api-recon-and-docs

Discovers reachable API entrypoints, schemas, role differences, versions, mobile paths, GraphQL endpoints, and undocumented parameters.

When to use it

Use before exploitation when a REST, mobile, or GraphQL API needs endpoint, documentation, version, and hidden-surface enumeration.

Give it a target API; it returns an enumeration of endpoints, documentation, versions, schemas, and hidden surface area.