Immediate visibility
See real API calls as you click around any site. No apps to install, no proxies to set up, no traffic rerouting.
apisec Bolt · free Chrome extension
Discover your APIs, effortlessly.
Bolt turns live traffic and API docs into a clean, actionable inventory, without proxies, agents, or setup.
Questions or need help? support@apisec.ai
Introducing apisec Bolt
See it work.
Why apisec Bolt
Signal over noise.
Signal over noise
Filters high-confidence endpoints (not CSS, JS, or images) so you focus on what matters.
Spec on demand
Export a well-formed OpenAPI spec from observed traffic in one click.
Faster recon
Flip to Parameter Mode to enumerate parameters and see where they’re used.
Safe scoping
Set a base-URL boundary (e.g., api.example.com) to keep discovery in-bounds.
Authorized testing only
Use Bolt only on systems you own or have explicit permission to test.
How it works
Two modes.
Traffic Mode
- Hit Start and browse normally. Bolt listens to browser traffic and instantly lists calls.
- Use filters: Raw, Base URL Only, or High-Confidence Endpoints, or refine with your own custom filters.
- Click any item to view method, path, parameters, and sample payloads.
- Switch to Parameter Mode to see a consolidated parameter inventory and usage.
- Click Export to download an OpenAPI spec for everything captured.
Documentation Mode
- Provide a starting URL (any docs page) and a sandbox/scope path to restrict crawling.
- Bolt queues and processes pages, pulling out endpoints and verbs as results populate in real time.
What you can do in minutes
- Build the API inventory you’re missing, from real, observed behavior.
- Seed test plans and automation with live endpoints and parameters.
- Accelerate BOLA and BOPLA hunts by mapping object and parameter access quickly.
- Generate specs for governance when teams haven’t published OpenAPI.
FAQ
Common questions.
Do I need a proxy or agent?
No. Bolt captures what your browser is already doing, no MITM, no cert install.
What kinds of APIs show up?
Any HTTP(S) API traffic your browser makes (REST, JSON, etc.), plus endpoints parsed from documentation pages in Documentation Mode.
Can I scope what gets captured?
Yes. Use the base-URL boundary in Traffic Mode or the sandbox path in Documentation Mode.
Can I export a spec?
Yes. Click Export to download an OpenAPI spec built from what Bolt observed.
Is Bolt really free?
Yes. Bolt is completely free. We only ask for feedback to improve it.
Is there a performance impact?
Bolt is lightweight and shows a memory bar so you can stay within Chrome’s 10 MB extension limit.