har-derived-api-client

Record browser XHR traffic to HAR files and derive replayable HTTP API clients.

Updated Aug 22, 2026
One-click install
npx skills add https://github.com/vivekgoquest/hermes-agent-stable --skill har-derived-api-client-vivekgoquest
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: har-derived-api-client
Source: https://github.com/vivekgoquest/hermes-agent-stable/tree/main/optional-skills/web-development/har-derived-api-client
Command: npx skills add https://github.com/vivekgoquest/hermes-agent-stable --skill har-derived-api-client-vivekgoquest

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires playwright, requests, httpx, and includes scripts (resource) components.

What problem does it solve? Many websites have no public API, forcing you to drive a real browser for every request, which is slow and expensive. This Skill captures a site's network traffic once and distills it into the private JSON API so you can call it directly with plain HTTP. ## Core Features & Use Cases - HAR Capture: Record network traffic with Playwright, either by launching a local browser or attaching over CDP to cloud backends like Browserbase, Browser-Use, or Firecrawl. - API Derivation: Filter the HAR to XHR/fetch/JSON traffic, group requests by endpoint, and print query params, headers, request bodies, and replay hints such as the browser User-Agent. - Use Case: You need to repeatedly query a site's autocomplete search. Capture one session, derive the underlying REST endpoint, and replay it with a small Python requests client — no browser in the loop. ## Quick Start Ask the agent to capture the target site's network traffic into a HAR file and derive a plain HTTP client for its private API.

Frequently Asked Questions about har-derived-api-client

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I reverse-engineer a website's private API?▼

Record the site's XHR traffic to a HAR file with Playwright while performing the target interaction, then run the derivation script to group requests by endpoint. It prints the method, URL template, query params, headers, and body samples needed to replay the call over plain HTTP.

How to capture a HAR file from a cloud browser session?▼

Use the CDP capture script with the browser's CDP endpoint, since Playwright's record_har_path only works on locally launched browsers. It attaches via connect_over_cdp and assembles the HAR from request and response events without closing the remote browser.

Why does my derived API client get a 403 error?▼

Many sites reject default library User-Agents like python-requests. Copy the browser User-Agent from the HAR's replay hints into your client, and resend captured Cookie or Authorization headers if the endpoint is session-gated.

Can this bypass authentication or CAPTCHAs on websites?▼

No. The skill captures and replays traffic but does not bypass auth, solve CAPTCHAs, or defeat bot detection. If a site requires a logged-in session, you carry its captured headers and cookies forward rather than forging them.

What if the HAR contains no API-looking entries?▼

Server-rendered pages have no XHR to derive because the data arrives in the HTML. Either scrape the HTML directly or find an interaction on the page that does trigger a JSON fetch, then re-capture.