Entra App Registration Manifest Linter and Diff

Review pasted Microsoft Entra application manifests, redirect URIs, claims, roles, scopes, and permission wiring locally.

Schema review is pinned to the local adapter and does not query a tenant. Unknown manifest properties remain advisory rather than being discarded.

Application manifestJSON · current adapter

{
  "displayName": "Fictional Reports Client",
  "signInAudience": "AzureADMultipleOrgs",
  "identifierUris": [
    "api://reports-api"
  ],
  "web": {
    "redirectUris": [
      "https://app.example.test/callback"
    ]
  },
  "api": {
    "oauth2PermissionScopes": [
      {
        "id": "11111111-1111-4111-8111-111111111111",
        "value": "Reports.Read",
        "type": "User",
        "adminConsentDisplayName": "Read reports"
      }
    ]
  },
  "appRoles": [
    {
      "id": "22222222-2222-4222-8222-222222222222",
      "value": "Reports.Admin",
      "allowedMemberTypes": [
        "Application"
      ],
      "isEnabled": true
    }
  ],
  "requiredResourceAccess": [
    {
      "resourceAppId": "00000003-0000-0000-c000-000000000000",
      "resourceAccess": [
        {
          "id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
          "type": "Scope"
        }
      ]
    }
  ]
}

Compare manifest (optional)JSON · top-level diff

StatusReviewable

Redirects1

Roles1

Scopes1

Unknown fields0

Manifest reviewPaths and cross-field findings

{
  "summary": {
    "signInAudience": "AzureADMultipleOrgs",
    "identifierUriCount": 1,
    "redirectUriCount": 1,
    "appRoleCount": 1,
    "scopeCount": 1,
    "requiredResourceCount": 1,
    "hasOptionalClaims": false,
    "hasKeyCredentials": false,
    "unknownTopLevelFields": []
  },
  "diff": null
}