vulkro discover
List every API endpoint in a project without running the security checks. It is faster than scan when you only need the route inventory.
vulkro discover .
vulkro discover . --format json > endpoints.json
For each endpoint it reports the HTTP method, route path, file and line, handler (when found) and auth status (Protected, Unprotected or Unknown). It honours .gitignore.
$ vulkro discover ./api
Detected: Python | FastAPI
124 endpoints
GET /api/auth/refresh [Protected] app/routes/auth.py:42
POST /api/auth/login [Unprotected] app/routes/auth.py:67
GET /api/recipes/{slug} [Protected] app/routes/recipes.py:113
Flags
| Flag | Description |
|---|---|
[PATH] | Project root. Default .. |
-f, --format <FMT> | table (default), json, csv, evidence-graph and the other output formats. |
--no-cache | Re-read every file instead of using the extraction cache. |
--force-app | Scan a repo even when its manifest names it as a known framework (such repos are skipped as framework source by default). |
--force-all-rules | Run every rule, even ones that do not apply to the detected project type. |
--include-unreachable | Show items in files no entry point reaches (hidden by default in the table). |
Exit codes
0 success, 2 bad argument or internal error. It never reports findings, so it never returns 1.
See also: vulkro openapi (the endpoints as OpenAPI), vulkro scan.