Sonar — API Inventory

Audit your apps' API calls

Only for Mac

$29.99

Mac

Sonar builds a complete inventory of every external API call your own apps make — and it does it entirely on your Mac. Point Sonar at your iOS, web, or mixed source projects and it statically scans the code to surface a clean dashboard of every outbound dependency: raw HTTP and HTTPS endpoints, plus the third-party SDKs each project pulls in. In seconds you can answer the questions that usually take hours of manual grep: Which services does this app actually talk to? What endpoints are baked into the client? Did a forgotten key or token slip into source? EVERYTHING STAYS ON YOUR MACHINE Sonar performs 100% on-device static analysis. Your source code is never uploaded, never sent to a server, and never shared. There is no account, no login, no telemetry, and no network round-trip required to scan. What you scan stays on your Mac, full stop. SEE EVERY API CALL - Detects raw HTTP and HTTPS endpoints written directly in your client code. - Identifies third-party SDK usage across your projects. - Recognizes popular services out of the box, including Supabase, Stripe, Firebase, Anthropic, OpenAI, Replicate, ElevenLabs, Resend, DocuSign, and Google. - Organizes findings into a per-app dashboard so you can compare projects at a glance. CATCH SECRETS BEFORE THEY SHIP Sonar flags possible secrets — API keys, tokens, and credentials — that may be hardcoded in client source, so you can rotate or move them before they reach production or the App Store. CONFIGURABLE, NOT LOCKED DOWN and you can add your own rules to detect any internal API, vendor, or pattern your team cares about. Tune Sonar to match your stack instead of fighting a fixed list. FAST RESCANS Sonar parses Swift and JavaScript/TypeScript today. Rescans are incremental: only the files that changed are re-parsed, so keeping your inventory current is quick even on large codebases. SAFE BY DEFAULT Sonar is strictly read-only. It analyzes your source and never modifies, moves, or deletes a single file in your projects. WHO IT'S FOR - Indie developers who want to know exactly what their apps phone home to. - App studios standardizing security and dependency reviews across a portfolio. - Security-conscious engineers auditing client-side surface area. - Agencies reviewing the apps they build for clients. Sonar gives you the visibility of a manual security audit with the speed of a static analyzer — privately, on your own Mac. What's New Initial release of Sonar. - On-device static analysis of your iOS and web source. - Per-app dashboard of every HTTP/HTTPS endpoint and third-party SDK. - Built-in detection for Supabase, Stripe, Firebase, Anthropic, OpenAI, Replicate, ElevenLabs, Resend, DocuSign, and Google. - Possible-secret flagging for hardcoded keys and tokens in client source. - Editable JSON rule packs — add detection for any service you use. - Incremental rescans that re-parse only changed files. - Parses Swift and JavaScript/TypeScript. Terms https://sonar.nyrai.ai/terms Privacy https://sonar.nyrai.ai/privacy Thanks for trying Sonar.

Ratings & Reviews

  • This app hasn’t received enough ratings or reviews to display an overview.

New: Compliance tab Turn your scan into the privacy paperwork the App Store expects — all on your Mac, nothing uploaded. • Software Bill of Materials (SBOM): generate a CycloneDX list of every third-party dependency, per app and across your whole portfolio. • Privacy Manifest: check your app's PrivacyInfo.xcprivacy and generate a ready-to-review starter, pre-filled from what Sonar finds. • Required-reason APIs: detect where your code uses required-reason APIs and see the reason codes you need to declare. • Tracking & consent checks: flag tracking SDKs and possible pre-consent initialization. • Reports: export as PDF, HTML, JSON, and CycloneDX. • Readiness score per app, plus a portfolio overview. Also: expanded in-app Help that explains every result in plain language.

Version 1.1.0

The developer, NYRAI LLC, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Collected

    The developer does not collect any data from this app.

    Privacy practices may vary, for example, based on the features you use or your age. Learn More

    Accessibility

    The developer has not yet indicated which accessibility features this app supports. Learn More

    Information

    Seller
    • NYRAI LLC
    Size
    • 140.2 MB
    Category
    • Developer Tools
    Compatibility
    Requires macOS 13.0 or later.
    • Mac
      Requires macOS 13.0 or later.
    Languages
    English and 51 more
    • English, Afrikaans, Amharic, Arabic, Bengali, Bulgarian, Catalan, Croatian, Czech, Danish, Dutch, Estonian, Filipino, Finnish, French, German, Greek, Gujarati, Hebrew, Hindi, Hungarian, Indonesian, Italian, Japanese, Kannada, Korean, Latvian, Lithuanian, Malay, Malayalam, Marathi, Norwegian Bokmål, Persian, Polish, Portuguese, Romanian, Russian, Serbian, Simplified Chinese, Slovak, Slovenian, Spanish, Swahili, Swedish, Tamil, Telugu, Thai, Traditional Chinese, Turkish, Ukrainian, Urdu, Vietnamese
    Age Rating
    16+
    Copyright
    • © @ 2026 NYRAI LLC
  • Developer Website
  • Privacy Policy

    • Supports

    • Family Sharing

      Up to six family members can use this app with Family Sharing enabled.

    More by NYRAI LLC