skills.rest
hoanghn61
hoanghn61COMMUNITY
Explore all skills by this author →
GitHub

api-portal-discovery

Probe API subdomains and spec routes to discover OpenAPI, Swagger, and GraphQL endpoints.

Updated May 27, 2026
Search Tags:#openapi#graphql#swagger#developer portal#robots.txt#api discovery#tech stack inference
One-click install
npx skills add https://github.com/hoanghn61/.agents --skill api-portal-discovery
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-portal-discovery
Source: https://github.com/hoanghn61/.agents/tree/main/skills/techstack-identification/api_portal_discovery
Command: npx skills add https://github.com/hoanghn61/.agents --skill api-portal-discovery

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It helps you quickly locate a domain’s public API portals, developer documentation, and OpenAPI/Swagger or GraphQL endpoints so you can understand how to integrate without guessing.

Core Features & Use Cases

  • Discovers API-related subdomains: Tests common API and developer subdomains and records which ones respond successfully for further inspection.
  • Finds OpenAPI/Swagger specifications: Probes well-known spec paths on discovered API hosts and validates whether returned content looks like OpenAPI/Swagger.
  • Detects GraphQL endpoints: Checks common GraphQL routes and can confirm support by attempting an introspection-style discovery flow.
  • Extracts API hints from robots.txt: Reads robots.txt to surface API-related paths and sitemap references that often reveal hidden public surfaces.
  • Infers tech signals from docs and specs: Pulls evidence such as authentication methods, SDK language mentions, rate-limit notes, and API versioning patterns.

Quick Start

Ask: Discover public API portals and OpenAPI/Swagger or GraphQL endpoints for the domain example.com, returning the discovered hosts, spec URLs, graphql findings, and supporting evidence.

Frequently Asked Questions about api-portal-discovery

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find OpenAPI or Swagger specifications for a target domain?▼

Discovering public API portals involves probing common API subdomains and well-known specification routes on a target domain, then validating whether returned content matches OpenAPI or Swagger formats.

Can I detect GraphQL endpoints using API discovery techniques?▼

Yes, API discovery can detect GraphQL endpoints by checking common GraphQL routes on a target domain and confirming support through an introspection-style discovery flow to validate the endpoint.

How does robots.txt help with API discovery?▼

Robots.txt aids API discovery by revealing API-related paths and sitemap references that often expose hidden public API surfaces and undocumented endpoints for further inspection.

What is the best way to infer a tech stack from developer documentation?▼

Inferring a tech stack from developer documentation involves extracting evidence like authentication methods, SDK language mentions, rate-limit notes, and API versioning patterns found in public specs.

Does non-intrusive API discovery respect rate limits?▼

Yes, safe API discovery uses non-intrusive HTTP methods and enforces rate-limit-aware request handling to ensure probing common API subdomains and well-known specification routes remains safe.

Can I use API discovery for integration planning?▼

Yes, API discovery applies to integration planning by locating public developer documentation, OpenAPI/Swagger endpoints, and GraphQL surfaces so you understand how to integrate without guessing.

Related Skills

Explore More Software Engineering Skills→
EntroVyxEntroVyx
3

exchange-owa-attack

Probe Exchange and OWA HTTP headers and endpoints for versioning and service availability.

Community
Advanced
hffmnnjhffmnnj
39

api-docs

Generate API reference documentation from OpenAPI specs and GraphQL schemas.

Community
Advanced
macaughmacaugh
5

Web Application Reconnaissance

Harvests and analyzes web app endpoints and metadata for reconnaissance workflows.

Community
Advanced
narlyseorgnarlyseorg
6

recon-and-enumeration

Automate reconnaissance and enumeration of endpoints, services, and technologies.

Community
Advanced