CRXcavator

{
  "service_type": "platform",
  "base_url": "https://crxcavator.io",
  "auth_method": "api_key",
  "auth_config": {
    "api_key": "",
    "header": "Authorization",
    "scheme": "Token"
  },
  "endpoints": [
    {
      "path": "/",
      "method": "GET",
      "description": "Root endpoint, returns service info"
    },
    {
      "path": "/api/v1/extension/",
      "method": "GET",
      "description": "List extensions or search by query parameters"
    },
    {
      "path": "/api/v1/extension/{id}/",
      "method": "GET",
      "description": "Get details for a specific extension by ID"
    },
    {
      "path": "/api/v1/extension/{id}/risks/",
      "method": "GET",
      "description": "Get risk assessment for a specific extension"
    },
    {
      "path": "/api/v1/extension/{id}/reports/",
      "method": "GET",
      "description": "Get reports for a specific extension"
    },
    {
      "path": "/api/v1/risk/",
      "method": "GET",
      "description": "List known risks/vulnerabilities"
    },
    {
      "path": "/api/v1/risk/{id}/",
      "method": "GET",
      "description": "Get details for a specific risk"
    },
    {
      "path": "/api/v1/extension/upload/",
      "method": "POST",
      "description": "Upload a Chrome extension (CRX or ZIP) for analysis"
    },
    {
      "path": "/api/v1/extension/analyze/",
      "method": "POST",
      "description": "Trigger analysis of an uploaded extension"
    },
    {
      "path": "/api/v1/report/",
      "method": "GET",
      "description": "List reports or get reports by query"
    },
    {
      "path": "/api/v1/report/{id}/",
      "method": "GET",
      "description": "Get a specific report"
    }
  ],
  "pricing_model": {
    "type": "freemium",
    "details": {
      "free_tier": "Limited API access with rate limits, basic extension scanning",
      "paid_tier": "Full API access, higher rate limits, advanced risk scoring, custom integrations",
      "details_url": "https://crxcavator.io/pricing"
    }
  },
  "rate_limits": {
    "anonymous": "5 requests per minute",
    "authenticated_free": "60 requests per hour",
    "authenticated_paid": "Varies by plan, typically 1000+ requests per hour"
  },
  "capabilities": [
    "Scan and analyze Chrome extensions for security risks",
    "Risk scoring based on permissions, code quality, and known vulnerabilities",
    "Historical tracking of extension risk over time",
    "API for automated integration with security workflows",
    "Upload and analyze custom Chrome extensions",
    "Access to vulnerability database for Chrome extensions",
    "Generate detailed reports on extension risk",
    "Batch analysis of multiple extensions"
  ],
  "raw_analysis": "CRXcavator is a Chrome extension risk scoring platform designed for security teams and developers to assess the risk of Chrome extensions used in their organization. It provides a REST API documented at https://crxcavator.io/apidocs, which includes endpoints for querying extension details, risk assessments, reports, and uploading custom extensions for analysis. The platform scrapes the Chrome Web Store and analyzes extensions for permissions, code quality, known vulnerabilities, and other risk factors, generating a risk score. It is a mature product with a freemium pricing model: free tier offers basic scanning with limited API access, while paid tiers provide higher rate limits, advanced features, and priority support. Integrations are possible via the API, but no native integrations with common security tools (e.g., Splunk, Jira) are publicly documented. The platform is suitable for security teams, IT administrators, and DevOps who need to monitor browser extension risk. The API uses token-based authentication (API key), and the endpoints are RESTful. The main limitation is that the API requires a paid plan for substantial use, and the free tier is quite restrictive. Overall, CRXcavator is a niche but valuable tool for Chrome extension security assessment."
}

0/3 tests passed

{
  "overall": 35,
  "dimensions": {
    "token_efficiency": 7.0,
    "first_try_success": 4.0,
    "response_parseability": 6.0,
    "error_clarity": 3.0,
    "doc_quality": 4.0,
    "auth_simplicity": 5.0,
    "latency": 3.0,
    "consistency": 3.0
  },
  "pricing_normalized": {},
  "issues": [
    "Website DNS resolution failed - 'No address associated with hostname' for all checks, indicating the site is currently unreachable or the domain is misconfigured.",
    "No website uptime - all three checks returned errors, meaning the platform is not accessible to agents or users right now.",
    "No robots.txt or llms.txt found (due to DNS failure), limiting discoverability and structured access for agents.",
    "Cannot verify auth simplicity, documentation quality, or error clarity due to site being down."
  ],
  "recommendations": [
    "Fix DNS configuration or ensure the domain crxcavator.io resolves to a valid IP address.",
    "Ensure website is reliably hosted with proper uptime monitoring and a status page for transparency.",
    "Provide a public llms.txt file to help AI agents understand the platform's capabilities and API endpoints.",
    "Publish clear documentation on authentication (e.g., API keys) and error codes to aid automated integration.",
    "Consider offering a free tier with minimal friction for sign-up to enable quick first-try success."
  ]
}