Kestrel
tcp/443
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1aad03549fccdac2704b79edb41531f26d6bbbbf5f47e6338
Public Swagger UI/API detected at path: /swagger/index.html - sample paths:
DELETE /api/devices/solicitations/{id}
DELETE /api/features/{featureId}
DELETE /api/paymentSubscriptions/cards/{cardId}
GET /api/coupons/code/{code}
GET /api/coupons/validate/{code}
GET /api/coupons/{id}
GET /api/devices/solicitations
GET /api/devices/solicitations/owner/{ownerId}/pending
GET /api/devices/solicitations/owner/{ownerId}/statuses
GET /api/features/additional
GET /api/features/additional/powerbi
GET /api/features/additional/powerbi/owner/{ownerId}/change-histories
GET /api/gestao/invoice/nfce
GET /api/invoices/payments
GET /api/invoices/status
GET /api/locals
GET /api/locals/saas
GET /api/locals/{localId}/uses-new-complement-groups
GET /api/onboardings
GET /api/onboardings/{onboardingId}
GET /api/paymentSubscriptions/owner/{ownerId}
GET /api/paymentSubscriptions/owner/{ownerId}/active
GET /api/paymentSubscriptions/owner/{ownerId}/current
GET /api/paymentSubscriptions/{id}/cards
GET /api/payments
GET /api/payments/owner/{ownerId}/change-histories
GET /api/payments/owner/{ownerId}/pix/pending
GET /api/payments/owner/{ownerId}/status
GET /api/payments/solicitations
GET /api/payments/{paymentId}
GET /api/plans
GET /api/plans/categories/{categoryId}/plans
GET /api/plans/{planId}
GET /api/prospects/{prospectId}
GET /api/prospects/{prospectId}/pix/pending
GET /api/subscriptions/downgrade
GET /api/subscriptions/owner/{ownerId}
GET /api/subscriptions/owner/{ownerId}/change-histories
GET /api/subscriptions/owner/{ownerId}/status
GET /api/subscriptions/saas/devices/get-total-licenses
GET /api/v2/prospects/{prospectId}
GET /api/v2/prospects/{prospectId}/pix/pending
GET /api/version
PATCH /api/subscriptions/sign-feature/status
PATCH /api/subscriptions/sign-plan/status
POST /api/backoffice/plan/local/licenses
POST /api/backoffice/plan/subscription
POST /api/backoffice/plan/subscription/trial
POST /api/coupons
POST /api/coupons/{id}/cancel
POST /api/features
POST /api/feedbacks
POST /api/gestao/proposal/cancel
POST /api/gestao/proposal/change-plan
POST /api/gestao/proposal/create
POST /api/gestao/proposal/create-nonimported
POST /api/invoices/checkout
POST /api/invoices/payments/pix/callback
POST /api/invoices/pix/checkout
POST /api/leads
POST /api/leads/webhook
POST /api/locals/{localId}/notify/make
POST /api/locals/{localId}/products/generate-small-thumbnails
POST /api/onboardings/restart/{localId}
POST /api/paymentSubscriptions
POST /api/payments/disableOnlinePaymentStatus
POST /api/payments/enableOnlinePaymentStatus
POST /api/payments/saas/pix/callback
POST /api/payments/saas/pix/renew/callback
POST /api/plans/categories
POST /api/prospects
POST /api/prospects/basic
POST /api/prospects/basic/cielo
POST /api/prospects/basic/validate-code
POST /api/prospects/meep-user/{prospectType}
POST /api/prospects/payments/pix/callback
POST /api/prospects/resend-validation-code
POST /api/prospects/validate-code
POST /api/prospects/{prospectId}/basic/establishment
POST /api/prospects/{prospectId}/checkout
POST /api/prospects/{prospectId}/checkout/cielo
POST /api/prospects/{prospectId}/checkout/cielo/establishment
POST /api/prospects/{prospectId}/checkout/cielo/event
POST /api/prospects/{prospectId}/checkout/free-trial
POST /api/prospects/{prospectId}/pix/checkout
POST /api/prospects/{prospectId}/pix/checkout/cielo/establishment
POST /api/prospects/{prospectId}/pix/checkout/cielo/event
POST /api/subscriptions
POST /api/subscriptions/additional-features
POST /api/subscriptions/saas-checkout
POST /api/subscriptions/saas-checkout/pix
POST /api/subscriptions/saas-checkout/pix/renew
POST /api/subscriptions/saas/change-plan
POST /api/subscriptions/saas/change-plan/add-external-pos
POST /api/unsubscribe
POST /api/v2/prospects
POST /api/v2/prospects/payments/pix/callback
POST /api/v2/prospects/resend-validation-code
POST /api/v2/prospects/validate-code
POST /api/v2/prospects/{prospectId}/business-profile
POST /api/v2/prospects/{prospectId}/checkout
POST /api/v2/prospects/{prospectId}/notify/make
PUT /api/backoffice/plan/local/type
PUT /api/backoffice/plan/price
PUT /api/devices/solicitations/{id}/approve
PUT /api/devices/solicitations/{id}/complete
PUT /api/devices/solicitations/{id}/import
PUT /api/features/additional/powerbi/owner/{ownerId}
PUT /api/features/additional/{additionalFeatureId}/plans/{planId}
PUT /api/features/{featureId}/plans/{planId}
PUT /api/locals/{localId}
PUT /api/locals/{localId}/accept-invoice-charges
PUT /api/locals/{localId}/accept-new-terms
PUT /api/paymentSubscriptions/cards/{cardId}/default
PUT /api/paymentSubscriptions/{subscriptionId}/activate
PUT /api/paymentSubscriptions/{subscriptionId}/cancel
PUT /api/payments/{paymentId}/pix/cancel-pending
PUT /api/prospects/{prospectId}/affiliate
PUT /api/prospects/{prospectId}/delivery/address
PUT /api/prospects/{prospectId}/local
PUT /api/prospects/{prospectId}/local/address
PUT /api/prospects/{prospectId}/profile
PUT /api/users
Open service 20.49.104.17:80 · plans-api.meep.cloud
2026-01-11 18:17
HTTP/1.1 301 Moved Permanently Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 18:18:13 GMT Location: https://plans-api.meep.cloud/
Open service 20.49.104.17:443 · plans-api.meep.cloud
2026-01-11 18:17
HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Sun, 11 Jan 2026 18:18:12 GMT Server: Kestrel Request-Context: appId=cid-v1:d17c2995-3559-4a7a-aad5-15aafff5384b