipart |
[core-encoding-object](references/core-encoding-object.md) |
| Media Types |
Content keys, media type ranges, OpenAPI Media Type Registry |
[core-media-types](references/core-media-types.md) |
| Responses |
Responses Object, Response Object, headers, content, links |
[responses](references/responses.md) |
| HTTP Status Codes |
Response keys, default, 1XX–5XX range with X |
[core-http-status-codes](references/core-http-status-codes.md) |
| Schema & Components |
Schema Object (JSON Schema 2020-12), Components, $ref resolution |
[schema-and-components](references/schema-and-components.md) |
| Schema JSON Schema Keywords |
JSON Schema 2020-12 keywords and OAS extensions in Schema |
[schema-json-schema-keywords](references/schema-json-schema-keywords.md) |
| Schema Composition & Polymorphism |
allOf, oneOf, anyOf, discriminator |
[schema-composition-polymorphism](references/schema-composition-polymorphism.md) |
| Data Types & Formats |
JSON Schema types, format keyword, OAS dialect |
[core-data-types-and-formats](references/core-data-types-and-formats.md) |
| Discriminator & XML |
Discriminator Object, XML Object (nodeType, name, namespace) |
[core-discriminator-and-xml](references/core-discriminator-and-xml.md) |
| Components Reuse |
Reusing parameters, responses, schemas via $ref |
[components-reuse](references/components-reuse.md) |
| Reference Object |
$ref, summary/description override, resolution rules |
[core-reference-object](references/core-reference-object.md) |
| Header Object |
Response/multipart headers, style simple, Set-Cookie, Link |
[core-header-object](references/core-header-object.md) |
| Example Object |
dataValue, serializedValue, value, externalValue, Working with Examples |
[core-example-object](references/core-example-object.md) |
| Tag & External Docs |
Tag Object, External Documentation Object, parent, kind |
[core-tags-and-external-docs](references/core-tags-and-external-docs.md) |
| Link Object |
operationRef, operationId, parameters, requestBody |
[core-link-object](references/core-link-object.md) |
| Runtime Expressions |
$request, $response, $url, $method, ABNF, Link/Callback usage |
[core-runtime-expressions](references/core-runtime-expressions.md) |
| Security |
Security Scheme, OAuth Flows, Security Requirement Object |
[security](references/security.md) |
| Security Scheme Types |
apiKey, http (basic/bearer), mutualTLS, oauth2, openIdConnect |
[security-scheme-types](references/security-scheme-types.md) |
| Security Requirement Object |
OR/AND semantics, {} optional, [] clear, scopes |
[security-requirement-object](references/security-requirement-object.md) |
| OAuth2 Flows |
OAuth Flows Object, OAuth Flow Object, authorizationCode, deviceAuthorization |
[security-oauth2-flows](references/security-oauth2-flows.md) |
| Callbacks & Webhooks |
Callback Object, webhooks |
[callbacks-and-webhooks](references/callbacks-and-webhooks.md) |
| Extensions |
Specification extensions (x-), extension registries |
[advanced-extensions](references/advanced-extensions.md) |