First public release as ExecEndpoints.
- One‑click Send reloads the target tab and captures every in‑scope request until the network goes idle — real HTTP method, query & body parameters, and the correct per‑host JWT/cookies. Replaces the old fixed‑timeout capture, so nothing loaded late is missed.
- The whole Send flow runs in the background service worker, so it completes even if the popup closes.
- Same‑domain model: the target's registrable‑domain family is in scope (e.g.
api.example.comforapp.example.com); third‑party trackers/analytics/CDNs are dropped. - The target's own domain is never denied, even if it appears in the tracker denylist.
- JS mining keeps same‑domain API endpoints (not just the exact host).
- Live JS/JSON response mining in the extension + deep static extraction on the server (template‑literal API paths, call‑site method/params, chunk‑following, cross‑domain reassembly).
- Endpoints, Parameters, GraphQL, 🔑 Keys (typed detector + ready‑to‑submit RAW‑HTTP reports), Subdomains, Libraries, API Graph, Repeater.
- Per‑host credentials, pretty‑printed JSON responses, direct downloads, open‑in‑new‑tab.
- Passive by default; 100% local; disk persistence with permanent deletes.
- Step‑by‑step tutorial opens automatically on first install; reopen from the popup or the dashboard's ? button.