Terms

The license

The source is released under the MIT License. You may use, copy, modify, merge, publish, distribute, sublicense, and sell copies of it, subject to the conditions in the LICENSE file in the repository.

What you are responsible for

OakParse is a tool for reading traffic you already have and for reading resources a site already publishes. What you point it at is your decision and your responsibility.

• Only import HAR files you are authorized to possess and analyze
• Only analyze sites you own or have permission to assess
• Only send playground requests you are authorized to send
• Follow the terms of service, acceptable use policies, and computer misuse laws that apply to you and to the systems you touch

What the tool will not do

These limits are built into the code, not left to policy.

• URL discovery never guesses or brute forces paths. It reads only what a site publishes at well known locations or references in its own frontend code.
• Nothing is ever sent to a target automatically. The playground sends only when you press Send.
• No authentication is bypassed, tested, or attacked. Credentials you supply are used verbatim and nothing more.
• Security findings are passive observations drawn from traffic you already captured. Nothing is probed, fuzzed, or exploited.

Accuracy

Documentation generated by OakParse is inferred from samples. A schema built from three responses describes those three responses, not the full contract. Endpoints marked as discovered were only referenced in public code and were never observed running.

The interface labels the difference everywhere it appears, and exports carry the same marking. Treat generated specs as a strong starting point that a human should review, not as authoritative documentation.

AI output

The assistant is constrained to reference only endpoints present in your workspace, and responses are validated before they are displayed. That reduces invention but does not eliminate it. Explanations are a reading aid. Verify anything you intend to rely on.

No warranty

The software is provided as is, without warranty of any kind, express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, and noninfringement. In no event shall the authors or copyright holders be liable for any claim, damages, or other liability arising from the software or its use.

The hosted deployment

The reference deployment is offered as a convenience with no uptime commitment and no support obligation. It may be rate limited, changed, or taken down at any time. For anything you depend on, run your own instance.

Abuse

Access to the hosted deployment may be restricted if it is used to attack systems, to evade rate limits, or in a way that puts the service or third parties at risk.