Api Surgery - API inspector & security analysis

Inspect API traffic locally, review performance, security signals and observed API contracts.

API Surgery is a powerful developer tool that monitors, analyzes, and helps you perfect every API call made from your browser. Built for developers who care about API quality, security, and performance. ── WHY API SURGERY? ── Every modern web app relies on dozens of API calls. But what's actually being sent? Which endpoints are you hitting? Are you leaking sensitive data? Is your API healthy? API Surgery sits in your Chrome sidebar and gives you complete visibility into your application's API traffic — without modifying a single line of code. ── FEATURES ── ■ LIVE API MONITORING Real-time inspection of every fetch/XHR request with full request/response details, headers, status codes, and timing. ■ SHAPE TRACKER Automatically detects endpoint URL patterns and tracks how response shapes evolve over time. See when fields are added, removed, or changed — across deploys and sessions. ■ PII SCANNER Scans every API call for sensitive data: email addresses, phone numbers, credit card numbers, IP addresses, JWT tokens, API keys, and passwords. Get alerted when PII leaks into your API traffic. ■ API SCORING Each endpoint gets a quality score based on: • Response time & consistency • Error rate & status code distribution • Naming conventions & REST best practices • Payload size & Content-Type compliance • API versioning detection ■ ROUTE DISCOVERY Automatically builds a live map of your API surface — all discovered routes, methods, and their relationships. ■ TIMELINE WATERFALL Visual waterfall chart of all API calls with timing breakdown. Instantly spot slow endpoints and performance bottlenecks. ■ GRAPHQL SUPPORT Detects GraphQL queries, measures depth and complexity, and alerts on expensive or deeply nested queries. ■ OPENAPI SPEC GENERATION Generates an OpenAPI specification from your observed API traffic — browse, capture, export. No setup required. ── USE CASES ── • Debug API issues during development without switching tools • Audit third-party API integrations for security & compliance • Discover undocumented or deprecated endpoints • Monitor API contract changes across deployments • Identify PII leaks before they reach production • Optimize slow API calls and reduce latency FREE FOREVER ── PRIVACY & SECURITY ── API Surgery processes all data locally in your browser. No API payloads are ever sent to external servers. Your data stays on your machine. Full privacy policy available on our website.