Agent Wranglers

API security Required

List every API you run

Keep a list of every API, version and host you expose, and switch off what is no longer used.

By Erik Bergstedt, Agent Wranglers. Updated .

How to do it

Generate the list from the contracts, and publish it as in the API catalog rule. Retire unlisted, old and test endpoints, because attackers find forgotten ones first.

How to check

Compare the list with the routes the servers answer. Every live route is on the list.

For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers api design playbook: https://agentwranglers.se/playbook/api-design/api-security/inventory.