API Reverse Engineer

API Reverse Engineer captures every API call (fetch + XHR) while you browse normally. No DevTools needed — one click to start recording. Perfect for: • Reverse engineering undocumented private APIs • Building integrations and automation • Security research and auditing • API documentation generation • Learning how web apps communicate How It Works: 1. Open the extension on any tab 2. Pick a preset (LinkedIn, GraphQL, JSON API… or Generic) or add your own URL filter 3. Click Start Recording 4. Use the website normally — pause and resume anytime 5. Click Stop → Download JSONL You get a JSON-Lines export of every captured request: method, URL, request/response headers and bodies, status codes, and timing. Live counters show total and unique endpoints as you go. Need the auth to replay an API? One click downloads the site's cookies — including httpOnly tokens like li_at — to a local .json, with the Cookie header ready for curl/Postman. Nothing is ever uploaded. Key Features: ✓ Intercepts fetch + XHR requests ✓ Tab-scoped recording — only the active tab ✓ Live request counter on the toolbar icon ✓ Pause / Resume — survives the service worker sleeping, no lost captures ✓ Presets + URL filter (domain, path, keyword, regex, glob) with noise exclusion ✓ Secret redaction ON by default — cookies, CSRF, and auth tokens masked before saving ✓ Download site cookies (incl. httpOnly) for API replay ✓ Streams to disk (OPFS) — handles long, large capture sessions ✓ Deduplication counter — see unique endpoints at a glance ✓ Works on any website ✓ Clean dark UI · Manifest V3 Privacy: All captures stay on your device. Secrets are redacted by default. The "cookies" permission is used only when you click Download Cookies, and nothing is ever uploaded — no servers, no analytics, no tracking. Open source: https://github.com/ctala/api-reverse-engineer Built by cristiantala.com