LeakIX - Host app.conceptly.io

Domain app.conceptly.io

United States

AMAZON-02

Software information

Heroku

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 76.223.11.49
Domain: app.conceptly.io
Port: 443
URL: https://app.conceptly.io

First seen 2025-12-04 00:34
Last seen 2026-01-09 09:20
Open for 36 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d3ae91f16c195357a9115389e9048a491034aaef

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /api/processors/processing-status/{status_id}
DELETE /api/v1/workspaces/{workspace_id}/inputs/{input_id}
DELETE /api/v1/workspaces/{workspace_id}/links/by-endpoints
DELETE /api/v1/workspaces/{workspace_id}/links/{link_id}
GET /api/health
GET /api/health/detailed
GET /api/models
GET /api/processors
GET /api/processors/inputs/{input_id}/processing-status
GET /api/processors/inputs/{input_id}/processing-statuses
GET /api/processors/processing-status
GET /api/processors/{processor_id}
GET /api/tags
GET /api/tags/{tag_id}
GET /api/v1/inputs
GET /api/v1/inputs/types
GET /api/v1/inputs/{input_id}
GET /api/v1/inputs/{input_id}/content
GET /api/v1/inputs/{input_id}/download
GET /api/v1/inputs/{input_id}/extractions
GET /api/v1/inputs/{input_id}/tags
GET /api/v1/mcp-servers
GET /api/v1/mcp-servers/{server_id}
GET /api/v1/workspaces
GET /api/v1/workspaces/team-config
GET /api/v1/workspaces/{workspace_id}
GET /api/v1/workspaces/{workspace_id}/inputs
GET /api/v1/workspaces/{workspace_id}/inputs/changed
GET /callback
PATCH /api/v1/inputs/{input_id}/metadata
PATCH /api/v1/workspaces/{workspace_id}/inputs/metadata
POST /api/models/refresh
POST /api/processors/register-defaults
POST /api/processors/run
POST /api/processors/settings
POST /api/processors/{processor_id}/activate
POST /api/processors/{processor_id}/deactivate
POST /api/processors/{processor_id}/process/{input_id}
POST /api/v1/inputs/audio
POST /api/v1/inputs/file
POST /api/v1/inputs/image
POST /api/v1/inputs/text
POST /api/v1/inputs/tool
POST /api/v1/inputs/video
POST /api/v1/inputs/{input_id}/retry
POST /api/v1/inputs/{input_id}/start
POST /api/v1/inputs/{input_id}/test-extraction
POST /api/v1/migrate
POST /api/v1/migrate/workspace_cards/db
POST /api/v1/migrate/workspace_cards/s3
POST /api/v1/workspaces/{workspace_id}/inputs/audio
POST /api/v1/workspaces/{workspace_id}/inputs/file
POST /api/v1/workspaces/{workspace_id}/inputs/image
POST /api/v1/workspaces/{workspace_id}/inputs/multi-linked
POST /api/v1/workspaces/{workspace_id}/inputs/multichat/spawn
POST /api/v1/workspaces/{workspace_id}/inputs/team
POST /api/v1/workspaces/{workspace_id}/inputs/text
POST /api/v1/workspaces/{workspace_id}/inputs/tool
POST /api/v1/workspaces/{workspace_id}/inputs/video
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/propose
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/spawn
POST /api/v1/workspaces/{workspace_id}/links

Found on 2026-01-09 09:20

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d3ae91f16c195357a9115389e9048a49a78bc951

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /api/processors/processing-status/{status_id}
DELETE /api/v1/workspaces/{workspace_id}/inputs/{input_id}
DELETE /api/v1/workspaces/{workspace_id}/links/by-endpoints
DELETE /api/v1/workspaces/{workspace_id}/links/{link_id}
GET /api/health
GET /api/health/detailed
GET /api/models
GET /api/processors
GET /api/processors/inputs/{input_id}/processing-status
GET /api/processors/inputs/{input_id}/processing-statuses
GET /api/processors/processing-status
GET /api/processors/{processor_id}
GET /api/tags
GET /api/tags/{tag_id}
GET /api/v1/inputs
GET /api/v1/inputs/types
GET /api/v1/inputs/{input_id}
GET /api/v1/inputs/{input_id}/content
GET /api/v1/inputs/{input_id}/download
GET /api/v1/inputs/{input_id}/extractions
GET /api/v1/inputs/{input_id}/tags
GET /api/v1/mcp-servers
GET /api/v1/mcp-servers/{server_id}
GET /api/v1/workspaces
GET /api/v1/workspaces/team-config
GET /api/v1/workspaces/{workspace_id}
GET /api/v1/workspaces/{workspace_id}/inputs
GET /api/v1/workspaces/{workspace_id}/inputs/changed
GET /callback
PATCH /api/v1/inputs/{input_id}/metadata
PATCH /api/v1/workspaces/{workspace_id}/inputs/metadata
POST /api/models/refresh
POST /api/processors/register-defaults
POST /api/processors/run
POST /api/processors/settings
POST /api/processors/{processor_id}/activate
POST /api/processors/{processor_id}/deactivate
POST /api/processors/{processor_id}/process/{input_id}
POST /api/v1/inputs/audio
POST /api/v1/inputs/file
POST /api/v1/inputs/image
POST /api/v1/inputs/text
POST /api/v1/inputs/tool
POST /api/v1/inputs/video
POST /api/v1/inputs/{input_id}/retry
POST /api/v1/inputs/{input_id}/start
POST /api/v1/inputs/{input_id}/test-extraction
POST /api/v1/migrate
POST /api/v1/migrate/workspace_cards/db
POST /api/v1/migrate/workspace_cards/s3
POST /api/v1/workspaces/{workspace_id}/inputs/audio
POST /api/v1/workspaces/{workspace_id}/inputs/file
POST /api/v1/workspaces/{workspace_id}/inputs/image
POST /api/v1/workspaces/{workspace_id}/inputs/multichat/spawn
POST /api/v1/workspaces/{workspace_id}/inputs/team
POST /api/v1/workspaces/{workspace_id}/inputs/text
POST /api/v1/workspaces/{workspace_id}/inputs/tool
POST /api/v1/workspaces/{workspace_id}/inputs/video
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/propose
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/spawn
POST /api/v1/workspaces/{workspace_id}/links

Found on 2025-12-25 03:10

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d3ae91f16c195357a9115389e9048a4968aae55d

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /api/processors/processing-status/{status_id}
DELETE /api/v1/workspaces/{workspace_id}/inputs/{input_id}
DELETE /api/v1/workspaces/{workspace_id}/links/by-endpoints
DELETE /api/v1/workspaces/{workspace_id}/links/{link_id}
GET /api/health
GET /api/health/detailed
GET /api/models
GET /api/processors
GET /api/processors/inputs/{input_id}/processing-status
GET /api/processors/inputs/{input_id}/processing-statuses
GET /api/processors/processing-status
GET /api/processors/{processor_id}
GET /api/tags
GET /api/tags/{tag_id}
GET /api/v1/inputs
GET /api/v1/inputs/types
GET /api/v1/inputs/{input_id}
GET /api/v1/inputs/{input_id}/content
GET /api/v1/inputs/{input_id}/download
GET /api/v1/inputs/{input_id}/extractions
GET /api/v1/inputs/{input_id}/tags
GET /api/v1/mcp-servers
GET /api/v1/mcp-servers/{server_id}
GET /api/v1/workspaces
GET /api/v1/workspaces/team-config
GET /api/v1/workspaces/{workspace_id}
GET /api/v1/workspaces/{workspace_id}/inputs
GET /api/v1/workspaces/{workspace_id}/inputs/changed
GET /callback
PATCH /api/v1/inputs/{input_id}/metadata
PATCH /api/v1/workspaces/{workspace_id}/inputs/metadata
POST /api/models/refresh
POST /api/processors/register-defaults
POST /api/processors/run
POST /api/processors/settings
POST /api/processors/{processor_id}/activate
POST /api/processors/{processor_id}/deactivate
POST /api/processors/{processor_id}/process/{input_id}
POST /api/v1/inputs/audio
POST /api/v1/inputs/file
POST /api/v1/inputs/image
POST /api/v1/inputs/text
POST /api/v1/inputs/tool
POST /api/v1/inputs/video
POST /api/v1/inputs/{input_id}/retry
POST /api/v1/inputs/{input_id}/start
POST /api/v1/inputs/{input_id}/test-extraction
POST /api/v1/migrate
POST /api/v1/migrate/workspace_cards/db
POST /api/v1/migrate/workspace_cards/s3
POST /api/v1/workspaces/{workspace_id}/inputs/audio
POST /api/v1/workspaces/{workspace_id}/inputs/file
POST /api/v1/workspaces/{workspace_id}/inputs/image
POST /api/v1/workspaces/{workspace_id}/inputs/team
POST /api/v1/workspaces/{workspace_id}/inputs/text
POST /api/v1/workspaces/{workspace_id}/inputs/tool
POST /api/v1/workspaces/{workspace_id}/inputs/video
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/propose
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/spawn
POST /api/v1/workspaces/{workspace_id}/links

Found on 2025-12-23 06:25

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d3ae91f16c195357a9115389e9048a4953114132

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /api/processors/processing-status/{status_id}
DELETE /api/v1/workspaces/{workspace_id}/inputs/{input_id}
DELETE /api/v1/workspaces/{workspace_id}/links/by-endpoints
DELETE /api/v1/workspaces/{workspace_id}/links/{link_id}
GET /api/health
GET /api/health/detailed
GET /api/models
GET /api/processors
GET /api/processors/inputs/{input_id}/processing-status
GET /api/processors/inputs/{input_id}/processing-statuses
GET /api/processors/processing-status
GET /api/processors/{processor_id}
GET /api/tags
GET /api/tags/{tag_id}
GET /api/v1/inputs
GET /api/v1/inputs/types
GET /api/v1/inputs/{input_id}
GET /api/v1/inputs/{input_id}/content
GET /api/v1/inputs/{input_id}/download
GET /api/v1/inputs/{input_id}/extractions
GET /api/v1/inputs/{input_id}/tags
GET /api/v1/mcp-servers
GET /api/v1/mcp-servers/{server_id}
GET /api/v1/workspaces
GET /api/v1/workspaces/{workspace_id}
GET /api/v1/workspaces/{workspace_id}/inputs
GET /api/v1/workspaces/{workspace_id}/inputs/changed
GET /callback
PATCH /api/v1/inputs/{input_id}/metadata
PATCH /api/v1/workspaces/{workspace_id}/inputs/metadata
POST /api/models/refresh
POST /api/processors/register-defaults
POST /api/processors/run
POST /api/processors/settings
POST /api/processors/{processor_id}/activate
POST /api/processors/{processor_id}/deactivate
POST /api/processors/{processor_id}/process/{input_id}
POST /api/v1/inputs/audio
POST /api/v1/inputs/file
POST /api/v1/inputs/image
POST /api/v1/inputs/text
POST /api/v1/inputs/tool
POST /api/v1/inputs/video
POST /api/v1/inputs/{input_id}/retry
POST /api/v1/inputs/{input_id}/start
POST /api/v1/inputs/{input_id}/test-extraction
POST /api/v1/migrate
POST /api/v1/migrate/workspace_cards/db
POST /api/v1/migrate/workspace_cards/s3
POST /api/v1/workspaces/{workspace_id}/inputs/audio
POST /api/v1/workspaces/{workspace_id}/inputs/file
POST /api/v1/workspaces/{workspace_id}/inputs/image
POST /api/v1/workspaces/{workspace_id}/inputs/team
POST /api/v1/workspaces/{workspace_id}/inputs/text
POST /api/v1/workspaces/{workspace_id}/inputs/tool
POST /api/v1/workspaces/{workspace_id}/inputs/video
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/propose
POST /api/v1/workspaces/{workspace_id}/inputs/{team_input_id}/team/spawn
POST /api/v1/workspaces/{workspace_id}/links

Found on 2025-12-21 06:21

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff43d3ae91f16c195357753fc503cd0db24a0f944651

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /api/processors/processing-status/{status_id}
DELETE /api/v1/workspaces/{workspace_id}/inputs/{input_id}
GET /api/health
GET /api/health/detailed
GET /api/models
GET /api/processors
GET /api/processors/inputs/{input_id}/processing-status
GET /api/processors/inputs/{input_id}/processing-statuses
GET /api/processors/processing-status
GET /api/processors/{processor_id}
GET /api/tags
GET /api/tags/{tag_id}
GET /api/v1/inputs
GET /api/v1/inputs/types
GET /api/v1/inputs/{input_id}
GET /api/v1/inputs/{input_id}/content
GET /api/v1/inputs/{input_id}/download
GET /api/v1/inputs/{input_id}/extractions
GET /api/v1/inputs/{input_id}/tags
GET /api/v1/mcp-servers
GET /api/v1/mcp-servers/{server_id}
GET /api/v1/workspaces
GET /api/v1/workspaces/{workspace_id}
GET /api/v1/workspaces/{workspace_id}/inputs
GET /api/v1/workspaces/{workspace_id}/inputs/changed
GET /callback
PATCH /api/v1/inputs/{input_id}/metadata
PATCH /api/v1/workspaces/{workspace_id}/inputs/metadata
POST /api/models/refresh
POST /api/processors/register-defaults
POST /api/processors/run
POST /api/processors/settings
POST /api/processors/{processor_id}/activate
POST /api/processors/{processor_id}/deactivate
POST /api/processors/{processor_id}/process/{input_id}
POST /api/v1/inputs/audio
POST /api/v1/inputs/file
POST /api/v1/inputs/image
POST /api/v1/inputs/text
POST /api/v1/inputs/tool
POST /api/v1/inputs/video
POST /api/v1/inputs/{input_id}/retry
POST /api/v1/inputs/{input_id}/start
POST /api/v1/inputs/{input_id}/test-extraction
POST /api/v1/migrate
POST /api/v1/migrate/workspace_cards/db
POST /api/v1/migrate/workspace_cards/s3
POST /api/v1/workspaces/{workspace_id}/inputs/audio
POST /api/v1/workspaces/{workspace_id}/inputs/file
POST /api/v1/workspaces/{workspace_id}/inputs/image
POST /api/v1/workspaces/{workspace_id}/inputs/text
POST /api/v1/workspaces/{workspace_id}/inputs/tool
POST /api/v1/workspaces/{workspace_id}/inputs/video

Found on 2025-12-19 07:09

Create report

Open service 76.223.11.49:443 · app.conceptly.io

2026-01-09 09:20

HTTP/1.1 302 Found
Access-Control-Allow-Origin: *
Content-Length: 245
Content-Type: text/html; charset=utf-8
Date: Fri, 09 Jan 2026 09:20:13 GMT
Location: /static/knowledge-canvas.html
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=z9HrIe0HtT4GmElOXmjbfA4kAXgVcQPG15JLWTc9zEY%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767950413"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=z9HrIe0HtT4GmElOXmjbfA4kAXgVcQPG15JLWTc9zEY%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767950413"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Page title: Redirecting...

<!doctype html>
<html lang=en>
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to the target URL: <a href="/static/knowledge-canvas.html">/static/knowledge-canvas.html</a>. If not, click the link.

Found 2026-01-09 by HttpPlugin

Create report

Open service 76.223.11.49:443 · app.conceptly.io

2026-01-02 16:24

HTTP/1.1 302 Found
Access-Control-Allow-Origin: *
Content-Length: 245
Content-Type: text/html; charset=utf-8
Date: Fri, 02 Jan 2026 16:24:23 GMT
Location: /static/knowledge-canvas.html
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=DruHCbKDCsuH7biVXhBc8BPyZWxLZAFc1w6TyebL5Oo%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1767371063"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=DruHCbKDCsuH7biVXhBc8BPyZWxLZAFc1w6TyebL5Oo%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1767371063"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Page title: Redirecting...

<!doctype html>
<html lang=en>
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to the target URL: <a href="/static/knowledge-canvas.html">/static/knowledge-canvas.html</a>. If not, click the link.

Found 2026-01-02 by HttpPlugin

Create report

Open service 76.223.11.49:443 · app.conceptly.io

2025-12-23 06:25

HTTP/1.1 302 Found
Access-Control-Allow-Origin: *
Content-Length: 245
Content-Type: text/html; charset=utf-8
Date: Tue, 23 Dec 2025 06:25:40 GMT
Location: /static/knowledge-canvas.html
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=6VKYveKLPUQyZ427uvGQxmwT%2F00qmTm2wITgwTreG5g%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766471140"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=6VKYveKLPUQyZ427uvGQxmwT%2F00qmTm2wITgwTreG5g%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766471140"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Page title: Redirecting...

<!doctype html>
<html lang=en>
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to the target URL: <a href="/static/knowledge-canvas.html">/static/knowledge-canvas.html</a>. If not, click the link.

Found 2025-12-23 by HttpPlugin

Create report

Open service 76.223.11.49:443 · app.conceptly.io

2025-12-21 06:21

HTTP/1.1 302 Found
Access-Control-Allow-Origin: *
Content-Length: 245
Content-Type: text/html; charset=utf-8
Date: Sun, 21 Dec 2025 06:21:51 GMT
Location: /static/knowledge-canvas.html
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=K8VzZtFwHS8GjcYX7Mawn7%2FN0eXIV%2FmX5DHGIqGRQjk%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766298111"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=K8VzZtFwHS8GjcYX7Mawn7%2FN0eXIV%2FmX5DHGIqGRQjk%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766298111"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Page title: Redirecting...

<!doctype html>
<html lang=en>
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to the target URL: <a href="/static/knowledge-canvas.html">/static/knowledge-canvas.html</a>. If not, click the link.

Found 2025-12-21 by HttpPlugin

Create report

Open service 76.223.11.49:443 · app.conceptly.io

2025-12-19 07:09

HTTP/1.1 302 Found
Access-Control-Allow-Origin: *
Content-Length: 245
Content-Type: text/html; charset=utf-8
Date: Fri, 19 Dec 2025 07:09:24 GMT
Location: /static/knowledge-canvas.html
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=zYMKjOHdbpf7C%2FZdzjIGcL0DrFJS44LaQVC4Lisizjs%3D\u0026sid=c4c9725f-1ab0-44d8-820f-430df2718e11\u0026ts=1766128164"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=zYMKjOHdbpf7C%2FZdzjIGcL0DrFJS44LaQVC4Lisizjs%3D&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&ts=1766128164"
Server: Heroku
Via: 1.1 heroku-router
Connection: close

Page title: Redirecting...

<!doctype html>
<html lang=en>
<title>Redirecting...</title>
<h1>Redirecting...</h1>
<p>You should be redirected automatically to the target URL: <a href="/static/knowledge-canvas.html">/static/knowledge-canvas.html</a>. If not, click the link.

Found 2025-12-19 by HttpPlugin

Create report

app.conceptly.io

Fingerprint:

d403ec4356fef699f9d90fdf791362282b0e4ca28ae83c5f7d14e576242953b7

CN:

app.conceptly.io

Key:

RSA-2048

Issuer:

R13

Not before:

2025-12-03 23:35

Not after:

2026-03-03 23:35

Domain summary

app.conceptly.io 9

1 recorded

IP summary

76.223.11.49 2

1 recorded