What problem does it solve? Modern single-page applications hide their real API surface inside JavaScript bundles, source maps, and dynamic XHR/fetch calls, making it hard for authorized security testers to build an accurate endpoint inventory without noisy or out-of-scope scanning. ## Core Features & Use Cases - Evidence-Gated Endpoint Discovery: Extracts endpoints, HTTP methods, parameters, and identity context from in-scope JS bundles, source maps, and Swagger/OpenAPI specs, then confirms each finding against live browser traffic. - Scope and Authorization Controls: Enforces an engagement gate requiring declared authorization, locked scope, and baseline host/identity/path state before any probing begins. - False-Positive Filtering: Treats string matches, dead code, stale source maps, and third-party hosts as invalid, and routes version-drift findings to shadow-API analysis. - Use Case: During an authorized web assessment, point the workflow at a target SPA to produce a validated endpoint/method/parameter/auth graph from its bundles and observed browser traffic, without crawling third parties or using discovered credentials. ## Quick Start Use hunt-spa-api to map the real API endpoints of the authorized target SPA from its JavaScript bundles and browser network traffic.
