diff --git a/.github/workflows/build-deploy.yml b/.github/workflows/build-deploy.yml
index 176ba55..c65e770 100644
--- a/.github/workflows/build-deploy.yml
+++ b/.github/workflows/build-deploy.yml
@@ -4,9 +4,9 @@ on:
   push:
     branches:
       - main
-  # pull_request:
-  #   paths:
-  #     - "api/**"
+  pull_request:
+    paths:
+      - "api/**"
   workflow_dispatch:
 
 permissions:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..08e40c7
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,30 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+    paths:
+      - "api/**"
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - run: npm ci
+
+      - name: Generate OpenAPI spec
+        run: npm run generate
+
+      - name: Validate OpenAPI spec
+        run: npm run validate
diff --git a/api/registry.npmjs.com/oidc.yaml b/api/registry.npmjs.com/oidc.yaml
index a40f396..d2b3fcc 100644
--- a/api/registry.npmjs.com/oidc.yaml
+++ b/api/registry.npmjs.com/oidc.yaml
@@ -5,7 +5,7 @@ paths:
         - registry.npmjs.org
       summary: Exchange OIDC id_token for npm registry token
       description: |
-        Exchanges a valid OIDC id_token (provided as a Bearer token) for a short-lived npm registry access token for the specified package.
+        Exchange a valid OIDC id_token (provided as a Bearer token) for a short-lived npm registry access token for the specified package.
 
         **OIDC Token Requirements:**
         - The Bearer token must be an OIDC id_token from a supported Identity Provider (IdP)