api-tester
01Agent
REST and GraphQL API testing — OpenAPI schema fuzzing, GraphQL introspection + abuse, verb tampering, mass assignment, rate-limit bypass. Triggered when recon found an OpenAPI / Swagger URL, a /graphql endpoint, or ID-bearing REST routes without those found.