Your agent calls real APIs. You sign in once. Authenticated execution and discovery layer for AI agents: SKILL.md, MCP, CLI, HTTP.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 57dde45 · analyzer v33 · 5d ago
skills & prompt files 2
danger signals41
- suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch2.py :136
{"name": "Datadog", "desc": "Monitoring platform", "cat": "DevOps", "url": "https://docs.datadoghq.com/api/", "auth": "apiKey"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch2.py :138
{"name": "Sentry", "desc": "Error tracking", "cat": "DevOps", "url": "https://docs.sentry.io/api/", "auth": "apiKey"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :187
{"name": "Segment", "desc": "Customer data platform", "cat": "Analytics", "url": "https://segment.com/docs/connections/sources/catalog/", "auth": "apiKey"}, - suspicious endpoint www.rudderstack.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :189
{"name": "RudderStack", "desc": "Customer data platform", "cat": "Analytics", "url": "https://www.rudderstack.com/docs/", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :190
{"name": "Amplitude", "desc": "Product analytics", "cat": "Analytics", "url": "https://www.docs.developers.amplitude.com/", "auth": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :192
{"name": "PostHog", "desc": "Product analytics", "cat": "Analytics", "url": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :193
{"name": "Mixpanel API", "desc": "Product analytics", "cat": "Analytics", "url": "https://developer.mixpanel.com/reference/", "auth": "apiKey"}, - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :194
{"name": "FullStory", "desc": "Digital experience", "cat": "Analytics", "url": "https://developer.fullstory.com/", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-26-06.py :322
{"name": "MixPanel", "desc": "Product analytics", "cat": "Analytics", "url": "https://developer.mixpanel.com/", "auth": "apiKey"}, - suspicious endpoint pastebin.com nordsym-apiclaw-57dde45/night-expansion-02-26-06.py :581
{"name": "Pastebin", "desc": "Text storage", "cat": "Tools", "url": "https://pastebin.com/doc_api", "auth": "apiKey"}, - suspicious endpoint www.fullstory.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-27-05-batch2.py :73
{"name": "FullStory", "description": "Digital experience analytics", "category": "Marketing", "baseUrl": "https://www.fullstory.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint www.datadoghq.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-27-05.py :222
{"name": "Datadog", "description": "Monitoring and analytics platform", "category": "Monitoring", "baseUrl": "https://www.datadoghq.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint sentry.io (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-27-05.py :224
{"name": "Sentry", "description": "Error monitoring and performance", "category": "Monitoring", "baseUrl": "https://sentry.io/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint mixpanel.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-27-05.py :226
{"name": "Mixpanel", "description": "Product analytics platform", "category": "Analytics", "baseUrl": "https://mixpanel.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint amplitude.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-27-05.py :227
{"name": "Amplitude", "description": "Product analytics", "category": "Analytics", "baseUrl": "https://amplitude.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-57dde45/night-expansion-02-27-05.py :229
{"name": "PostHog", "description": "Open source product analytics", "category": "Analytics", "baseUrl": "https://posthog.com/", "authType": "apiKey", "pricing": "freemium"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/scripts/add-public-apis.py :48
{"name": "MixPanel", "description": "Analytics for mobile and web", "category": "Analytics", "link": "https://developer.mixpanel.com/docs/implement-mixpanel", "auth": "apiKey"}, - suspicious endpoint pastebin.com nordsym-apiclaw-57dde45/scripts/add-public-apis.py :293
{"name": "Pastebin", "description": "Share text or code quickly", "category": "Development", "link": "https://pastebin.com/doc_scraping_api", "auth": "apiKey"}, - suspicious endpoint 0x0.st nordsym-apiclaw-57dde45/scripts/bulk-add-public-apis-v2.py :177
{"name": "The Null Pointer", "description": "No-bullshit file hosting and URL shortening service", "category": "Cloud Storage", "link": "https://0x0.st", "auth": "None"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-57dde45/scripts/bulk-add-public-apis-v2.py :358
API", "category": "Analytics", "link": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-57dde45/scripts/bulk-add-public-apis-v2.py :359
{"name": "Amplitude", "description": "Product analytics API", "category": "Analytics", "link": "https://www.docs.developers.amplitude.com/analytics/apis/http-v2-api/", "auth": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-57dde45/scripts/bulk-add-public-apis-v2.py :361
{"name": "PostHog", "description": "Product analytics API", "category": "Analytics", "link": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-2026-batch.py :142
{"name": "PostHog", "description": "Open source product analytics", "category": "Analytics", "link": "https://posthog.com/docs/api", "auth": "apiKey"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-2026-batch.py :149
{"name": "Mixpanel", "description": "Product analytics", "category": "Analytics", "link": "https://developer.mixpanel.com/", "auth": "apiKey"}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-2026-batch.py :150
{"name": "Amplitude", "description": "Digital analytics platform", "category": "Analytics", "link": "https://www.docs.developers.amplitude.com/", "auth": "apiKey"}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-57dde45/scripts/expand-2026-batch.py :156
{"name": "Sentry", "description": "Error tracking and monitoring", "category": "Monitoring", "link": "https://docs.sentry.io/", "auth": "apiKey"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-2026-batch.py :162
{"name": "Datadog", "description": "Cloud monitoring", "category": "Monitoring", "link": "https://docs.datadoghq.com/api/", "auth": "apiKey"}, - suspicious endpoint docs.datadoghq.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-more.py :183
tps": True, "cors": "unknown", "link": "https://docs.datadoghq.com/api/", "pricing": "paid", "keywords": ["monitoring", "datadog", "observability"]}, - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-57dde45/scripts/expand-more.py :192
"https": True, "cors": "yes", "link": "https://docs.sentry.io/api/", "pricing": "freemium", "keywords": ["sentry", "errors", "debugging"]}, - suspicious endpoint developer.fullstory.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-more.py :196
tps": True, "cors": "unknown", "link": "https://developer.fullstory.com/", "pricing": "paid", "keywords": ["fullstory", "analytics", "sessions"]}, - suspicious endpoint posthog.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-more.py :199
"https": True, "cors": "yes", "link": "https://posthog.com/docs/api", "pricing": "freemium", "keywords": ["posthog", "analytics", "open-source"]}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-registry.py :237
tps": True, "cors": "unknown", "link": "https://developer.mixpanel.com/reference", "pricing": "freemium", "keywords": ["analytics", "mixpanel"]}, - suspicious endpoint www.docs.developers.amplitude.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-registry.py :238
tps": True, "cors": "unknown", "link": "https://www.docs.developers.amplitude.com/", "pricing": "freemium", "keywords": ["analytics", "amplitude"]}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-57dde45/scripts/expand-registry.py :239
tps": True, "cors": "unknown", "link": "https://segment.com/docs/connections/sources/catalog/libraries/server/http-api/", "pricing": "freemium", "keywords": ["analytics", "segment", "cdp"]}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/scripts/extract-agent2-apis.py :399
{"name": "MixPanel API", "url": "https://developer.mixpanel.com/", "desc": "Product analytics API", "cat": "Analytics"}, - suspicious endpoint developer.mixpanel.com (telemetry) nordsym-apiclaw-57dde45/scripts/extract-apis-02-27.py :142
{"name": "MixPanel", "description": "Analytics for mobile and web applications", "category": "Analytics", "authType": "apiKey", "baseUrl": "https://developer.mixpanel.com/"}, - suspicious endpoint pastebin.com nordsym-apiclaw-57dde45/scripts/extract-apis-02-27.py :556
{"name": "Pastebin", "description": "Plain Text Storage", "category": "Storage", "authType": "apiKey", "baseUrl": "https://pastebin.com/"}, - suspicious endpoint 0x0.st nordsym-apiclaw-57dde45/scripts/extract-apis-02-27.py :560
{"name": "The Null Pointer", "description": "File hosting and URL shortening", "category": "Storage", "authType": "none", "baseUrl": "https://0x0.st"}, - suspicious endpoint segment.com (telemetry) nordsym-apiclaw-57dde45/scripts/final-batch.py :158
("Segment API", "CDP API", "https://segment.com/docs/connections/sources/catalog/"), - suspicious endpoint docs.sentry.io (telemetry) nordsym-apiclaw-57dde45/scripts/mass-scrape.py :451
{"name": "Sentry", "description": "Error tracking and monitoring", "category": "Developer Tools", "link": "https://docs.sentry.io/api/", "auth": "apiKey", "pricing": "freemium"}, - suspicious bundled script suspicious bundled script nordsym-apiclaw-57dde45/landing/public/install.ps1 :115
Write-Host " iwr -useb https://apiclaw.cloud/install.ps1 | iex" -ForegroundColor Yellow
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 536
filesystem 86
- fs nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch2.py :9
from pathlib import Path - fs nordsym-apiclaw-57dde45/night-expansion-02-26-06-batch3.py :9
from pathlib import Path - fs nordsym-apiclaw-57dde45/night-expansion-02-26-06.py :11
from pathlib import Path - fs nordsym-apiclaw-57dde45/night-expansion-02-27-05-batch2.py :259
with open(output_file, "w") as f: - fs nordsym-apiclaw-57dde45/night-expansion-02-27-05-batch3.py :251
with open(output_file, "w") as f: - fs nordsym-apiclaw-57dde45/night-expansion-02-27-05-batch4.py :204
with open(output_file, "w") as f: - fs nordsym-apiclaw-57dde45/night-expansion-02-27-05.py :417
with open(output_file, "w") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/add-public-apis.py :9
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/add-to-registry.py :11
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/aggregate-all.py :10
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/batch2-02-27.py :8
with open(existing_file) as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/bonus-batch.py :8
from pathlib import Path
show 28 more
- fs (weak) nordsym-apiclaw-57dde45/scripts/bulk-add-public-apis-v2.py :8
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/clean-registry.py :82
with open("src/registry/apis.json") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-2026-batch.py :9
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-apis.py :371
with open("/Users/gustavhemmingsson/Projects/apiclaw/data/expanded-apis.json", "w") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-from-github.py :8
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-more.py :9
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-n4ze3m.py :7
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-niche-batch.py :8
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-nordic-niche.py :7
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-registry.py :12
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/expand-tonnyL.py :7
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/extract-agent2-apis.py :541
with open('/Users/gustavhemmingsson/Projects/apiclaw/src/registry/apis.json') as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/extract-apis-02-27.py :9
with open(existing_file) as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/extract-rapidapi.py :14
with open(snapshot_file, 'r') as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/final-batch.py :8
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/final-push-06.py :14
with open(REGISTRY_PATH, 'r') as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/generate-apis.py :619
with open("/Users/gustavhemmingsson/Projects/apiclaw/data/generated-apis.json", "w") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/mass-scrape.py :13
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/mega-expansion.py :12
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/mega-final-06.py :14
with open(REGISTRY_PATH, 'r') as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/merge-expansion-v2.py :39
with open("src/registry/apis.json") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/merge-expansion.py :32
with open("src/registry/apis.json") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/merge-to-registry.py :8
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/more-apis.py :8
from pathlib import Path - fs (weak) nordsym-apiclaw-57dde45/scripts/night-batch-02-24.py :330
with open(REGISTRY_PATH, 'r') as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/night-batch-02-25.py :462
with open(output_file, "w") as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/night-batch-03-24-b2.py :326
with open(registry_file, 'r') as f: - fs (weak) nordsym-apiclaw-57dde45/scripts/night-batch-03-24-b3.py :223
with open(registry_file, 'r') as f:
46 more not shown — this panel samples each group; the count above is the real total.
shell / exec 2
- shell (weak) nordsym-apiclaw-57dde45/scripts/merge-expansion-v2.py :83
os.system("cp src/registry/apis.json dist/registry/apis.json 2>/dev/null") - shell (weak) nordsym-apiclaw-57dde45/scripts/night-batch-03-24.py :9
import subprocess
network 5
- net (weak) nordsym-apiclaw-57dde45/scripts/expand-registry.py :13
import urllib.request - net (weak) nordsym-apiclaw-57dde45/scripts/mass-scrape.py :9
import requests - net (weak) nordsym-apiclaw-57dde45/scripts/night-expansion-06.py :8
import urllib.request - net (weak) nordsym-apiclaw-57dde45/scripts/night-expansion.py :9
import urllib.request - net (weak) nordsym-apiclaw-57dde45/scripts/scrape-rapidapi.py :8
import requests