Item logo image for API finder

API finder

5.0(

1 rating

)
ExtensionDeveloper Tools125 users
Item media 3 (screenshot) for API finder
Item media 4 (screenshot) for API finder
Item media 1 (screenshot) for API finder
Item media 2 (screenshot) for API finder
Item media 3 (screenshot) for API finder
Item media 4 (screenshot) for API finder
Item media 1 (screenshot) for API finder
Item media 2 (screenshot) for API finder
Item media 1 (screenshot) for API finder
Item media 2 (screenshot) for API finder
Item media 3 (screenshot) for API finder
Item media 4 (screenshot) for API finder

Overview

Passive API discovery tool for security testers. Discovers API endpoints from browser traffic, flags risks, exports OpenAPI/Postman.

API Finder is a passive API attack-surface mapper that runs silently in your browser. As you navigate web applications, it automatically discovers API endpoints, flags security risks, and builds a live inventory of routes with zero active scanning. Key Features - Passive Discovery - Detects API routes, endpoints, and parameters from normal browser traffic - Risk Flagging - Highlights endpoints with authentication gaps, exposed IDs, debug parameters, and other security red flags - OpenAPI Export - Export discovered routes to OpenAPI/Swagger and Postman collections - False Positive Filter - Smart filtering to keep results relevant - Request Tester - Local request builder for authorized testing (exports masked for safety) - Side Panel UI - Clean dock interface that lives alongside your browsing session - Baseline Saving - Save and compare API surface snapshots over time Why Install? - For Bug Bounty Hunters - Instantly map a target's API surface as you browse - For Pentesters - Find hidden endpoints, debug leaks, and undocumented routes - For Developers - Review what your app exposes and catch misconfigurations early - Zero Attacker Footprint - Everything is passive. No scans, no probes, no logs on the target

5 out of 51 rating

Learn more about results and reviews.

Details

  • Version
    2.1.5
  • Updated
    July 3, 2026
  • Offered by
    msabenda2
  • Size
    1.43MiB
  • Languages
    English
  • Developer
    DIT
    17103 Tungi 17103 Tungi Dar es Salaam 17103 TZ
    Email
    msabenda2@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data. To learn more, see the developer’s privacy policy.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Related

Rest API Inspector

4.3

Inspect, filter and export REST API calls from any web app. View headers, payloads, timing and status. Export as HAR or JSON.

API Detective

0.0

Find hidden APIs used by any website

SocialAPIs Network Inspector

0.0

Capture network requests from any page and generate API code.

API Network Recorder

5.0

Capture authorized API requests and responses for debugging, documentation, and API analysis.

JS Recon & Secret Scanner

0.0

Inspect JavaScript files locally to find likely endpoints, possible secret-like strings, and available sourcemaps.

API Inspector - XHR & Fetch Debugger

0.0

Intercept & inspect XHR/fetch calls — headers, payloads, timing, CORS & auth errors. Essential for dev & QA. By Cloud Geeks.

EndPointer

5.0

An endpoint parser and extractor with many flexible features

Detector APIs Extension

5.0

The extension supports getting all APIs and CURL command when load a website.

SOCx

0.0

Simple OSINT Centralized eXtension

API Sniffer - Endpoint Detector

5.0

A powerful toolkit for Bug Bounty Hunters. Includes local IDOR/BOLA hunting, API mapping, and team collaboration.

JS Finder

0.0

Scan JavaScript files on any webpage and extract endpoints, APIs, and URLs for security research and development analysis.

JSner - Endpoint Extractor

0.0

Advanced endpoint scanner with verification. Extract and test API endpoints, GraphQL queries, and more from any website.

Rest API Inspector

4.3

Inspect, filter and export REST API calls from any web app. View headers, payloads, timing and status. Export as HAR or JSON.

API Detective

0.0

Find hidden APIs used by any website

SocialAPIs Network Inspector

0.0

Capture network requests from any page and generate API code.

API Network Recorder

5.0

Capture authorized API requests and responses for debugging, documentation, and API analysis.

JS Recon & Secret Scanner

0.0

Inspect JavaScript files locally to find likely endpoints, possible secret-like strings, and available sourcemaps.

API Inspector - XHR & Fetch Debugger

0.0

Intercept & inspect XHR/fetch calls — headers, payloads, timing, CORS & auth errors. Essential for dev & QA. By Cloud Geeks.

EndPointer

5.0

An endpoint parser and extractor with many flexible features

Detector APIs Extension

5.0

The extension supports getting all APIs and CURL command when load a website.

Google apps