API Mapper

Beta

Points a browser extension at an authenticated web app and records every private API call it makes, producing a searchable endpoint catalog for an app that ships no documentation.

Guardrails

Requests are refused unless the host belongs to an enabled target.
Read only by default. Writes need LINKEDIN_BRIDGE_ALLOW_WRITES=1 and a per-call confirm flag.
Per target rate limiting is enforced in the bridge, not left to callers.
Every call is written to the audit trail with its intent.

Bridge

Bridge not running. Start it with npm run bridge in TOOLS/LINKEDIN/linkedin-api-extension.