Where are extensions permitted? Extensions are permitted as fields on on all of the following object types (i.e. almost anywhere…): OpenAPI Info Contact License Server Server Variable Components Paths Path Item Operation External Documentation Parameter Request Body Media Type Encoding Responses Response Callback Example Link Tag Schema XML Security Scheme OAuth Flows OAuth Flow