mcpField
M
mitm-list-apis

mitm-list-apis

github.com/instavmDevelopment8774 installsUpdated 13w ago
Repository

About mitm-list-apis

A skill that examines a mitmproxy traffic log and lists unique API endpoints for a specified domain or app. It groups endpoints by function and records methods, input parameters, and concise response fields.

Key features

  1. 01Search mitmproxy logs for a target
  2. 02Extract unique API endpoints
  3. 03Group APIs by functionality
  4. 04Report methods and input parameters
  5. 05Summarize response fields

Use cases

  1. 01Inventory endpoints used by an app
  2. 02Review captured authentication APIs
  3. 03Document request and response shapes

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/instavm/security-skills --skill mitm-list-apis

After installing, type/mitm-list-apisin Claude Code to confirm it loaded.

Details

From the project README

List APIs from Traffic Capture

Analyze the mitmproxy dump (log.txt) and list all APIs for: $ARGUMENTS

Requires: log.txt in the current directory. If it's missing, capture traffic first:

mitmdump --set flow_detail=3 2>&1 | tee log.txt

Instructions

  1. Search log.txt for the target domain/app
  2. Extract unique API endpoints
  3. Group by functionality (auth, user, payment, etc.)

Output Format

For each API found:

  • Method: GET/POST/PUT/DELETE
  • Endpoint: /api/path (skip domain)
  • Input params: Query params or body fields
  • Response fields: Key fields returned (concise)

Grouping Suggestions

  • Authentication (login, register, OTP, token)
  • User Profile (profile, settings, preferences)
  • Transactions (orders, payments, history)
  • Content (products, listings, search)
  • Admin/Internal (if any found)

If no website specified, ask which one to analyze.

Comments

Markdown supported