# WebPage Same Origin APIs

> Detects same-origin APIs (REST, GraphQL, internal endpoints) and WebSocket connections used by the current webpage. Displays them in a fading popup with easy copy/export. • Secure. 100% client-side. No tracking. No data collection.

Canonical page: [https://chrome-stats.com/d/webpage\_apis](https://chrome-stats.com/d/webpage_apis)

## Overview

- **ID:** `webpage_apis`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** Libor Benes (Dr. B)
- **Category:** web-development,privacy-security,search-tools
- **Daily users:** 1
- **Version:** 1.0
- **Last updated:** 2026-03-31
- **First published:** 2026-03-28
- **Size:** 27 KB
- **Data as of:** 2026-09-06
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/webpage_apis/)
- **Website:** [https://www.linkedin.com/in/LiborBenes](https://www.linkedin.com/in/LiborBenes)

## Description

WebPage Same Origin APIs is a Firefox extension that helps developers, security researchers, and technical users instantly see the backend APIs and WebSocket connections that the current webpage is actually calling.

It monitors network requests in real time and displays only same-origin APIs — such as REST endpoints, GraphQL queries (/api/graphql/, /voyager/api/, /youtubei/v1/, etc.), and WebSocket connections — while ignoring static assets and third-party calls.

Features:
• Automatic fading toast notification when APIs or WebSockets are detected (top-right, fades out after 8 seconds, manual close available).
• Clean popup with scrollable list and always-visible Copy List + Export JSON buttons.
• Timestamped exports (same_origin_apis_YYYY-MM-DD_HH-MM-SS.json).
• Dynamic updates — continues detecting new calls as the page loads more content (ideal for Facebook feed, YouTube player, infinite scrolls).
• High-contrast dark UI with color-coded method badges (GET = green, POST = orange, others = purple).
• One-click copy of the full list or individual items.
• Expanded API pattern recognition including /v3/, /rpc/, /gateway/, and more.

Ideal For:
• Understanding how real websites (YouTube, LinkedIn, Facebook, etc.) communicate with their backends.
• API exploration, debugging, and integration testing.
• Bug bounty hunting and security analysis.
• Learning modern web architecture.
• Scraping research and reverse engineering.

Security-First Architecture:
• The extension is 100% client-side.
• No data collection or transmission.
• No telemetry, analytics, or tracking.
• Everything stays in your browser.
• Explicitly declared “no data collection” in the manifest.

Technical Details:
• Works on Firefox 140.0+ (desktop only).
• Uses webRequest API combined with early content-script hooks (fetch, XMLHttpRequest, sendBeacon) for better compatibility.
• Flat file structure with safe DOM methods only.
• Lightweight and performant.
• Runtime Execution RAM Footprint: ~26 KB (the execution files).
• Total Extension Download/Install Size: ~61 KB (including <a href="https://prod.outgoing.prod.webservices.mozgcp.net/v1/314993ecd4dc7c46957bfef070c95483527be10cfcd1ba8bc21ba2371bf4c365/http%3A//README.md" rel="nofollow">README.md</a>).

Note:
On Facebook and Instagram, best results are achieved by opening a fresh tab due to heavy Service Worker usage. Scrolling the feed continues to display additional endpoints.

Test the WebPage Same Origin APIs add-on on YouTube, Facebook, LinkedIn, or any modern single-page application to see dozens of real internal API and WebSocket calls in action.

## Rankings

- #104,312 — Overall
- #173 — gateway

## Permissions and access

### Permissions

- `webRequest`
- `tabs`
- `clipboardWrite`
- `<all_urls>`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension website URL may be invalid

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [WebPage Source Recon](https://chrome-stats.com/d/webpage_source_recon) — 2 users
- [API Status Checker](https://chrome-stats.com/d/api-status-checker) — 2 users, 5.00 / 5
- [Web Scraper - Export & Security Scanner](https://chrome-stats.com/d/web-scraper-export) — 153 users, 1.00 / 5
- [Page Source HTML Viewer (works on Android)](https://chrome-stats.com/d/page-source-viewer-android) — 484 users, 4.00 / 5
- [Website Technology Detector](https://chrome-stats.com/d/website-technology-detector) — 291 users, 5.00 / 5
- [Cross-Origin Resource](https://chrome-stats.com/d/cross-origin-resource) — 3 users
- [PageWatch — Automatic Page Monitor](https://chrome-stats.com/d/pagewatch-page-monitor) — 2 users
- [PagePulse](https://chrome-stats.com/d/pagepulse-new)
- [View Page Source - HTML Viewer](https://chrome-stats.com/d/view-page-source-html-viewer) — 77 users
- [Quick Source Code Viewer](https://chrome-stats.com/d/quick-source-code-viewer) — 1 users
- [In-Page Pop-up Reporter](https://chrome-stats.com/d/in-page-pop-up-reporter) — 124 users, 4.88 / 5
- [API Error Logger](https://chrome-stats.com/d/api-error-logger) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/webpage_apis)