LeakIX - Host pr-1361.dev.reclaim-staging.com

Domain pr-1361.dev.reclaim-staging.com

United States

AMAZON-02

Software information

Vercel

tcp/443

Swagger API description is publicly available

Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.

Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.

While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.

IP: 66.33.60.193
Domain: pr-1361.dev.reclaim-staging.com
Port: 443
URL: https://pr-1361.dev.reclaim-staging.com

First seen 2025-10-18 02:11
Last seen 2025-11-14 18:08
Open for 27 days

Severity: info
Fingerprint: 5733ddf49ff49cd1b885ff4396509a6d31f0b52b7096c7ae149a881e2c824599

Public Swagger UI/API detected at path: /swagger.json - sample paths:
DELETE /accounts/{id}
DELETE /jira/integrations/{id}
DELETE /linear/integrations/{id}
DELETE /people/subscriptions
DELETE /planner/habit/{habitId}
DELETE /planner/policy/habit/{habitId}
DELETE /planner/policy/task/{taskId}
DELETE /planner/task/{taskId}/{taskIndex}
DELETE /todoist/integrations/{id}
GET /accounts
GET /accounts/main
GET /asana/integrations
GET /assist/habits/daily
GET /assist/habits/daily/{id}
GET /avatar/credential/{credentialId}
GET /avatar/lookup
GET /avatar/me
GET /calendars/personal
GET /calendars/personal/candidates
GET /calendars/personal/{id}
GET /calendars/primary
GET /calendars/sync
GET /calendars/sync-policy
GET /calendars/sync-policy/{sourceId}/to/{targetId}
GET /calendars/sync/candidates
GET /calendars/sync/events
GET /calendars/sync/events/{calendarId}
GET /calendars/sync/events/{sourceId}/to/{targetId}
GET /calendars/sync/{credentialId}/candidates/sources
GET /calendars/sync/{credentialId}/candidates/targets
GET /calendars/sync/{id}
GET /credentials
GET /credentials/personal
GET /credentials/primary
GET /credentials/{id}
GET /events
GET /events/personal
GET /events/view/{calendarId}/{eventId}
GET /events/{calendarId}/{eventId}
GET /events/{eventId}
GET /habits/{habitId}/{calendarId}/{eventId}/alternatives
GET /insights/assistant
GET /insights/basic
GET /insights/budget/categories
GET /integrations/zoom
GET /invite/{trackingCode}
GET /jira/integrations
GET /linear/integrations
GET /linear/issue/{id}
GET /moment
GET /oauth/zoom/account/init
GET /oauth/zoom/init
GET /oneOnOne
GET /oneOnOne/attendees/busyTime
GET /oneOnOne/attendees/resolve
GET /oneOnOne/cancel/{eventId}/{oneOnOneId}
GET /oneOnOne/detected
GET /oneOnOne/invites
GET /oneOnOne/invites/{id}
GET /oneOnOne/reschedule/{eventId}
GET /oneOnOne/suggestions
GET /oneOnOne/{id}
GET /oneOnOne/{oneOnOneId}/instances
GET /people
GET /priorities
GET /priorities/{id}
GET /projects
GET /projects/{id}
GET /projects/{id}/events
GET /projects/{id}/tasks
GET /schedule
GET /schedule/expanded-plan
GET /slack/add
GET /slack/connect
GET /tasks
GET /tasks/{id}
GET /tasks/{taskId}/instances
GET /todoist/integrations
GET /users/current
GET /users/current/contacts
GET /users/current/referrals
GET /web/asana/syncform
GET /web/asana/task/{asanaTaskId}
GET /web/asana/widget
GET /web/clickup/task/{taskId}
GET /web/jira/task/{issueKey}/{issueId}
GET /web/linear/task/{id}
GET /web/todoist/task/{itemId}
GET /weekly-report/social
GET /weekly-report/social/{id}.png
GET /weekly-report/social/{trackingCode}/{suffix}.png
PATCH /tasks/{taskId}/instances/{index}
PATCH /tasks/{taskId}/reindex
POST /accounts/validate
POST /accounts/{id}/validate
POST /aws/ses/events
POST /calendars/share
POST /calendars/sync/interest
POST /calendars/watch
POST /calendars/watchList
POST /calendars/watchSettings
POST /events/test
POST /events/{calendarId}/{eventId}/buffer
POST /events/{calendarId}/{eventId}/travel/{type}
POST /habits/{calendarId}/{eventId}/auto-reschedule
POST /habits/{calendarId}/{eventId}/done
POST /habits/{calendarId}/{eventId}/extend
POST /habits/{calendarId}/{eventId}/reschedule
POST /habits/{calendarId}/{eventId}/restart
POST /habits/{calendarId}/{eventId}/skip
POST /habits/{calendarId}/{eventId}/snooze
POST /habits/{calendarId}/{eventId}/start
POST /habits/{habitId}/startnow
POST /oneOnOne/invite/{id}/respond
POST /planner/add-time/task/{taskId}
POST /planner/clear-exceptions/habit/{habitId}
POST /planner/clear-exceptions/task/{taskId}
POST /planner/done/habit/{habitId}
POST /planner/done/task/{taskId}
POST /planner/event/move/{eventId}
POST /planner/extend/habit/{habitId}
POST /planner/extend/task/{taskId}
POST /planner/incomplete/habit/{habitId}
POST /planner/incomplete/task/{taskId}
POST /planner/log-work/task/{taskId}
POST /planner/pull/task/{taskId}
POST /planner/push/task/{taskId}
POST /planner/reset/task/{taskId}
POST /planner/restart/habit/{habitId}
POST /planner/restart/task/{taskId}
POST /planner/snooze/habit/{habitId}
POST /planner/snooze/task/{taskId}
POST /planner/start/habit/{habitId}
POST /planner/start/task/{taskId}
POST /planner/stop/habit/{habitId}
POST /planner/stop/task/{taskId}
POST /planner/toggle/habit/{habitId}
POST /planner/unarchive/task/{taskId}
POST /projects/{projectId}/events/{calendarId}/{eventId}
POST /projects/{projectId}/tasks/{taskId}
POST /slack/action-endpoint
POST /slack/command
POST /slack/interactive-endpoint
POST /slack/link
POST /slack/options-load-endpoint
POST /tasks/interest
POST /tasks/{id}/archive
POST /tasks/{id}/cancel
POST /tasks/{id}/done
POST /tasks/{id}/extend
POST /tasks/{id}/start
POST /tasks/{id}/stop
POST /tasks/{id}/unarchive
POST /users/current/contacts/invite
POST /users/current/rewards
POST /users/interest
POST /users/trait/{trait}
POST /web/asana/formfieldchange
POST /web/asana/formsubmit
POST /weekly-report/unsubscribe
POST /ws/bogus
POST /ws/connect
POST /ws/default
POST /ws/disconnect
POST /ws/subscribe
POST /ws/unsubscribe
PUT /tasks/{taskId}

Found on 2025-11-14 18:08

Create report