nikitastupin/clairvoyance

Health v2 · maintenance only

Adoption not part of the score

1506 stars · 134 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Clairvoyance is a Python CLI tool that recovers a GraphQL API's schema even when introspection is disabled, by probing field and type names using wordlists. It outputs the schema as JSON compatible with tools like GraphQL Voyager, InQL, and graphql-path-enum.

Use cases

• recover a GraphQL schema when introspection is disabled
• enumerate hidden GraphQL fields and types during a pentest
• generate a schema JSON for GraphQL Voyager or InQL
• audit GraphQL APIs during bug bounty hunting
• build a target-specific wordlist from app traffic to fuzz GraphQL names

When to choose

• you're testing a GraphQL endpoint that has introspection turned off
• you need a machine-readable schema for downstream GraphQL security tooling
• you want a pip-installable or Dockerized tool for schema recovery

When to avoid

• introspection is enabled and you can just query the schema directly
• you need an authorized-free scanner for general web vulnerabilities beyond GraphQL
• you cannot obtain a suitable wordlist for the target

Facets

cli-tool · maturity active

security graphql penetration-testing cli security apis penetration-testing developer-tools cli python cross-platform graphql-introspection schema-recovery bug-bounty wordlist docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nikitastupin/clairvoyance")