Item logo image for API finder

API finder

5.0(

1 rating

)
Item media 4 (screenshot) for API finder
Item media 1 (screenshot) for API finder
Item media 2 (screenshot) for API finder
Item media 3 (screenshot) for API finder
Item media 4 (screenshot) for API finder
Item media 1 (screenshot) for API finder
Item media 1 (screenshot) for API finder
Item media 2 (screenshot) for API finder
Item media 3 (screenshot) for API finder
Item media 4 (screenshot) for API finder

Overview

Passive API discovery tool for security testers. Discovers API endpoints from browser traffic, flags risks, exports OpenAPI/Postman.

API Finder is a passive API attack-surface mapper that runs silently in your browser. As you navigate web applications, it automatically discovers API endpoints, flags security risks, and builds a live inventory of routes with zero active scanning. Key Features - Passive Discovery - Detects API routes, endpoints, and parameters from normal browser traffic - Risk Flagging - Highlights endpoints with authentication gaps, exposed IDs, debug parameters, and other security red flags - OpenAPI Export - Export discovered routes to OpenAPI/Swagger and Postman collections - False Positive Filter - Smart filtering to keep results relevant - Request Tester - Local request builder for authorized testing (exports masked for safety) - Side Panel UI - Clean dock interface that lives alongside your browsing session - Baseline Saving - Save and compare API surface snapshots over time Why Install? - For Bug Bounty Hunters - Instantly map a target's API surface as you browse - For Pentesters - Find hidden endpoints, debug leaks, and undocumented routes - For Developers - Review what your app exposes and catch misconfigurations early - Zero Attacker Footprint - Everything is passive. No scans, no probes, no logs on the target

Details

  • Version
    2.1.5
  • Updated
    July 3, 2026
  • Offered by
    msabenda2
  • Size
    1.43MiB
  • Languages
    English
  • Developer
    DIT
    17103 Tungi 17103 Tungi Dar es Salaam 17103 TZ
    Email
    msabenda2@gmail.com
  • Non-trader
    This developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.

Privacy

Manage extensions and learn how they're being used in your organization
The developer has disclosed that it will not collect or use your data. To learn more, see the developer’s privacy policy.

This developer declares that your data is

  • Not being sold to third parties, outside of the approved use cases
  • Not being used or transferred for purposes that are unrelated to the item's core functionality
  • Not being used or transferred to determine creditworthiness or for lending purposes

Related

FindSomething

4.6

Find interesting things in the webpage's source code or JavaScript

Rest API Inspector

4.3

Inspect, filter and export REST API calls from any web app. View headers, payloads, timing and status. Export as HAR or JSON.

API Detective

0.0

Find hidden APIs used by any website

APIsec BOLT

5.0

Discover APIs from browser traffic and auto-generate OpenAPI specs.

Bug Matrix 🐞 – SQA Testing Tools Hub

5.0

A comprehensive browser extension for testers with tools for testing, test data generation, security payloads, and more.

Amzing Amazon Light

5.0

Find products faster on Amazon!

Detector APIs Extension

5.0

The extension supports getting all APIs and CURL command when load a website.

ContextBridge: AI Chat Memory & Prompts

5.0

Save, secure, and restore your AI chat history seamlessly. Transfer prompts across ChatGPT, Claude, and Gemini with full context.

TorrentRelay

5.0

Download torrents and magnet links straight to your device via TorrentRelay.

DNS Forensic Auditor

5.0

DNS auditing with DNSSEC validation, WHOIS/RDAP, SSL certificates, email security, GeoIP, and A-F grading.

Website Source Downloader

4.3

Website Source Downloader - A browser extension to download webpage source from any webpage.

SEO Inspector

5.0

Analyze any webpage for SEO issues with detailed, actionable recommendations. Runs 100% locally - no data collection.

FindSomething

4.6

Find interesting things in the webpage's source code or JavaScript

Rest API Inspector

4.3

Inspect, filter and export REST API calls from any web app. View headers, payloads, timing and status. Export as HAR or JSON.

API Detective

0.0

Find hidden APIs used by any website

APIsec BOLT

5.0

Discover APIs from browser traffic and auto-generate OpenAPI specs.

Bug Matrix 🐞 – SQA Testing Tools Hub

5.0

A comprehensive browser extension for testers with tools for testing, test data generation, security payloads, and more.

Amzing Amazon Light

5.0

Find products faster on Amazon!

Detector APIs Extension

5.0

The extension supports getting all APIs and CURL command when load a website.

ContextBridge: AI Chat Memory & Prompts

5.0

Save, secure, and restore your AI chat history seamlessly. Transfer prompts across ChatGPT, Claude, and Gemini with full context.

Google apps