HitAPI — AI API Testing

About

# HitAPI — Chrome Web Store Listing

## Title
HitAPI — AI API Testing

## Summary (132 char max)
Capture API requests, run test suites, and find bugs without leaving your browser.

## Category
Developer Tools

## Language
English

---

## Detailed Description

**Stop switching tabs to test your APIs.**

HitAPI brings AI-powered API testing directly into your browser. While you browse your own web app, the extension automatically captures the API requests happening behind the scenes — no manual copy-pasting of URLs, headers, or auth tokens required.

**What it does:**

🔍 **Capture requests automatically**
Browse your app like normal. HitAPI quietly captures every API call made in the current tab — method, URL, headers, and request body — ready to turn into a test case with one click.

🔑 **Grab auth tokens instantly**
Already logged into your app? HitAPI detects your Bearer token automatically and lets you copy it in one click — no more digging through DevTools Network tab.

➕ **Add to test suite in one click**
Found an interesting request? Click "Add to suite," pick which flow suite it belongs to, and it's instantly part of your automated test coverage on hitapi.dev.

🐛 **Report bugs from the page**
Spot something broken while manually testing? Report it straight from the popup — no need to open a separate dashboard or write up a bug report from scratch.

▶️ **Run test suites without leaving the tab**
Pick a project, hit run, and watch your pass/fail count update live on the toolbar badge — right next to your other extensions.

**Why developers and QA engineers use HitAPI:**

- Turns exploratory testing into automated regression tests — no Swagger spec writing required
- Eliminates the "open Postman, copy URL, paste, repeat" workflow
- AI-generated bug analysis with root cause and suggested fix for every failure
- Works alongside the full HitAPI dashboard at hitapi.dev for deeper analysis, reports, and team collaboration

**Requires a free HitAPI account.** Sign up at hitapi.dev to get started — no credit card required.

---

## Permission Justifications (for Privacy Practices tab)

**webRequest + host_permissions (`<all_urls>`)**
Required to observe outgoing API requests (URL, method, headers, body) on whichever website the user is actively testing, so they can be added to a HitAPI test suite or used to detect authentication tokens. HitAPI does not read or modify page content — it only observes network requests already being made by the page itself.

**storage**
Stores the user's HitAPI login session token and a short-lived in-memory list of captured requests per browser tab, locally in the browser. This data is not transmitted anywhere except to the user's own HitAPI account when they explicitly choose to "Add to suite" or "Report bug."

**activeTab**
Used to identify which browser tab the user is currently viewing, so captured requests and detected tokens are scoped correctly to that tab/site.

**contextMenus**
Provides a right-click shortcut to open the HitAPI popup panel.

## Single Purpose Description
HitAPI is a browser companion to the HitAPI API testing platform. Its single purpose is to capture outgoing API requests from the active tab and let the user add them to test suites, detect authentication tokens for test configuration, and run/monitor existing test suites — all without leaving the page being tested.

## Data Usage Disclosure
- **Web history**: Technically applicable since the extension observes request URLs on visited sites for the purpose of API testing. This data stays local to the browser unless the user explicitly adds a captured request to their HitAPI account.
- **Authentication information**: Detected Bearer tokens are held in local browser storage only, scoped per-tab, and are never transmitted to HitAPI's servers automatically — only when the user explicitly uses them in a test configuration via the dashboard.
- We do **not** sell or transfer user data to third parties for advertising or any unrelated purpose.

## Privacy Policy URL
https://hitapi.dev/privacy