API discovery and documentation

Find API Endpoints

# Look for API documentation
curl https://target.com/api
curl https://target.com/api-docs
curl https://target.com/swagger
curl https://target.com/docs
curl https://target.com/graphql
curl https://target.com/v1
curl https://target.com/api/v1/health

# GraphQL introspection
curl -X POST https://target.com/graphql \
  -H "Content-Type: application/json" \
  -d '{"query":"{ __schema { types { name } } }"}'