Anonymous Tools
Developer

API Attack Surface Mapper

Parse a raw HTTP request and map trust boundaries, credential placement, parser risks and authorization-shaped fields.

Processed on your device
Raw HTTP request
The request is parsed in this browser. The inventory copies only field and header names, never values or the request body. Findings identify review surfaces and do not claim a vulnerability exists.
Value-free inventory
Map attack surface