Is OpenAPI DevTools safe?

Clean risk

OpenAPI DevTools records inspected-tab API request URLs, headers, and optional body examples for OpenAPI generation.

OpenAPI DevTools adds a Chrome DevTools panel that listens to completed network requests from the tab being inspected while recording is enabled. It stores eligible JSON and form API requests as OpenAPI data, including URL paths, query parameters, headers, authentication metadata, and, when the More info option is enabled, the most recent request and response bodies as examples. The confirmed source review did not find a code path that sends these captured requests to a remote endpoint.

Andrew Walshv1.5.2Chrome Web Store
0Risk
Who publishes it

Andrew Walsh - no other listings under this identity, 1 shared hostname

What this publisher told the store about itself, and the other listings that told it the same thing.

Shared hosts - 1 hostname

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

code.kx.com
Also called by 4 other listings, including GitLab Markdown Viewer

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Updated 30 September 2026jelghndoknklgabjgaeppjhommkkmdii