发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析
Directory of OpenAPI specifications for thousands of public APIs. Every API is machine-readable and scored for AI agents. CC0.
API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs
Browse any app normally. Spectral captures the traffic, understands what each API call does, and generates MCP tools that AI agents can call directly.
Turn any website into a CLI/API for AI agents
Public APIs — independent third-party profile of a public API surface, by API Evangelist. Public APIs is a community-curated collective list of over 1,400 free APIs organized across 50+ categories, maintained by contributors and the team at APILayer. It is one of the most popular open-source projects on GitHub with over 400k stars.
A three-part toolkit for browser session capture, automated crawling, and offline reconstruction of modern web applications.
Playwright Web 控制台探索 + Android/iOS 接口证据提取（DEX、ELF .so、Mach-O）与受控验证 + MCP 网关。 Web UI crawler, APK/IPA native API evidence, mitmdump capture and a guarded MCP gateway for AI clients.
Apivault — independent third-party profile of a public API surface, by API Evangelist. Apivault is an open-source directory and gateway for discovering public APIs. The platform catalogs thousands of free and public APIs across 51 categories including animals, anime, blockchain, cryptocurrency, finance, health, music, news, and weather, enabling de
TRAE CN（原 TRAE SOLO CN）桌面客户端凭据存储逆向 — 4/4 解密，98 个 API，ECDSA P-256 Token 刷新，每日签到。2026-10：Trae CN 1.107.1 重测通过，OAuth 迁移 api.trae.com.cn，新增网页授权登录与模型请求。纯 Node.js/TypeScript。
Let AI agents use the software that has no API: back offices, intranets, dashboards, plus API files, spreadsheets and databases, as MCP tools.
Universal frontend endpoint recon tool - crawls JS, extracts APIs, probes them, highlights login/crypto logic
Add API discovery mechanism to your 3scale API portal
The API Commons — the hub and website (apicommons.org) for open, machine-readable API building blocks, standards, and browser-first tools.
A hybrid cloud model blends elements of both the private and the public cloud. In the simplest terms, the hybrid model is primarily a private cloud that allows an organization to tap into a public cloud when and where it makes sense. This code shows you how to expose your on-premise applications and services to public cloud, and vice versa.
Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full stack with OWASP ZAP, MariaDB, and MongoDB
RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)
Agent skill for reverse-engineering undocumented website APIs with Chrome CDP, curl, and JS bundle analysis.
A curated list of the best APIs for AI agents, scored by the Jentic API AI-Readiness Framework. Every entry links to a standardised OpenAPI spec.
Give AI agents a real Chrome/Firefox browser through MCP. Human-approved automation, API reverse engineering, OpenAPI generation and reusable workflows. Local-first.
To associate your repository with the api-discovery topic, visit your repo's landing page and select "manage topics."