Repository: https://github.com/20121113jp/api-sentinel

API Sentinel

Real-time API security & rate-limit analyzer for microservices

Overview

API Sentinel automatically scans your codebase for API endpoints, detecting security vulnerabilities, rate-limit issues, and authentication gaps before production deployment.

Features

• 🛡️ Security Scan: Detects unprotected endpoints, weak auth patterns
• 📊 Rate Limit Analysis: Identifies missing or misconfigured rate limits
• 🔍 Dependency Check: Tracks API version compatibility
• 📈 Performance Metrics: Analyzes endpoint response patterns
• 📋 JSON Export: Full audit trail for compliance

Usage

# Scan project for API vulnerabilities
python scan.py /path/to/project --format json

# Generate HTML report
python scan.py /path/to/project --report html --output report.html

# Check specific framework (Flask, Django, FastAPI)
python scan.py /path/to/project --framework fastapi

Output Example

{
  "project": "myapp",
  "total_endpoints": 24,
  "security_issues": [
    {
      "endpoint": "/api/users",
      "method": "GET",
      "issue": "Missing authentication",
      "severity": "CRITICAL",
      "file": "src/users.py:45"
    }
  ],
  "rate_limits": {
    "configured": 18,
    "missing": 6
  }
}

Requirements

• Python 3.11+
• No external dependencies (stdlib only)

License

MIT