intruder-io/autoswagger

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1960 stars · 182 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Autoswagger is a Python command-line tool that discovers Swagger/OpenAPI specifications, parses their endpoints, and automatically tests them for unauthenticated access, PII leaks, and exposed secrets. It uses multi-threaded requests with rate limiting, Presidio-based PII recognition, and regex-based secret detection.

Use cases

• find unauthenticated API endpoints from swagger docs
• scan OpenAPI spec for broken authorization
• detect PII leaks in API responses
• check API endpoints for exposed secrets and tokens
• audit my REST API for security weaknesses
• brute force API parameters to bypass validation
• test API endpoints without authentication

When to choose

• you have an API with Swagger/OpenAPI documentation and want to find auth weaknesses
• you need automated PII and secrets leak detection in API responses
• you want a lightweight CLI for quick API security assessments

When to avoid

• you need comprehensive authenticated API testing or full DAST coverage
• your API has no discoverable OpenAPI/Swagger specification
• the spec uses formats or extensions the tool does not yet handle

Facets

cli-tool · maturity active

security penetration-testing vulnerability-scanning http-client parser cli security apis penetration-testing developer-tools cli python cross-platform openapi swagger api-security auth-testing pii-detection secrets-detection api-testing command-line

Member repositories

For agents

markdown · JSON · MCP: product_card(name="intruder-io/autoswagger")