Stop squinting at the DevTools Network tab. API Flow Tracker watches a page while you navigate, filters out the noise, and hands you a clean document of every API call β with a sequence diagram.
A browser opens, you click through the real flow, then say done β or just close the window. Files are written automatically.
Every recording writes three files. The one you read is the Markdown doc.
.md flow docA readable write-up: overview, a Mermaid sequence diagram, an ordered call table, and per-call detail.
.flow.jsonStructured, ordered data with request/response bodies β for Claude/Cursor to build even richer docs.
.harStandard HAR 1.2 β open it in Chrome DevTools, Postman, Insomnia or Charles.
A slice of a real generated .md β overview, diagram, ordered call table, per-call detail.
api.shop.com (5), pay.stripe.com (1)| # | Method | Endpoint | Status | Time |
|---|---|---|---|---|
| 1 | GET | api.shop.com/products | 200 | 121ms |
| 2 | POST | api.shop.com/cart/add | 201 | 340ms |
| 3 | POST | api.shop.com/checkout | 200 | 410ms |
| 4 | POST | pay.stripe.com/v1/payment_intents popup | 200 | 289ms |
{
"cart_id": "c_8123",
"email": "you@example.com",
"card_number": "[redacted]",
"cvv": "[redacted]"
}
No Node.js, no PATH headaches. One command installs a standalone binary β on macOS, Windows or Linux.
macOS & Linux β Terminal:
curl -fsSL https://apiflowtracker.com/install.sh | sh
Windows β PowerShell:
irm https://apiflowtracker.com/install.ps1 | iex
The installer prints the exact MCP config to add to Claude/Cursor β it looks like this (macOS/Linux path shown):
{
"mcpServers": {
"browser-flow-tracker": {
"command": "/usr/local/bin/browser-flow-tracker"
}
}
}
Already have Node? You can instead use "command": "npx", "args": ["-y", "browser-flow-tracker@latest"].
It speaks the browser's own DevTools Protocol, then does the tedious parts for you.
Drops images, fonts, CSS and analytics/telemetry (PostHog, GA4, RUM) so you see only the real API calls.
Secrets are redacted everywhere they hide: auth headers & cookies, ?token=β¦ URL params, and password/token fields inside request & response bodies.
The capture is user-driven: it records your real, authenticated flow instead of guessing. It never clicks for you.
OAuth windows, payment popups and new tabs are attached automatically β paused at birth so not even their first request is missed.
Works with Brave, Chrome, Arc, Edge and other Chromium browsers. Auto-picks a free debug port β no setup.
The HAR export carries true per-request timestamps β open it in DevTools, Postman or Charles and see the actual timeline.