API Detective

Find hidden APIs used by any website

API Detective — Reveal Hidden APIs on Any Website Ever wondered what API calls a website makes behind the scenes? API Detective gives you a real-time window into every network request a site fires — REST endpoints, GraphQL queries, WebSocket connections, authentication calls, and more. No proxy setup. No certificate juggling. Just open the side panel and start capturing. Built for developers, QA engineers, API integrators, and anyone who needs to understand how a web app communicates with its backend. HOW IT WORKS API Detective attaches directly to Chrome's built-in DevTools Protocol — the same engine that powers Chrome DevTools. When you start a capture session, every outgoing network request is intercepted, classified, and displayed in a clean, searchable list. Click any request to inspect its full details: URL, method, request headers, request body, response status, and response body. No extensions page injection. No man-in-the-middle proxy. Everything runs locally inside your browser. WHAT YOU CAN DO ▸ Capture all API requests made by any website in real time ▸ Instantly classify requests by type — REST, GraphQL, JSON, WebSocket, or Auth ▸ Inspect full request and response details including headers and body ▸ Search and filter requests by URL, path, host, or method ▸ Filter by domain — first-party calls only, external calls only, or all ▸ Deduplicate repeated requests to cut through the noise ▸ Export a single request as a cURL command (free) ▸ Export your captured session as a Postman collection (Pro) ▸ Export your captured session as an OpenAPI 3.0 spec (Pro) ▸ Review and reload previous capture sessions (Pro) FILTER BY REQUEST TYPE • REST — Standard HTTP API calls returning JSON or structured data • GraphQL — Queries and mutations sent to a GraphQL endpoint • JSON — Any request or response carrying JSON content • Auth — Requests that carry authorization headers or bearer tokens • WebSocket — Real-time WS/WSS connections EXPORT YOUR FINDINGS Captured something interesting? Export it and keep working. Selected scope exports the single request you have open in the detail view — perfect for sharing one specific endpoint. All scope exports everything that matches your current filter — if you have the REST filter active, you get all REST calls. Switch to GraphQL and export all GraphQL operations at once. Export formats: • Postman Collection — import directly into Postman to test, replay, and share API calls with your team • OpenAPI 3.0 Spec — generate a spec from captured traffic and import into Swagger, Postman, Insomnia, or any OpenAPI-compatible tool FREE VS PRO Free: ✓ Unlimited real-time capture ✓ Request inspection (headers, body, response) ✓ All filter types (REST, GraphQL, JSON, Auth, WebSocket) ✓ Search and domain filtering ✓ Deduplication ✓ cURL export for any request Pro (one-time purchase, no subscription): ✓ Everything in Free ✓ Export to Postman collection ✓ Export to OpenAPI 3.0 spec ✓ Full session history — save and reload past capture sessions PERFECT FOR • Reverse engineering a third-party site's API for integration work • Discovering undocumented internal APIs during development • Generating API documentation from live traffic • Debugging API calls without switching to DevTools • QA testing to verify the correct requests are fired on user actions • Understanding authentication flows and token patterns PRIVACY API Detective captures network requests locally in your browser. No request data, URLs, headers, or response content is ever sent to our servers. The only data we collect is your email address when you create an account to unlock Pro features, and payment is handled securely by Stripe. GET STARTED Click Start Capture in the popup or side panel Refresh the page you want to inspect Interact with the site — browse, click, submit forms Watch the APIs appear in real time Click any request to inspect it. Use the filter tabs to narrow down by type. Export when you're done. API Detective — because every website is hiding something. Support: https://100plus.tools/extensions/api-detective/support Privacy Policy: https://100plus.tools/extensions/api-detective/privacy Terms of Service: https://100plus.tools/extensions/api-detective/terms