Features

What Atlas does, and where

The same app, in two places. The browser version covers most of it; a few things only the desktop app can reach.

Discovery

CapabilityBrowserDesktop app
Scan a public GitHub repository
Paste owner/repo and go.
Scan a private GitHub repository
Connect GitHub with read-only access.
Scan a folder on your machine
Including uncommitted work and code that never leaves your machine.
Routes, methods and full paths
Resolved through every router mount.
Request shapes
Fields with types, validation rules and enum values.
Response conditions
Every status an endpoint can return, with its message.
Database access per route
Tables read and written, and the query behind each one.
Security findings
Missing auth on destructive routes, unvalidated input, possible IDOR.
Dead route detection
Routes that will never run, and why.
Database map
Which endpoints touch which tables, across the whole project.

Testing

CapabilityBrowserDesktop app
Call any public API
No CORS to configure.
Call localhost
Browsers block this. The desktop app does not.
Call a private network host
Staging boxes, containers, anything on your network.
Collections and folders
Drag to organise, multi-select, full undo.
Environments and variables
Reusable values across every request.
Flows
Pass values from one response into the next request.
Captures
Save a response against the endpoint it came from.
Import cURL, OpenAPI, Postman
Paste a cURL command or drop a spec file.
Generate models
TypeScript, Zod, JSON Schema, Dart, Python, Go from any response.
Work offline
Everything except the request itself.

Accounts

Without an account

  • Scan any public GitHub repository
  • Call any public API
  • Collections stay in this browser

Nothing is sent to us.

With an account

  • Everything above
  • Connect GitHub to scan private repositories
  • Scans and collections follow you across devices

We never store your source code.

Try it on something real