api-security
ZHzhaoxuya5201k installs
Find security weaknesses across your APIs.
What it does
Assesses API security and produces reproducible evidence of authentication, authorization, input-validation, and availability weaknesses.
When to use it
Use for authorized API security assessments covering REST, GraphQL, WebSocket, or SOAP.
How to use it
Give it an API to assess; it performs security tests and provides reproducible evidence as commands, scripts, screenshots, or a report.
What you provide
- the API URL
Good to know
- cannot be undone: the assessed API
- acts without asking
Latest review
What you need · 5
Uses Vespasian to crawl the target with a headless browser and generate API specifications.
Uses Entropy for endpoint discovery, API-version comparison, and CI watch-mode testing.
Access · 6
This skill
the assessed API
Write
Sends potentially destructive API requests (irreversible)
jwt-tool
Execute
Installs jwt-tool