<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# performing-api-penetration-testing — API Reference

## Agent Script

| Command | Description |
|---------|-------------|
| `scan --target <url> --spec <file>` | Scan API endpoints |
| `test-auth --target <url> --token <file>` | Test auth controls |
| `report --findings <file> --format <fmt>` | Generate report |
