Specbook

Lets Specbook pages call the APIs you allow from your browser, even when the API blocks browsers (CORS).

Specbook turns an OpenAPI spec into live documentation you can run. On a hosted page such as ui.specbook.dev, the browser stops a page from reading most APIs' answers (CORS). This extension makes the call for the page, so a live request works there as it does under specbook dev. You stay in control: • Installing asks for nothing. The extension has no access to any site until you grant it. • Each API address is allowed separately, in Chrome's own dialog, for the site that asked. Another site cannot reuse it. • Calls are read-only until you turn on changes for that API. • No cookies, no redirects followed, no private addresses unless you enable them, 30 requests a minute per API. • It stores no keys: the keys a request needs stay in the page, for that tab only. • No analytics, no telemetry, no account, no remote code. You do not need it for an API on the same origin as the page, for APIs that send CORS headers, or under specbook dev. Open source (MIT): https://github.com/specbook-dev/specbook