API Detective

About

API Detective — Reveal Hidden APIs on Any Website

Ever wondered what API calls a website makes behind the scenes? API Detective gives you a real-time window into every network request a site fires — REST endpoints, GraphQL queries, WebSocket connections, authentication calls, and more. No proxy setup. No certificate juggling. Just open the side panel and start capturing.

Built for developers, QA engineers, API integrators, and anyone who needs to understand how a web app communicates with its backend.

HOW IT WORKS

API Detective attaches directly to Chrome's built-in DevTools Protocol — the same engine that powers Chrome DevTools. When you start a capture session, every outgoing network request is intercepted, classified, and displayed in a clean, searchable list. Click any request to inspect its full details: URL, method, request headers, request body, response status, and response body.

No extensions page injection. No man-in-the-middle proxy. Everything runs locally inside your browser.

WHAT YOU CAN DO

▸ Capture all API requests made by any website in real time
▸ Instantly classify requests by type — REST, GraphQL, JSON, WebSocket, or Auth
▸ Inspect full request and response details including headers and body
▸ Search and filter requests by URL, path, host, or method
▸ Filter by domain — first-party calls only, external calls only, or all
▸ Deduplicate repeated requests to cut through the noise
▸ Export a single request as a cURL command (free)
▸ Export your captured session as a Postman collection (Pro)
▸ Export your captured session as an OpenAPI 3.0 spec (Pro)
▸ Review and reload previous capture sessions (Pro)

FILTER BY REQUEST TYPE

• REST — Standard HTTP API calls returning JSON or structured data
• GraphQL — Queries and mutations sent to a GraphQL endpoint
• JSON — Any request or response carrying JSON content
• Auth — Requests that carry authorization headers or bearer tokens
• WebSocket — Real-time WS/WSS connections

EXPORT YOUR FINDINGS

Captured something interesting? Export it and keep working.

Selected scope exports the single request you have open in the detail view — perfect for sharing one specific endpoint.

All scope exports everything that matches your current filter — if you have the REST filter active, you get all REST calls. Switch to GraphQL and export all GraphQL operations at once.

Export formats:
• Postman Collection — import directly into Postman to test, replay, and share API calls with your team
• OpenAPI 3.0 Spec — generate a spec from captured traffic and import into Swagger, Postman, Insomnia, or any OpenAPI-compatible tool

FREE VS PRO

Free:
✓ Unlimited real-time capture
✓ Request inspection (headers, body, response)
✓ All filter types (REST, GraphQL, JSON, Auth, WebSocket)
✓ Search and domain filtering
✓ Deduplication
✓ cURL export for any request

Pro (one-time purchase, no subscription):
✓ Everything in Free
✓ Export to Postman collection
✓ Export to OpenAPI 3.0 spec
✓ Full session history — save and reload past capture sessions

PERFECT FOR

• Reverse engineering a third-party site's API for integration work
• Discovering undocumented internal APIs during development
• Generating API documentation from live traffic
• Debugging API calls without switching to DevTools
• QA testing to verify the correct requests are fired on user actions
• Understanding authentication flows and token patterns

PRIVACY

API Detective captures network requests locally in your browser. No request data, URLs, headers, or response content is ever sent to our servers. The only data we collect is your email address when you create an account to unlock Pro features, and payment is handled securely by Stripe.

GET STARTED

Click Start Capture in the popup or side panel
Refresh the page you want to inspect
Interact with the site — browse, click, submit forms
Watch the APIs appear in real time
Click any request to inspect it. Use the filter tabs to narrow down by type. Export when you're done.

API Detective — because every website is hiding something.

Support:
https://100plus.tools/extensions/api-detective/support

Privacy Policy:
https://100plus.tools/extensions/api-detective/privacy

Terms of Service:
https://100plus.tools/extensions/api-detective/terms