reverse-api-engineer
A plugin to reverse engineer APIs from websites
Summary
Reverse API Engineer captures network traffic from a website as you browse (manually or via an AI agent) and generates a clean, typed API client in Python, JavaScript, or TypeScript.
- It saves developers hours of manual inspection by automatically extracting endpoints, request parameters, and response structures from real browser interactions.
Overview
<div align="center"> <img src="https://raw.githubusercontent.com/kalil0321/reverse-api-engineer/main/assets/reverse-api-banner.png" alt="Reverse API Engineer Banner"> <br><br> <a href="https://pypi.org/project/reverse-api-engineer/"><img src="https://img.shields.io/pypi/v/reverse-api-engineer?style=flat&color=e50d75&labelColor=1f1f1f" alt="PyPI"></a> <a href="https://www.python.org/downloads/"><img src="https://img.shields.io/badge/python-3.11+-e50d75?style=flat&labelColor=1f1f1f" alt="Python"></a> <a href="https://opensource.org/licenses/MIT"><img src="https://img.shields.io/badge/license-MIT-e50d75?style=flat&labelColor=1f1f1f" alt="License"></a> </div>
Reverse API Engineer
Turn websites into APIs. Browse (or let an agent browse), and get a clean, typed client for the endpoints the site actually uses.
<p align="center"> <img src="https://raw.githubusercontent.com/kalil0321/reverse-api-engineer/main/assets/rae-autoscout.gif" alt="Agent Mode Demo"> <br> <em>Agent mode</em> </p>
<p align="center"> <img src="https://raw.githubusercontent.com/kalil0321/reverse-api-engineer/main/assets/reverse-api-engineer.gif" alt="Manual Mode Demo"> <br> <em>Manual mode</em> </p>
How it works
- You give it a website and a goal ("fetch all Apple jobs").
- A browser visits the site, either driven by you or by an AI agent.
- Network traffic is captured to a HAR file.
- Claude reads the traffic and writes you a working API client (Python, JS, or TS).
No more manually opening DevTools, copying cURL commands, and gluing together a client.
Install
uv tool install reverse-api-engineer # or: pip install reverse-api-engineer
playwright install chromiumQuick start
reverse-api-engineer
> fetch all apple jobs from their careers page
# Browser opens. Navigate, interact, close when done.
# → ./scripts/apple_jobs_api/ (api_client.py, README.md, example_usage.py)Cycle modes with Shift+Tab:
| Mode | What it does |
|---|---|
manual | You drive the browser; AI generates the client from captured traffic. |
agent | An AI agent drives capture autonomously (Playwright or Chrome MCP, or Vercel agent-browser CLI). |
engineer | Re-run generation on a previous capture (engineer <run_id>). |
collector | Agent collects structured data (JSON/CSV) using web search + fetch. |
Agent mode providers:
- •auto (default): Playwright MCP, single workflow for browsing + reverse engineering.
- •chrome-mcp: drives your real Chrome so you keep existing sessions/cookies. Requires Chrome 146+ and Node.js 20.19+.
- •agent-browser: Vercel agent-browser CLI (not a Reverse API Engineer browser MCP server). At session start RAE uses whatever
agent-browseris already onPATH, otherwise runs `npm install -g <pin>` (same pin as config /RAE_AGENT_BROWSER_PACKAGE), prints a yellow notice, validates with `--help`, and only then falls back to `npx -y <pin>` if npm cannot install. Prompts embed the resolved shell prefix alongside `skills get core --full`, `skills list`, HAR phases, cloud notes fromagent_browser_notes. Tune withagent_browser_npx_package(optional), envRAE_AGENT_BROWSER_*. First Chromium fetch: `agent-browser install` (add--with-depson trimmed Linux).
Optional sanity checks:
agent-browser doctor --offline --quick || true
agent-browser skills list >/dev/nullConfiguration
Settings live in ~/.reverse-api/config.json and can be edited via /settings in the CLI:
{
"agent_provider": "auto",
"agent_browser_npx_package": "agent-browser@0",
"agent_browser_notes": "",
"claude_code_model": "claude-sonnet-4-6",
"collector_model": "claude-sonnet-4-6",
"opencode_model": "claude-sonnet-4-6",
"opencode_provider": "anthropic",
"copilot_model": "gpt-5",
"cursor_model": "composer-2.5",
"output_dir": null,
"output_language": "python",
"real_time_sync": true,
"sdk": "claude"
}- •Models: Sonnet 4.6 (default), Opus 4.6 (most capable), Haiku 4.5 (fastest). For OpenCode see models.dev.
- •SDK:
claude(default),opencode,cursor, orcopilot(GitHub Copilot). - •Output language:
python,javascript, ortypescript.
CLI
Slash commands inside the CLI:
- •
/settings: configure model, SDK, agent provider, and sync settings. - •
/history: list past runs with timestamps, costs, and status. - •
/messages <run_id>: view detailed message logs for a run. - •
/help(alias:/commands): show the command list. - •
/exit(alias:/quit): leave the CLI.
Scriptable subcommands (pipe to jq):
reverse-api-engineer agent --prompt "capture the public jobs api" \
--url https://example.com/jobs --json | jq
reverse-api-engineer list --json
reverse-api-engineer show <run_id> --json
reverse-api-engineer run <run_id> --file api_client.py \
--no-interactive --auto-install -- --org acmePass --no-interactive (and/or --json) to skip prompts. With --json, stdout is one JSON document and logs go to stderr.
agent --json schema
| Field | Type | Notes | |
|---|---|---|---|
schema_version | int | Currently 1. | |
status | "ok" \ | "error" | Top-level result. |
run_id | string \ | null | Use with show / engineer / run. |
prompt | string | ||
url | string \ | null | |
mode | string \ | null | "auto", "chrome-mcp", or "agent-browser". |
har_path | string \ | null | Captured HAR. |
script_path | string \ | null | Generated client. |
usage | object | {input_tokens, output_tokens, total_cost}. | |
error | string \ | null | When status == "error". |
Exit codes
| Code | Meaning |
|---|---|
0 | Success. |
1 | Runtime error. |
2 | Missing required arg under --no-interactive / --json. |
For run, the exit code is the underlying script's return code on success, 1 if no script was found, or non-zero if --no-interactive would have had to prompt.
Output locations
- •
~/.reverse-api/runs/scripts/{run_id}/: permanent storage - •
./scripts/{descriptive_name}/: local copy with a readable name - •Collector:
./collected/{folder_name}/(items.json,items.csv,README.md)
Caveats
- •Generated code runs locally via Claude Code, so review before executing.
- •Sites with aggressive bot detection may block capture or require manual interaction.
Development
git clone https://github.com/kalil0321/reverse-api-engineer.git
cd reverse-api-engineer
uv sync
uv run reverse-api-engineerBuild: ./scripts/clean_build.sh. Requires Python 3.11+, Playwright browsers, and an API key for agent mode.
License
MIT. See LICENSE.
Install & Usage
/plugin marketplace add <org/repo>Add the configuration to /plugin install reverse-api-engineer@<marketplace>
/pluginUse Cases
Usage Examples
Visit https://example.com/jobs and capture network traffic to generate a Python client for fetching all job listings.
Browse to the Apple careers page and let the agent navigate; then produce a TypeScript client for the jobs API.
Record HAR traffic from a login flow on a web app and create a JavaScript client for authentication endpoints.
Security Audits
Frequently Asked Questions
What is reverse-api-engineer?
Reverse API Engineer captures network traffic from a website as you browse (manually or via an AI agent) and generates a clean, typed API client in Python, JavaScript, or TypeScript. It saves developers hours of manual inspection by automatically extracting endpoints, request parameters, and response structures from real browser interactions.
How to install reverse-api-engineer?
To install reverse-api-engineer: add a marketplace (/plugin marketplace add <org/repo>), then add the config to /plugin install reverse-api-engineer@<marketplace>. Finally, /plugin in Claude Code.
What is reverse-api-engineer best for?
reverse-api-engineer is a plugin categorized under General. It is designed for: api, plugin. Created by Kalil Sama Bouzigues.
What can I use reverse-api-engineer for?
reverse-api-engineer is useful for: Extract a typed API client from a web app that has no public API documentation.; Automatically generate a Python client for fetching job listings from a company careers page.; Reverse engineer the internal API of a SaaS platform to build custom integrations.; Create a TypeScript client for a social media site's hidden endpoints to scrape public data.; Quickly prototype an API wrapper for a legacy web application by recording a few user interactions.; Generate a JavaScript client for an e-commerce site's search and product endpoints..