Extract endpoints
extract_endpointsExtract HTTP, GraphQL, and tRPC endpoints from a codebase, showing guards, roles, and permissions that protect them. Supports multiple frameworks and identifies endpoints with missing authentication.
Instructions
HTTP/GraphQL/tRPC endpoints with the guards, roles and permissions that protect them. Supports Express-style routers, NestJS, Next.js, tRPC, FastAPI, Flask, Django (+DRF), Laravel, Spring, ASP.NET Core, Go routers, Rails and GraphQL SDL.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| role | No | Only endpoints this role may call. | |
| root | Yes | Absolute path of the project to analyse (a mounted path such as /workspace when running in Docker). | |
| format | No | Output format (default markdown). | |
| feature | No | ||
| refresh | No | Re-scan the project instead of using the cached analysis. | |
| unprotected_only | No | Only endpoints with no detected authentication. |