MUST

MUST use https protocol only

Servers MUST be https and no other protocol is allowed.

For OpenAPI definitions marked with info.x-api-type: pygeoapi, the paired -pygeoapi sibling rule fires at warn instead. See 1.

Invalid Example

servers:
  - url: http://azgw.api.ukhsa.gov.uk/detect/testing/v1
    ...

Valid Example

servers:
  - url: https://azgw.api.ukhsa.gov.uk/detect/testing/v1
    ...

UKHSA Guidelines Security

---

Published: 10 February 2025
Last updated: 2 July 2026
Page Source