The API layer for AI agents. Dashboard + 22K APIs + 18 Direct Call providers. MCP native.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 50f51d4 · analyzer v27 · 1w ago
skills & prompt files 1
- agent-rules nordsym-apiclaw-50f51d4/landing/public/agents.md
danger signals155
- suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch2.py :136
{"name": "Datadog", "desc": "Monitoring platform", "cat": "DevOps", "url": "https://docs.datadoghq.com/api/", "auth": "apiKey"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch2.py :138
{"name": "Sentry", "desc": "Error tracking", "cat": "DevOps", "url": "https://docs.sentry.io/api/", "auth": "apiKey"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :187
{"name": "Segment", "desc": "Customer data platform", "cat": "Analytics", "url": "https://segment.com/docs/connections/sources/catalog/", "auth": "apiKey"}, - suspicious endpoint www.rudderstack.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :189
{"name": "RudderStack", "desc": "Customer data platform", "cat": "Analytics", "url": "https://www.rudderstack.com/docs/", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :190
{"name": "Amplitude", "desc": "Product analytics", "cat": "Analytics", "url": "https://www.docs.developers.amplitude.com/", "auth": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :192
{"name": "PostHog", "desc": "Product analytics", "cat": "Analytics", "url": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :193
{"name": "Mixpanel API", "desc": "Product analytics", "cat": "Analytics", "url": "https://developer.mixpanel.com/reference/", "auth": "apiKey"}, - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :194
{"name": "FullStory", "desc": "Digital experience", "cat": "Analytics", "url": "https://developer.fullstory.com/", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-26-06.py :322
{"name": "MixPanel", "desc": "Product analytics", "cat": "Analytics", "url": "https://developer.mixpanel.com/", "auth": "apiKey"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/night-expansion-02-26-06.py :581
{"name": "Pastebin", "desc": "Text storage", "cat": "Tools", "url": "https://pastebin.com/doc_api", "auth": "apiKey"}, - suspicious endpoint www.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-27-05-batch2.py :73
{"name": "FullStory", "description": "Digital experience analytics", "category": "Marketing", "baseUrl": "https://www.fullstory.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint www.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-27-05.py :222
{"name": "Datadog", "description": "Monitoring and analytics platform", "category": "Monitoring", "baseUrl": "https://www.datadoghq.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint sentry.io (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-27-05.py :224
{"name": "Sentry", "description": "Error monitoring and performance", "category": "Monitoring", "baseUrl": "https://sentry.io/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-27-05.py :226
{"name": "Mixpanel", "description": "Product analytics platform", "category": "Analytics", "baseUrl": "https://mixpanel.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint amplitude.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-27-05.py :227
{"name": "Amplitude", "description": "Product analytics", "category": "Analytics", "baseUrl": "https://amplitude.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/night-expansion-02-27-05.py :229
{"name": "PostHog", "description": "Open source product analytics", "category": "Analytics", "baseUrl": "https://posthog.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/add-public-apis.py :48
{"name": "MixPanel", "description": "Analytics for mobile and web", "category": "Analytics", "link": "https://developer.mixpanel.com/docs/implement-mixpanel", "auth": "apiKey"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/add-public-apis.py :293
{"name": "Pastebin", "description": "Share text or code quickly", "category": "Development", "link": "https://pastebin.com/doc_scraping_api", "auth": "apiKey"}, - suspicious endpoint 0x0.st nordsym-apiclaw-50f51d4/scripts/bulk-add-public-apis-v2.py :177
{"name": "The Null Pointer", "description": "No-bullshit file hosting and URL shortening service", "category": "Cloud Storage", "link": "https://0x0.st", "auth": "None"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/bulk-add-public-apis-v2.py :358
{"name": "Segment", "description": "Customer data platform API", "category": "Analytics", "link": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/bulk-add-public-apis-v2.py :359
{"name": "Amplitude", "description": "Product analytics API", "category": "Analytics", "link": "https://www.docs.developers.amplitude.com/analytics/apis/http-v2-api/", "auth": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/bulk-add-public-apis-v2.py :361
{"name": "PostHog", "description": "Product analytics API", "category": "Analytics", "link": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-2026-batch.py :142
{"name": "PostHog", "description": "Open source product analytics", "category": "Analytics", "link": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-2026-batch.py :149
{"name": "Mixpanel", "description": "Product analytics", "category": "Analytics", "link": "https://developer.mixpanel.com/", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-2026-batch.py :150
{"name": "Amplitude", "description": "Digital analytics platform", "category": "Analytics", "link": "https://www.docs.developers.amplitude.com/", "auth": "apiKey"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-2026-batch.py :156
{"name": "Sentry", "description": "Error tracking and monitoring", "category": "Monitoring", "link": "https://docs.sentry.io/", "auth": "apiKey"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-2026-batch.py :162
{"name": "Datadog", "description": "Cloud monitoring", "category": "Monitoring", "link": "https://docs.datadoghq.com/api/", "auth": "apiKey"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-more.py :183
{"name": "Datadog API", "description": "Monitoring and analytics", "category": "Analytics", "auth": "apiKey", "https": True, "cors": "unknown", "link": "https://docs.datadoghq.com/api/", "pricing": "p - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-more.py :192
{"name": "Sentry API", "description": "Error tracking", "category": "Development", "auth": "apiKey", "https": True, "cors": "yes", "link": "https://docs.sentry.io/api/", "pricing": "freemium", "keywor - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-more.py :196
{"name": "FullStory API", "description": "Digital experience analytics", "category": "Analytics", "auth": "apiKey", "https": True, "cors": "unknown", "link": "https://developer.fullstory.com/", "prici - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-more.py :199
{"name": "PostHog API", "description": "Product analytics", "category": "Analytics", "auth": "apiKey", "https": True, "cors": "yes", "link": "https://posthog.com/docs/api", "pricing": "freemium", "key - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-registry.py :237
{"name": "Mixpanel API", "description": "Product analytics platform", "category": "Analytics", "auth": "apiKey", "https": True, "cors": "unknown", "link": "https://developer.mixpanel.com/reference", " - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-registry.py :238
{"name": "Amplitude API", "description": "Product analytics for growth", "category": "Analytics", "auth": "apiKey", "https": True, "cors": "unknown", "link": "https://www.docs.developers.amplitude.com - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/expand-registry.py :239
{"name": "Segment API", "description": "Customer data platform", "category": "Analytics", "auth": "apiKey", "https": True, "cors": "unknown", "link": "https://segment.com/docs/connections/sources/cata - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/extract-agent2-apis.py :399
{"name": "MixPanel API", "url": "https://developer.mixpanel.com/", "desc": "Product analytics API", "cat": "Analytics"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/extract-apis-02-27.py :142
{"name": "MixPanel", "description": "Analytics for mobile and web applications", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://developer.mixpanel.com/"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/extract-apis-02-27.py :556
{"name": "Pastebin", "description": "Plain Text Storage", "category": "Storage", "authType": "apiKey", "baseUrl": "https://pastebin.com/"}, - suspicious endpoint 0x0.st nordsym-apiclaw-50f51d4/scripts/extract-apis-02-27.py :560
{"name": "The Null Pointer", "description": "File hosting and URL shortening", "category": "Storage", "authType": "none", "baseUrl": "https://0x0.st"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/final-batch.py :158
("Segment API", "CDP API", "https://segment.com/docs/connections/sources/catalog/"), - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :451
{"name": "Sentry", "description": "Error tracking and monitoring", "category": "Developer Tools", "link": "https://docs.sentry.io/api/", "auth": "apiKey", "pricing": "freemium"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :452
{"name": "Datadog", "description": "Monitoring and security platform", "category": "Developer Tools", "link": "https://docs.datadoghq.com/api/", "auth": "apiKey", "pricing": "paid"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :463
{"name": "Segment", "description": "Customer data platform", "category": "Developer Tools", "link": "https://segment.com/docs/api/", "auth": "apiKey", "pricing": "freemium"}, - suspicious endpoint developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :464
{"name": "Amplitude", "description": "Product analytics", "category": "Developer Tools", "link": "https://developers.amplitude.com/", "auth": "apiKey", "pricing": "freemium"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :465
{"name": "Mixpanel", "description": "User analytics platform", "category": "Developer Tools", "link": "https://developer.mixpanel.com/", "auth": "apiKey", "pricing": "freemium"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :466
{"name": "PostHog", "description": "Open source product analytics", "category": "Developer Tools", "link": "https://posthog.com/docs/api", "auth": "apiKey", "pricing": "freemium"}, - suspicious endpoint www.rudderstack.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :918
("Rudderstack", "Customer data platform", "https://www.rudderstack.com/docs/"), - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :959
("Amplitude", "Product analytics", "https://www.docs.developers.amplitude.com/"), - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mass-scrape.py :963
("FullStory", "Digital experience", "https://developer.fullstory.com/"), - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mega-expansion.py :374
("Datadog API", "Infrastructure monitoring API", "https://docs.datadoghq.com/api/"), - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/mega-expansion.py :388
("Sentry API", "Error tracking API", "https://docs.sentry.io/api/"), - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/mega-expansion.py :392
("FullStory API", "Digital experience API", "https://developer.fullstory.com/"), - suspicious endpoint www.rudderstack.com (telemetry) nordsym-apiclaw-50f51d4/scripts/more-apis.py :234
("Rudderstack API", "Customer data API", "https://www.rudderstack.com/docs/api/"), - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-24.py :161
{"name": "Datadog", "url": "https://docs.datadoghq.com/api/latest/", "desc": "Monitoring and observability API", "cat": "DevOps"}, - suspicious endpoint amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-24.py :255
{"name": "Amplitude", "url": "https://amplitude.com/docs/apis", "desc": "Product analytics API", "cat": "Analytics"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-24.py :256
{"name": "Mixpanel", "url": "https://developer.mixpanel.com/reference", "desc": "Product analytics API", "cat": "Analytics"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-24.py :257
{"name": "Segment", "url": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/", "desc": "Customer data platform API", "cat": "Analytics"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-24.py :258
{"name": "PostHog", "url": "https://posthog.com/docs/api", "desc": "Open source product analytics API", "cat": "Analytics"}, - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-24.py :260
{"name": "Fullstory", "url": "https://developer.fullstory.com/", "desc": "Digital experience analytics API", "cat": "Analytics"}, - suspicious endpoint mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :186
{"name": "Mixpanel", "description": "Product analytics", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://mixpanel.com"}, - suspicious endpoint amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :187
{"name": "Amplitude", "description": "Product analytics", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://amplitude.com"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :188
{"name": "Segment", "description": "Customer data platform", "category": "Data", "authType": "apiKey", "baseUrl": "https://segment.com"}, - suspicious endpoint fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :200
{"name": "FullStory", "description": "Digital experience analytics", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://fullstory.com"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :202
{"name": "Posthog", "description": "Product analytics", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://posthog.com"}, - suspicious endpoint sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :225
{"name": "Sentry", "description": "Error tracking", "category": "Monitoring", "authType": "apiKey", "baseUrl": "https://sentry.io"}, - suspicious endpoint bugsnag.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :226
{"name": "Bugsnag", "description": "Error monitoring", "category": "Monitoring", "authType": "apiKey", "baseUrl": "https://bugsnag.com"}, - suspicious endpoint datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-02-25.py :228
{"name": "Datadog", "description": "Monitoring platform", "category": "Monitoring", "authType": "apiKey", "baseUrl": "https://datadoghq.com"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-03-24-b3.py :141
{"name": "Segment API", "description": "Customer data platform", "category": "Marketing", "authType": "apiKey", "baseUrl": "https://segment.com/docs/connections/sources/catalog/libraries/"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/night-batch-03-24.py :189
{"name": "Pastebin", "description": "Plain text storage", "category": "Cloud Storage", "baseUrl": "https://pastebin.com/doc_api", "authType": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-03-24.py :313
{"name": "MixPanel", "description": "Product analytics", "category": "Analytics", "baseUrl": "https://developer.mixpanel.com/docs/implement-mixpanel", "authType": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-batch-05.py :30
{"name": "MixPanel API", "description": "Analytics for mobile and web applications", "category": "Analytics", "baseUrl": "https://developer.mixpanel.com", "authType": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-24-02.py :105
{"name": "MixPanel", "url": "https://developer.mixpanel.com/docs/implement-mixpanel", "desc": "Analytics for mobile and web applications", "cat": "Analytics"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/night-expansion-02-24-02.py :615
{"name": "Pastebin", "url": "https://pastebin.com/doc_scraping_api", "desc": "Share text or code with syntax highlighting", "cat": "Development Tools"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/night-expansion-02-25.py :200
{"name": "Pastebin", "description": "Plain Text Storage", "category": "Storage", "auth": "apiKey", "url": "https://pastebin.com"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/night-expansion-02-26.py :180
{"name": "Pastebin", "description": "Plain text storage", "category": "Cloud", "link": "https://pastebin.com/doc_api", "auth": "apiKey"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03-batch3.py :109
{"name": "Datadog API", "description": "Cloud monitoring platform", "category": "Monitoring", "authType": "apiKey", "baseUrl": "https://docs.datadoghq.com/api/latest/"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03-batch3.py :124
{"name": "Sentry API", "description": "Error tracking", "category": "Monitoring", "authType": "apiKey", "baseUrl": "https://docs.sentry.io/api/"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03-batch4.py :32
{"name": "Segment CDP", "description": "Customer data platform", "category": "CDP", "authType": "apiKey", "baseUrl": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/"}, - suspicious endpoint www.rudderstack.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03-batch4.py :34
{"name": "Rudderstack API", "description": "Customer data warehouse", "category": "CDP", "authType": "apiKey", "baseUrl": "https://www.rudderstack.com/docs/"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03.py :59
{"name": "Segment API", "description": "Customer data platform", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-a - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03.py :60
{"name": "Mixpanel API", "description": "Product analytics platform", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://developer.mixpanel.com/docs"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03.py :61
{"name": "Amplitude API", "description": "Product analytics", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://www.docs.developers.amplitude.com/"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03.py :63
{"name": "PostHog API", "description": "Open source product analytics", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://posthog.com/docs/api"}, - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-03.py :67
{"name": "FullStory API", "description": "Digital experience intelligence", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://developer.fullstory.com/"}, - suspicious endpoint sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :148
("Sentry", "Error tracking and monitoring", "DevTools", "apiKey", "https://sentry.io"), - suspicious endpoint datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :149
("Datadog", "Monitoring and analytics", "DevTools", "apiKey", "https://datadoghq.com"), - suspicious endpoint analytics.google.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :291
("Google Analytics 4", "Website analytics", "Analytics", "oauth", "https://analytics.google.com"), - suspicious endpoint mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :292
("Mixpanel", "Product analytics", "Analytics", "apiKey", "https://mixpanel.com"), - suspicious endpoint amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :293
("Amplitude", "Product analytics platform", "Analytics", "apiKey", "https://amplitude.com"), - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :295
("PostHog", "Open source product analytics", "Analytics", "apiKey", "https://posthog.com"), - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :300
("Segment", "Customer data platform", "Analytics", "apiKey", "https://segment.com"), - suspicious endpoint rudderstack.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :301
("RudderStack", "Customer data platform", "Analytics", "apiKey", "https://rudderstack.com"), - suspicious endpoint fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-04.py :332
("FullStory", "Digital experience analytics", "Analytics", "apiKey", "https://fullstory.com"), - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-06.py :32
{"name": "MixPanel", "description": "Analytics for mobile and web to analyze user actions", "category": "Analytics", "url": "https://developer.mixpanel.com/docs/implement-mixpanel", "authType": "apiKe - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/night-expansion-02-27-06.py :308
{"name": "Pastebin", "description": "Share text or code with 250+ language syntax highlighting", "category": "Miscellaneous", "url": "https://pastebin.com/doc_scraping_api", "authType": "apiKey"}, - suspicious endpoint pastebin.com nordsym-apiclaw-50f51d4/scripts/night-expansion-03-batch2.py :126
{"name": "Pastebin", "description": "Text storage", "category": "Storage", "baseUrl": "https://pastebin.com/doc_api", "authType": "apiKey"}, - suspicious endpoint analytics.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03-batch3.py :67
{"name": "Amplitude", "description": "Product analytics", "category": "Analytics", "baseUrl": "https://analytics.amplitude.com/", "authType": "apiKey"}, - suspicious endpoint heapanalytics.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03-batch3.py :68
{"name": "Heap", "description": "Digital insights platform", "category": "Analytics", "baseUrl": "https://heapanalytics.com/api/", "authType": "apiKey"}, - suspicious endpoint api.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03-batch3.py :69
{"name": "FullStory", "description": "Digital experience analytics", "category": "Analytics", "baseUrl": "https://api.fullstory.com/", "authType": "apiKey"}, - suspicious endpoint api.telegram.org nordsym-apiclaw-50f51d4/scripts/night-expansion-03-batch3.py :163
{"name": "Telegram Bot", "description": "Telegram messaging bots", "category": "Communication", "baseUrl": "https://api.telegram.org/bot", "authType": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03.py :38
{"name": "MixPanel", "description": "Analytics for mobile and web applications", "category": "Analytics", "baseUrl": "https://developer.mixpanel.com/", "authType": "apiKey"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03.py :485
{"name": "Sentry", "description": "Error tracking", "category": "Development", "baseUrl": "https://docs.sentry.io/api/", "authType": "bearer"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03.py :486
{"name": "Datadog", "description": "Monitoring platform", "category": "Development", "baseUrl": "https://docs.datadoghq.com/api/latest/", "authType": "apiKey"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03.py :489
{"name": "Segment", "description": "Customer data platform", "category": "Development", "baseUrl": "https://segment.com/docs/api/", "authType": "apiKey"}, - suspicious endpoint developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03.py :490
{"name": "Amplitude", "description": "Product analytics", "category": "Development", "baseUrl": "https://developers.amplitude.com/docs/", "authType": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-03.py :492
{"name": "PostHog", "description": "Product analytics", "category": "Development", "baseUrl": "https://posthog.com/docs/api", "authType": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-04-23.py :371
add_api("Mixpanel", "Product analytics", "Analytics", "https://developer.mixpanel.com/reference/overview", "apiKey") - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-04-23.py :372
add_api("Amplitude", "Product analytics", "Analytics", "https://www.docs.developers.amplitude.com/", "apiKey") - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-04-23.py :373
add_api("Segment", "Customer data platform", "Analytics", "https://segment.com/docs/api/", "apiKey") - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-04-23.py :402
add_api("Datadog", "Monitoring observability", "Monitoring", "https://docs.datadoghq.com/api/", "apiKey") - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-04-23.py :404
add_api("Sentry", "Error tracking", "Monitoring", "https://docs.sentry.io/api/", "apiKey") - suspicious endpoint mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :292
{"name": "Mixpanel", "desc": "Product analytics", "category": "Analytics", "url": "https://mixpanel.com"}, - suspicious endpoint amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :293
{"name": "Amplitude", "desc": "Product analytics", "category": "Analytics", "url": "https://amplitude.com"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :295
{"name": "PostHog", "desc": "Product analytics", "category": "Analytics", "url": "https://posthog.com"}, - suspicious endpoint fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :303
{"name": "FullStory", "desc": "Digital experience", "category": "Analytics", "url": "https://fullstory.com"}, - suspicious endpoint datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :309
{"name": "Datadog", "desc": "Observability platform", "category": "Monitoring", "url": "https://datadoghq.com"}, - suspicious endpoint sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :320
{"name": "Sentry", "desc": "Error tracking", "category": "Monitoring", "url": "https://sentry.io"}, - suspicious endpoint bugsnag.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :321
{"name": "Bugsnag", "desc": "Error monitoring", "category": "Monitoring", "url": "https://bugsnag.com"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :383
{"name": "Segment", "desc": "Customer data", "category": "Data", "url": "https://segment.com"}, - suspicious endpoint rudderstack.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-05-23.py :384
{"name": "RudderStack", "desc": "Customer data", "category": "Data", "url": "https://rudderstack.com"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06-23.py :43
{"name": "Datadog API", "description": "Monitoring, security, and analytics platform for cloud-scale applications", "category": "DevOps", "auth": "apiKey", "https": True, "cors": "yes", "link": "https - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06-23.py :49
{"name": "Sentry API", "description": "Application monitoring and error tracking platform", "category": "DevOps", "auth": "apiKey", "https": True, "cors": "yes", "link": "https://docs.sentry.io/api/", - suspicious endpoint developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06-23.py :175
{"name": "Amplitude API", "description": "Product analytics platform", "category": "Marketing", "auth": "apiKey", "https": True, "cors": "yes", "link": "https://developers.amplitude.com/docs/apis", "p - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06-23.py :176
{"name": "Mixpanel API", "description": "Product analytics for mobile and web", "category": "Marketing", "auth": "apiKey", "https": True, "cors": "yes", "link": "https://developer.mixpanel.com/docs", - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06-23.py :177
{"name": "Segment API", "description": "Customer data platform", "category": "Marketing", "auth": "apiKey", "https": True, "cors": "yes", "link": "https://segment.com/docs/connections/sources/catalog/ - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06.py :115
{"id": "mixpanel-api", "name": "Mixpanel API", "description": "Product analytics platform", "category": "analytics", "auth": "apiKey", "https": True, "link": "https://developer.mixpanel.com", "pricing - suspicious endpoint developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06.py :116
{"id": "amplitude-api", "name": "Amplitude API", "description": "Digital analytics platform", "category": "analytics", "auth": "apiKey", "https": True, "link": "https://developers.amplitude.com", "pri - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06.py :117
{"id": "segment-api", "name": "Segment API", "description": "Customer data platform", "category": "analytics", "auth": "apiKey", "https": True, "link": "https://segment.com/docs/api/", "pricing": "fre - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06.py :118
{"id": "posthog-api", "name": "PostHog API", "description": "Open-source product analytics", "category": "analytics", "auth": "apiKey", "https": True, "link": "https://posthog.com/docs/api", "pricing" - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06.py :236
{"id": "sentry-api", "name": "Sentry API", "description": "Error tracking and monitoring", "category": "development", "auth": "apiKey", "https": True, "link": "https://docs.sentry.io/api/", "pricing": - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion-06.py :237
{"id": "datadog-api", "name": "Datadog API", "description": "Observability platform", "category": "development", "auth": "apiKey", "https": True, "link": "https://docs.datadoghq.com/api/", "pricing": - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion.py :158
{"name": "Mixpanel API", "description": "Product analytics API", "category": "Analytics", "link": "https://developer.mixpanel.com/reference/overview", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion.py :159
{"name": "Amplitude API", "description": "Product analytics platform API", "category": "Analytics", "link": "https://www.docs.developers.amplitude.com/", "auth": "apiKey"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion.py :160
{"name": "Segment API", "description": "Customer data platform API", "category": "Analytics", "link": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/", "auth": "apiKey - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-expansion.py :162
{"name": "PostHog API", "description": "Open-source product analytics API", "category": "Analytics", "link": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :207
("Mixpanel", "Product analytics", "https://developer.mixpanel.com/"), - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :208
("Amplitude", "Product analytics", "https://www.docs.developers.amplitude.com/"), - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :209
("Segment", "Customer data platform", "https://segment.com/docs/api/"), - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :210
("PostHog", "Product analytics", "https://posthog.com/docs/api"), - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :213
("FullStory", "Digital experience", "https://developer.fullstory.com/"), - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :492
("Sentry", "Error tracking", "https://docs.sentry.io/api/"), - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/night-mega-batch-04-23.py :498
("Datadog", "Monitoring", "https://docs.datadoghq.com/api/"), - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse-public-apis.py :607
{"name": "Datadog", "description": "Monitoring platform", "category": "Developer Tools", "baseUrl": "https://docs.datadoghq.com/api/"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/parse-public-apis.py :609
{"name": "Sentry", "description": "Error tracking", "category": "Developer Tools", "baseUrl": "https://docs.sentry.io/api/"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse-public-apis.py :616
{"name": "Mixpanel", "description": "Product analytics", "category": "Analytics & Data", "baseUrl": "https://developer.mixpanel.com/reference"}, - suspicious endpoint developers.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse-public-apis.py :617
{"name": "Amplitude", "description": "Product analytics", "category": "Analytics & Data", "baseUrl": "https://developers.amplitude.com/docs/"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse-public-apis.py :618
{"name": "Segment", "description": "Customer data", "category": "Analytics & Data", "baseUrl": "https://segment.com/docs/connections/sources/catalog/"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse-public-apis.py :620
{"name": "PostHog", "description": "Product analytics", "category": "Analytics & Data", "baseUrl": "https://posthog.com/docs/api"}, - suspicious endpoint api.telegram.org nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :409
{"name": "Telegram Bot", "description": "Telegram bot API", "category": "Messaging", "baseUrl": "https://api.telegram.org", "docsUrl": "https://core.telegram.org/bots/api"}, - suspicious endpoint sentry.io (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :447
{"name": "Sentry", "description": "Error monitoring", "category": "Developer Tools", "baseUrl": "https://sentry.io/api", "docsUrl": "https://docs.sentry.io/api"}, - suspicious endpoint api.datadoghq.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :448
{"name": "Datadog", "description": "Monitoring platform", "category": "Developer Tools", "baseUrl": "https://api.datadoghq.com", "docsUrl": "https://docs.datadoghq.com/api"}, - suspicious endpoint mixpanel.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :459
{"name": "Mixpanel", "description": "Product analytics", "category": "Analytics", "baseUrl": "https://mixpanel.com/api", "docsUrl": "https://developer.mixpanel.com"}, - suspicious endpoint api.amplitude.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :460
{"name": "Amplitude", "description": "Digital analytics", "category": "Analytics", "baseUrl": "https://api.amplitude.com", "docsUrl": "https://developers.amplitude.com"}, - suspicious endpoint api.segment.io (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :462
{"name": "Segment", "description": "Customer data platform", "category": "Analytics", "baseUrl": "https://api.segment.io", "docsUrl": "https://segment.com/docs"}, - suspicious endpoint app.posthog.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :463
{"name": "PostHog", "description": "Product analytics", "category": "Analytics", "baseUrl": "https://app.posthog.com/api", "docsUrl": "https://posthog.com/docs/api"}, - suspicious endpoint api.fullstory.com (telemetry) nordsym-apiclaw-50f51d4/scripts/parse_pweb_archive.py :467
{"name": "FullStory", "description": "Digital experience analytics", "category": "Analytics", "baseUrl": "https://api.fullstory.com", "docsUrl": "https://developer.fullstory.com"},
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 403
filesystem 7
- fs nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch2.py :9
from pathlib import Path - fs nordsym-apiclaw-50f51d4/night-expansion-02-26-06-batch3.py :9
from pathlib import Path - fs nordsym-apiclaw-50f51d4/night-expansion-02-26-06.py :11
from pathlib import Path - fs nordsym-apiclaw-50f51d4/night-expansion-02-27-05-batch2.py :259
with open(output_file, "w") as f: - fs nordsym-apiclaw-50f51d4/night-expansion-02-27-05-batch3.py :251
with open(output_file, "w") as f: - fs nordsym-apiclaw-50f51d4/night-expansion-02-27-05-batch4.py :204
with open(output_file, "w") as f: - fs nordsym-apiclaw-50f51d4/night-expansion-02-27-05.py :417
with open(output_file, "w") as f: