Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad0354978dace0f7923117446d112aad816badc6f6bc408
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/locals/{localId}/profiles/type/{type}/custom-payment
GET /api/locals/{localId}/activities
GET /api/locals/{localId}/configuration
GET /api/locals/{localId}/configuration/events
GET /api/locals/{localId}/configuration/legacy
GET /api/locals/{localId}/devices
GET /api/locals/{localId}/devices/event-devices
GET /api/locals/{localId}/devices/export
GET /api/locals/{localId}/devices/links/{code}
GET /api/locals/{localId}/devices/{deviceId}
GET /api/locals/{localId}/devices/{deviceId}/productList
GET /api/locals/{localId}/devices/{deviceId}/profile
GET /api/locals/{localId}/devices/{deviceId}/profile/aggregates
GET /api/locals/{localId}/devices/{deviceId}/profileFromLegacy/aggregates
GET /api/locals/{localId}/devices/{deviceId}/{linkType}/profileFromLegacy/aggregates
GET /api/locals/{localId}/profiles
GET /api/locals/{localId}/profiles/byDeviceId/{deviceID}
GET /api/locals/{localId}/profiles/getByReceiptPrinterSectorId/{receiptPrinterSectorId}
GET /api/locals/{localId}/profiles/{profileId}
GET /api/locals/{localId}/profiles/{profileId}/custom-payment
GET /api/locals/{localId}/profiles/{profileId}/operation/discount-enabled
GET /api/locals/{localId}/simplePos
GET /api/locals/{localId}/simplePos/device
GET /api/locals/{localId}/simplePos/device/{deviceId}
GET /api/locals/{localId}/simplePos/legacyConfig
GET /api/locals/{localId}/terminal/createDefaultProfiles
GET /api/locals/{localId}/terminal/device/{deviceId}/navigatorSession/{navigatorSessionId}
GET /api/locals/{localId}/terminal/getAllDevicesWithTerminalProfile
GET /api/locals/{localId}/terminal/navigatorSolicitations
PATCH /api/locals/{localId}/terminal/updateTerminalConfig
POST /api/locals/terminal/createDefaultProfiles
POST /api/locals/{localId}/devices/import
POST /api/locals/{localId}/devices/import-file
POST /api/locals/{localId}/devices/links
POST /api/locals/{localId}/profiles/default-profile/{operationType}
POST /api/locals/{localId}/profiles/{profileId}/duplicate
POST /api/locals/{localId}/profiles/{profileId}/set-default
POST /api/locals/{localId}/terminal/addTerminalProfile
POST /api/locals/{localId}/terminal/approve
POST /api/locals/{localId}/terminal/closeSession
POST /api/locals/{localId}/terminal/refuse
POST /api/locals/{localId}/terminal/refuse/all
PUT /api/locals/{localId}/configuration/devices
PUT /api/locals/{localId}/devices/remove-profile
PUT /api/locals/{localId}/devices/{deviceId}/state
PUT /api/locals/{localId}/profiles/updateAllProfilesWithReceiptPrinterSectorId/{receiptPrinterSectorId}
PUT /api/locals/{localId}/profiles/updateByReceiptPrinterSectorId
PUT /api/locals/{localId}/profiles/{profileId}/catalogs
PUT /api/locals/{localId}/profiles/{profileId}/cielo-acquirer-configuration
PUT /api/locals/{localId}/profiles/{profileId}/devices
PUT /api/locals/{localId}/profiles/{profileId}/disable
PUT /api/locals/{localId}/profiles/{profileId}/enable
PUT /api/locals/{localId}/profiles/{profileId}/environments
PUT /api/locals/{localId}/profiles/{profileId}/general
PUT /api/locals/{localId}/profiles/{profileId}/inter-acquirer-configuration
PUT /api/locals/{localId}/profiles/{profileId}/invoice
PUT /api/locals/{localId}/profiles/{profileId}/operation
PUT /api/locals/{localId}/profiles/{profileId}/operation/methods
PUT /api/locals/{localId}/profiles/{profileId}/operators
PUT /api/locals/{localId}/profiles/{profileId}/pagseguro-acquirer-configuration
PUT /api/locals/{localId}/profiles/{profileId}/payment
PUT /api/locals/{localId}/profiles/{profileId}/printer
PUT /api/locals/{localId}/profiles/{profileId}/products
PUT /api/locals/{localId}/profiles/{profileId}/stone-acquirer-configuration
PUT /api/locals/{localId}/profiles/{profileId}/terminal
PUT /api/locals/{localId}/profiles/{profileId}/usability
PUT /api/locals/{localId}/profiles/{profileId}/user-interface
PUT /api/locals/{localId}/simplePos/{simplePosId}
Open service 20.49.104.17:443 ยท device-configuration-api.meep.cloud
2026-01-23 11:11
HTTP/1.1 200 OK Connection: close Content-Type: text/plain Date: Fri, 23 Jan 2026 11:12:03 GMT Server: Kestrel Cache-Control: no-store, no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Transfer-Encoding: chunked Request-Context: appId=cid-v1:f96cbf6e-e2a3-4425-a313-f61005247d82 Healthy