# Dino

> The quality layer for APIs. Twelve autonomous agents that test, document, and monitor your APIs.

## Home

Dino is the QA engineer your team never has to hire. It runs autonomous API testing on every deploy: fuzzing, authentication checks, schema validation, and living documentation tied to your OpenAPI or GraphQL surface.

The homepage positions Dino as a quality layer that ships with your pipeline, not a separate manual testing step.

## Agents

Dino ships twelve specialist agents. Together they cover security fuzzing, RBAC matrices, response validation, documentation drift, performance signals, and lifecycle checks. Each agent produces deterministic output for the same inputs so CI stays trustworthy.

The agents page lists every agent with short descriptions of what it validates and how it fits the overall workflow.

## How It Works

The workflow connects your API, runs a scan, documents drift, monitors confidence-ranked signals, generates regression tests, and can open draft pull requests. Shadow Mode is the trust path: observe live traffic, build a baseline, then earn the right to suggest fixes or take action.

How it works explains the agentic QA loop from first scan through continuous verification.

## Security

Security covers data handling, boundaries, and how the scanner behaves when probing endpoints. Dino is designed to avoid destructive production effects and to keep findings on your side of the boundary unless you opt into cloud workflows.

Read the full security page on usedino.dev for the current posture and subprocess boundaries.

## Pricing

Dino offers a free tier with full CLI access. Paid tiers add dashboard features, Shadow Mode depth, and enterprise controls. Team pricing is structured around organization value rather than surprise per-seat traps on the free path.

See usedino.dev/pricing for tier tables and FAQ.

## Install

Install with npm install -g @dino-hq/cli. Initialize with dino init to create a .dino.yml, then run dino scan. The install page walks through four commands with notes on authentication and common first-run issues.

Requires Node.js 22 or newer for the documented CLI path.

## About

About explains why Dino exists and who builds it. The team focuses on API quality as a product surface: measurable, repeatable, and safe to automate.

## Philosophy

Philosophy states engineering principles: deterministic agents, transparent findings, and workflows that respect production trust. Quality should compound with every deploy instead of decaying between audits.

## Blog

_No posts in the local search index._

## Changelog

- **Documentation Refresh** (v0.4.5-docs-and-infrastructure, 2026-04-19): Mintlify docs refresh for REST/OpenAPI, README rewrites, and infrastructure fixes.
- **REST API Scanning** (v0.4.0-rest-api-scanning, 2026-04-18): Full REST API scanning with OpenAPI 3.0/3.1 discovery, 19 fuzz strategies across 6 attack surfaces, response validation, and CI gating.
- **CLI UX Patch** (v0.3.1-cli-ux-patch, 2026-04-16): dino init warns before sending you into a 30-second mystery timeout, and dino scan errors actually tell you what to do.
- **Rich Terminal UI** (v0.3.0-rich-terminal-ui, 2026-04-12): Ink-powered terminal rendering with ASCII dino header, bordered summary cards, health badges, and structured layouts. ESM bundle, Node 22.
- **Zero-Config Scanning** (v0.2.0-zero-config-scanning, 2026-04-06): Point Dino at any GraphQL API and get a full quality scan — no tenant files, no setup rituals.
- **Socket.dev remediation** (v0.1.1-socket-remediation, 2026-04-03): Security patch release. 4 Socket.dev findings remediated. npm audit clean.
- **First public release** (v0.1.0-first-release, 2026-04-01): Dino CLI is live on npm — autonomous GraphQL quality checks from your terminal.