发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析
Directory of OpenAPI specifications for thousands of public APIs. Every API is machine-readable and scored for AI agents. CC0.
API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
Browse any app normally. Spectral captures the traffic, understands what each API call does, and generates MCP tools that AI agents can call directly.
Turn any website into a CLI/API for AI agents
Public APIs — independent third-party profile of a public API surface, by API Evangelist. Public APIs is a community-curated collective list of over 1,400 free APIs organized across 50+ categories, maintained by contributors and the team at APILayer. It is one of the most popular open-source projects on GitHub with over 400k stars.
A three-part toolkit for browser session capture, automated crawling, and offline reconstruction of modern web applications.
Apivault — independent third-party profile of a public API surface, by API Evangelist. Apivault is an open-source directory and gateway for discovering public APIs. The platform catalogs thousands of free and public APIs across 51 categories including animals, anime, blockchain, cryptocurrency, finance, health, music, news, and weather, enabling de
TRAE SOLO CN (TraeWork CN) 桌面客户端凭据存储逆向分析 — 4/4 解密成功，98 个 API 发现，ECDSA P-256 Token 刷新，每日签到。纯 Node.js/TypeScript。
Add API discovery mechanism to your 3scale API portal
A hybrid cloud model blends elements of both the private and the public cloud. In the simplest terms, the hybrid model is primarily a private cloud that allows an organization to tap into a public cloud when and where it makes sense. This code shows you how to expose your on-premise applications and services to public cloud, and vice versa.
The API Commons — the hub and website (apicommons.org) for open, machine-readable API building blocks, standards, and browser-first tools.
Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full stack with OWASP ZAP, MariaDB, and MongoDB
RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)
Agent skill for reverse-engineering undocumented website APIs with Chrome CDP, curl, and JS bundle analysis.
A curated list of the best APIs for AI agents, scored by the Jentic API AI-Readiness Framework. Every entry links to a standardised OpenAPI spec.
Nexus-AGI — a public AGI service directory & API registry for autonomous agents. Supports .well-known autodiscovery, OpenAPI schemas, and integration with AI models, tools, and services.
A codebase-aware API client that discovers every route your project serves, links endpoints to source code, and lets you test them. Supports Go, FastAPI, Flask, Django, Express, and Next.js. Built with Rust and Tauri.
This Node.js npm package scans a directory for API endpoints implemented using Express framework, extracts endpoint details including headers, query parameters, and request body, and generates a Postman API collection file.
Agent Readiness — independent third-party profile of a public API surface, by API Evangelist. A topic index covering the operational practices, signals, and patterns that make an API surface safely usable by autonomous AI agents rather than only by humans. Catalogs the specifications, identity layers, agent skill formats, and edge-layer signals tha
To associate your repository with the api-discovery topic, visit your repo's landing page and select "manage topics."