Zero-Config Scanning

Point Dino at an endpoint and it just works: resilient introspection, operations generated from the live schema, and clean, pipeable output.

Point Dino at an endpoint and it just works. v0.2.0 makes a meaningful scan possible with nothing but a URL: resilient schema introspection, operations generated from the live schema, and clean output you can pipe like any other tool.

Resilient introspection

CDNs and depth limits used to block introspection cold. Dino now falls back through three tiers: a full introspection query, then a shallow one, then a minimal one. If the first is blocked, the next tries, so you get a usable schema instead of a dead end.

Operations from the live schema

No -operations.json on disk? Dino builds its operation registry and mappings directly from introspection, so a brand-new API works on day one with zero config.

Clean pipes

Telemetry and secondary logs now go to stderr; your JSON report is the only thing on stdout. dino scan --endpoint https://your-api.com/graphql | jq works exactly as you would expect.

Prefer a config file? A minimal .dino.yml with endpoint and protocol is enough; everything else can stay default.