logoalt Hacker News

anamexisyesterday at 5:44 PM1 replyview on HN

And if you don't have a public API, you should always assume AI will be using your UI, reverse engineering your private API, and driving it directly.


Replies

cruffle_duffleyesterday at 6:06 PM

I absolutely love when they do that unprompted. I once asked a Claude work agent to go pull comparable apartment listings and somehow it’s subagent reverse engineered like rentcafe or whatever’s private API to get the data. All unprompted.

So yes. Absolutely assume AI agents acting on behalf of their humans are finding all the token efficient ways to get at your sites data.