apisec Bolt · free Chrome extension
Discover your APIs, effortlessly.
Bolt turns live traffic and API docs into a clean, actionable inventory, without proxies, agents, or setup.
Questions or need help? support@apisec.ai
Introducing apisec Bolt
See it work.
Why apisec Bolt
Signal over noise.
Immediate visibility
See real API calls as you click around any site. No apps to install, no proxies to set up, no traffic rerouting.
Signal over noise
Filters high-confidence endpoints (not CSS, JS, or images) so you focus on what matters.
Spec on demand
Export a well-formed OpenAPI spec from observed traffic in one click.
Faster recon
Flip to Parameter Mode to enumerate parameters and see where they’re used.
Safe scoping
Set a base-URL boundary (e.g., api.example.com) to keep discovery in-bounds.
Authorized testing only
Use Bolt only on systems you own or have explicit permission to test.
How it works
Two modes.
Traffic Mode
Hit Start and browse normally. Bolt listens to browser traffic and instantly lists calls.
Use filters: Raw, Base URL Only, or High-Confidence Endpoints, or refine with your own custom filters.
Click any item to view method, path, parameters, and sample payloads.
Switch to Parameter Mode to see a consolidated parameter inventory and usage.
Click Export to download an OpenAPI spec for everything captured.
Documentation Mode
Provide a starting URL (any docs page) and a sandbox/scope path to restrict crawling.
Bolt queues and processes pages, pulling out endpoints and verbs as results populate in real time.
What you can do in minutes
Build the API inventory you’re missing, from real, observed behavior.
Seed test plans and automation with live endpoints and parameters.
Accelerate BOLA and BOPLA hunts by mapping object and parameter access quickly.
Generate specs for governance when teams haven’t published OpenAPI.
FAQ
Common questions.
