Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c69b6486292bf542fc205818085360486ebae68b
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /v1/Account/Clients
GET /v1/{ClientId}/Accounts
GET /v1/{ClientId}/BankAccounts
GET /v1/{ClientId}/BankAccounts/{UserBankAccountId}
GET /v1/{ClientId}/BankAccounts/{UserBankAccountId}/Transactions
GET /v1/{ClientId}/Calendar
GET /v1/{ClientId}/Cards/Checkouts/{CardCheckoutId}
GET /v1/{ClientId}/Cards/Fees
GET /v1/{ClientId}/Cards/Payments/Schedules
GET /v1/{ClientId}/Cards/Payments/Schedules/{ScheduleId}
GET /v1/{ClientId}/Cards/Registrations
GET /v1/{ClientId}/Cards/Registrations/{CardRegistrationId}
GET /v1/{ClientId}/Client
GET /v1/{ClientId}/Client/BankAccounts
GET /v1/{ClientId}/Client/BankAccounts/{ClientBankAccountId}
GET /v1/{ClientId}/Client/BankAccounts/{ClientBankAccountId}/PayIns
GET /v1/{ClientId}/Countries
GET /v1/{ClientId}/Events
GET /v1/{ClientId}/Events/Types
GET /v1/{ClientId}/Hooks
GET /v1/{ClientId}/Hooks/{HookId}
GET /v1/{ClientId}/Kyc/Documents
GET /v1/{ClientId}/Kyc/Documents/{KycDocumentId}
GET /v1/{ClientId}/OpenBanking/Account/Authorize
GET /v1/{ClientId}/OpenBanking/Account/Connect
GET /v1/{ClientId}/OpenBanking/Payment/{PaymentId}
GET /v1/{ClientId}/OpenBanking/Providers
GET /v1/{ClientId}/PayIns/{PayInId}
GET /v1/{ClientId}/PayOuts/{PayOutId}
GET /v1/{ClientId}/Refunds/{RefundId}
GET /v1/{ClientId}/Reports
GET /v1/{ClientId}/Reports/{ReportId}
GET /v1/{ClientId}/Search
GET /v1/{ClientId}/Transactions
GET /v1/{ClientId}/Transactions/{TransactionId}
GET /v1/{ClientId}/Transfers/{TransferId}
GET /v1/{ClientId}/Users
GET /v1/{ClientId}/Users/{UserId}
GET /v1/{ClientId}/Users/{UserId}/BankAccounts
GET /v1/{ClientId}/Users/{UserId}/BankVerifications
GET /v1/{ClientId}/Users/{UserId}/Transactions
GET /v1/{ClientId}/Users/{UserId}/Wallets
GET /v1/{ClientId}/Wallets
GET /v1/{ClientId}/Wallets/{FundType}/{Currency}/Transactions
GET /v1/{ClientId}/Wallets/{WalletId}
GET /v1/{ClientId}/Wallets/{WalletId}/Transactions
POST /v1/Kyc/Northrow/Checks
POST /v1/{ClientId}/Cards/Checkouts
POST /v1/{ClientId}/Cards/Notifications
POST /v1/{ClientId}/Kyc/Documents/{KycDocumentId}/Pages
POST /v1/{ClientId}/OpenBanking/Events
POST /v1/{ClientId}/PayIns/BankWire/Direct
POST /v1/{ClientId}/PayIns/Card
POST /v1/{ClientId}/PayIns/OpenBanking
POST /v1/{ClientId}/PayIns/OpenBanking/{PayInId}
POST /v1/{ClientId}/PayOuts/BankWire
POST /v1/{ClientId}/Reports/Credit
POST /v1/{ClientId}/Reports/Transactions
POST /v1/{ClientId}/Reports/Wallets
POST /v1/{ClientId}/Transfers
POST /v1/{ClientId}/Transfers/{TransferId}/refund
POST /v1/{ClientId}/Users/Legal
POST /v1/{ClientId}/Users/Natural
POST /v1/{ClientId}/Users/{UserId}/BankAccounts/Gb
POST /v1/{ClientId}/Users/{UserId}/BankAccounts/Iban
POST /v1/{ClientId}/Users/{UserId}/BankAccounts/Other
PUT /v1/{ClientId}/Accounts/{AccountId}
PUT /v1/{ClientId}/Cards/Checkouts/{CardCheckoutId}/Complete
PUT /v1/{ClientId}/Cards/Payments/Schedules/{ScheduleId}/Cancel
PUT /v1/{ClientId}/Cards/Registrations/{CardRegistrationId}/Complete
PUT /v1/{ClientId}/Transfers/ChangeOwners
PUT /v1/{ClientId}/Transfers/{TransferId}/ChangeOwner
PUT /v1/{ClientId}/Users/Legal/{UserId}
PUT /v1/{ClientId}/Users/Natural/{UserId}
PUT /v1/{ClientId}/Users/{UserId}/BankAccounts/{BankAccountId}
PUT /v1/{ClientId}/Users/{UserId}/BankVerifications/{BankVerificationId}/Complete
PUT /v1/{ClientId}/Users/{UserId}/Hide
PUT /v1/{ClientId}/Users/{UserId}/Show
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549c69b6486292bf542fc20581808536048e7fcb6f1
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
GET /v1/Account/Clients
GET /v1/{ClientId}/Accounts
GET /v1/{ClientId}/BankAccounts
GET /v1/{ClientId}/BankAccounts/{UserBankAccountId}
GET /v1/{ClientId}/BankAccounts/{UserBankAccountId}/Transactions
GET /v1/{ClientId}/Cards/Checkouts/{CardCheckoutId}
GET /v1/{ClientId}/Cards/Fees
GET /v1/{ClientId}/Cards/Payments/Schedules
GET /v1/{ClientId}/Cards/Payments/Schedules/{ScheduleId}
GET /v1/{ClientId}/Cards/Registrations
GET /v1/{ClientId}/Cards/Registrations/{CardRegistrationId}
GET /v1/{ClientId}/Client
GET /v1/{ClientId}/Client/BankAccounts
GET /v1/{ClientId}/Client/BankAccounts/{ClientBankAccountId}
GET /v1/{ClientId}/Client/BankAccounts/{ClientBankAccountId}/PayIns
GET /v1/{ClientId}/Countries
GET /v1/{ClientId}/Events
GET /v1/{ClientId}/Events/Types
GET /v1/{ClientId}/Hooks
GET /v1/{ClientId}/Hooks/{HookId}
GET /v1/{ClientId}/Kyc/Documents
GET /v1/{ClientId}/Kyc/Documents/{KycDocumentId}
GET /v1/{ClientId}/OpenBanking/Account/Authorize
GET /v1/{ClientId}/OpenBanking/Account/Connect
GET /v1/{ClientId}/OpenBanking/Payment/{PaymentId}
GET /v1/{ClientId}/OpenBanking/Providers
GET /v1/{ClientId}/PayIns/{PayInId}
GET /v1/{ClientId}/PayOuts/{PayOutId}
GET /v1/{ClientId}/Refunds/{RefundId}
GET /v1/{ClientId}/Reports
GET /v1/{ClientId}/Reports/{ReportId}
GET /v1/{ClientId}/Search
GET /v1/{ClientId}/Transactions
GET /v1/{ClientId}/Transactions/{TransactionId}
GET /v1/{ClientId}/Transfers/{TransferId}
GET /v1/{ClientId}/Users
GET /v1/{ClientId}/Users/{UserId}
GET /v1/{ClientId}/Users/{UserId}/BankAccounts
GET /v1/{ClientId}/Users/{UserId}/BankVerifications
GET /v1/{ClientId}/Users/{UserId}/Transactions
GET /v1/{ClientId}/Users/{UserId}/Wallets
GET /v1/{ClientId}/Wallets
GET /v1/{ClientId}/Wallets/{FundType}/{Currency}/Transactions
GET /v1/{ClientId}/Wallets/{WalletId}
GET /v1/{ClientId}/Wallets/{WalletId}/Transactions
POST /v1/Kyc/Northrow/Checks
POST /v1/{ClientId}/Cards/Checkouts
POST /v1/{ClientId}/Cards/Notifications
POST /v1/{ClientId}/Kyc/Documents/{KycDocumentId}/Pages
POST /v1/{ClientId}/OpenBanking/Events
POST /v1/{ClientId}/PayIns/BankWire/Direct
POST /v1/{ClientId}/PayIns/Card
POST /v1/{ClientId}/PayIns/OpenBanking
POST /v1/{ClientId}/PayIns/OpenBanking/{PayInId}
POST /v1/{ClientId}/PayOuts/BankWire
POST /v1/{ClientId}/Reports/Credit
POST /v1/{ClientId}/Reports/Transactions
POST /v1/{ClientId}/Reports/Wallets
POST /v1/{ClientId}/Transfers
POST /v1/{ClientId}/Transfers/{TransferId}/refund
POST /v1/{ClientId}/Users/Legal
POST /v1/{ClientId}/Users/Natural
POST /v1/{ClientId}/Users/{UserId}/BankAccounts/Gb
POST /v1/{ClientId}/Users/{UserId}/BankAccounts/Iban
POST /v1/{ClientId}/Users/{UserId}/BankAccounts/Other
PUT /v1/{ClientId}/Accounts/{AccountId}
PUT /v1/{ClientId}/Cards/Checkouts/{CardCheckoutId}/Complete
PUT /v1/{ClientId}/Cards/Payments/Schedules/{ScheduleId}/Cancel
PUT /v1/{ClientId}/Cards/Registrations/{CardRegistrationId}/Complete
PUT /v1/{ClientId}/Transfers/ChangeOwners
PUT /v1/{ClientId}/Transfers/{TransferId}/ChangeOwner
PUT /v1/{ClientId}/Users/Legal/{UserId}
PUT /v1/{ClientId}/Users/Natural/{UserId}
PUT /v1/{ClientId}/Users/{UserId}/BankAccounts/{BankAccountId}
PUT /v1/{ClientId}/Users/{UserId}/BankVerifications/{BankVerificationId}/Complete
PUT /v1/{ClientId}/Users/{UserId}/Hide
PUT /v1/{ClientId}/Users/{UserId}/Show
Open service 13.74.252.44:80 ยท api.shareinpay-test.com
2026-02-12 08:34
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Thu, 12 Feb 2026 08:34:30 GMT Location: https://api.shareinpay-test.com/