api-discovery

发现藏在前端代码里的 API，验证未授权访问风险 · 动态浏览器追踪 × JavaScript 静态分析

Directory of OpenAPI specifications for thousands of public APIs. Every API is machine-readable and scored for AI agents. CC0.

API discovery tool that maps attack surfaces from captured traffic and generates specs for REST, GraphQL, SOAP, and WebSocket APIs

Browse any app normally. Spectral captures the traffic, understands what each API call does, and generates MCP tools that AI agents can call directly.

Turn any website into a CLI/API for AI agents

Public APIs — independent third-party profile of a public API surface, by API Evangelist. Public APIs is a community-curated collective list of over 1,400 free APIs organized across 50+ categories, maintained by contributors and the team at APILayer. It is one of the most popular open-source projects on GitHub with over 400k stars.

A three-part toolkit for browser session capture, automated crawling, and offline reconstruction of modern web applications.

Playwright Web 控制台探索 + Android APK 接口提取与受控验证（ADB + mitmdump）+ MCP 网关，用于界面遍历、动态 JS/API 捕获与结构化工具调用。 Web console crawler, Android APK evidence extraction & runtime capture, and a guarded MCP gateway for AI clients.

Apivault — independent third-party profile of a public API surface, by API Evangelist. Apivault is an open-source directory and gateway for discovering public APIs. The platform catalogs thousands of free and public APIs across 51 categories including animals, anime, blockchain, cryptocurrency, finance, health, music, news, and weather, enabling de

TRAE CN（原 TRAE SOLO CN）桌面客户端凭据存储逆向 — 4/4 解密，98 个 API，ECDSA P-256 Token 刷新，每日签到。2026-10：Trae CN 1.107.1 重测通过，OAuth 迁移 api.trae.com.cn，新增网页授权登录与模型请求。纯 Node.js/TypeScript。

Let AI agents use the software that has no API: back offices, intranets, dashboards, plus API files, spreadsheets and databases, as MCP tools.

Add API discovery mechanism to your 3scale API portal

A hybrid cloud model blends elements of both the private and the public cloud. In the simplest terms, the hybrid model is primarily a private cloud that allows an organization to tap into a public cloud when and where it makes sense. This code shows you how to expose your on-premise applications and services to public cloud, and vice versa.

The API Commons — the hub and website (apicommons.org) for open, machine-readable API building blocks, standards, and browser-first tools.

Automated API security testing tool that scans REST and SOAP APIs for vulnerabilities using OpenAPI/Swagger specs and WSDL files. Deploys a full stack with OWASP ZAP, MariaDB, and MongoDB

Agent skill for reverse-engineering undocumented website APIs with Chrome CDP, curl, and JS bundle analysis.

RAVERSE: AI Multi-Agent Binary Patching System with MCP Server (35 tools, npm/pip/docker)

A curated list of the best APIs for AI agents, scored by the Jentic API AI-Readiness Framework. Every entry links to a standardised OpenAPI spec.

Nexus-AGI — a public AGI service directory & API registry for autonomous agents. Supports .well-known autodiscovery, OpenAPI schemas, and integration with AI models, tools, and services.

This Node.js npm package scans a directory for API endpoints implemented using Express framework, extracts endpoint details including headers, query parameters, and request body, and generates a Postman API collection file.