Review changes
Explore APIs and code flows
Inspect discovered APIs, request and response schemas, code flows, consumer evidence, and contract changes.
On this page
Find an endpoint#
Open APIs
Go to APIs. The table lists method and path, service, inferred route type, handler and source location, static callers, API request counts, attributed function calls, and retirement state.
Search or filter
Use Search APIs and services to find a method, path, or service. Select a service in the filter to narrow the table; choose Clear to reset it.
Select the endpoint
Choose its path to open the endpoint detail panel below the table.
Inspect endpoint details#
| Tab | What it shows | How to use it |
|---|---|---|
| Overview | Provider service, static caller count, runtime state, criticality/confidence, source, and available schemas. | Check the contract source and inspect the request/response shape. |
| Code flow | API entrypoint, application functions, boundaries, conditions, repeats, and measured entries when available. | Separate mapped reachability from measured function usage. |
| Consumers | Detected consumer services, evidence type, confidence, and source references. | Follow the consumer source to review the relationship and field usage. |
| Changes | Recorded findings associated with this endpoint and links to their pull requests. | Review previous detected contract changes in the retained history. |
| Retirement evidence | Static callers, runtime status, measured function usage, review state, and next action. | Keep missing data explicit while planning a removal. |
A source reference includes a file, line, and commit SHA. GitHub opens the recorded commit rather than the latest branch, so the evidence remains tied to the snapshot or analysis that produced it.
Route types such as UI/demo, system, and webhook are inferred from source paths and route patterns. They help separate likely interface and operational routes from application routes; they do not prove deployment or production use. Choose a handler to open its reachable function flow and call sites.
The displayed request and response schemas are extracted from supported documents. Complex or unsupported schema constructs can leave analysis incomplete. Review the repository's Coverage notes when an expected schema or endpoint is missing.
Follow static API dependencies#
Reindex the selected repositories
Use Re-index in Repositories to pick up additional implemented routes and supported configured HTTP clients. Source indexing does not require Kubernetes, Prometheus or Datadog.
Open the provider's Code flow
Consumer APIs and call sites lists which consumer APIs can reach the HTTP caller. Follow a consumer API to inspect its helper calls and downstream APIs. Shared functions can belong to multiple API flows.
Inspect source and conditions
Source references include the indexed commit and call position. Static conditions and input origins shows supported branch predicates and symbolic handler parameter paths. It does not record actual request values or branch executions.
Review unresolved callers
Static HTTP dependencies below the function inventory includes ambiguous providers and callers with no discovered enclosing API. An empty API list does not establish that the caller is unused or a background task.
Endpoint Overview distinguishes contract definitions, implemented routes, and routes supported by both. Implemented routes missing from OpenAPI remain visible with no inferred schemas. Explicit client URL origins and OpenAPI server origins can disambiguate providers; route-only matches remain possible and require identity review.
Interpret usage and confidence#
Static callers counts detected relationships in selected indexed repositories. It does not measure traffic volume or capture every deployed consumer. A relationship inferred from a unique endpoint path still requires verification of the deployment host association.
| Runtime label | Meaning |
|---|---|
| Runtime not connected | No runtime observation source is connected; production usage is unknown. |
| No observations in window | The data model has no observation in its relevant window; this alone cannot establish non-use. |
| Estimated requests / indexed spans | Positive runtime traffic matched the endpoint. The endpoint detail includes source, window, and available caller identity. |