Come together with the global Drupal community in Rotterdam, 28 Sept – 1 Oct 2026. Sessions, contribution, connection, and Early Bird savings until 8 June.This module provides Drush commands for auditing Headless/Decoupled API routes. It helps identify routes with open access, missing access requirements, and potential security misconfigurations.
Features
- Drush command to list all API routes(Endpoint).
- Drush command to audit API route(Endpoint) access permissions.
Post-Installation
After installing this module, you will be able to run the Drush commands shipping with this module.
- drush api:route --help
- drush api:audit:permission --help
Additional Requirements
This module works with Drush 12/13. That saying your need to have Drush installed with your Drupal project.
Supporting this Module
You can support this module by reporting issues, suggestions or new features.
Community Documentation
Project information
- Project categories: Decoupled, Developer tools, Security
- Ecosystem: JSON:API, Headless, Decoupal
12 sites report using this module- Created by mingsong on , updated
Stable releases for this project are covered by the security advisory policy.
Look for the shield icon below.
