New: six more vendors under watch — posthog, elevenlabs, telnyx, gusto, neon, klaviyo. See the register →

Dependabot for the APIs you call

Know which of your lines a vendor just broke.

Six products will tell you Stripe changed. oxpecker tells you it broke line 41 of billing.py — on the pull request, 50 days before the sunset date.

Watch a repository See a real finding

Invite only · 26 vendors · your source never leaves your CI

The oxpecker findings page. Seven findings across openai, stripe, sendgrid, anthropic, github, twilio and plaid. The selected one, an endpoint removed from openai, shows three call sites in ByteCorp-Tech/btcms with file and line numbers and a confidence of certain or likely, the code at the first use, and the note that no mechanical fix is offered because oxpecker will not rewrite a call it cannot prove.
The actual product, not a mockup — this frame is rendered by the same harness that checks every page against its approved design.

Watching the APIs your code already calls

Stripe GitHub OpenAI Shopify Twilio Anthropic Cloudflare Supabase Sentry Notion

and 16 more — 26 vendors diffed on a schedule, so you never pay for it

Why you will barely hear from us

Almost nothing your vendors ship has anything to do with you.

Which is exactly why a feed of every change is worthless. We index the endpoints and response fields your code actually reads, then stay silent unless a change lands on one. Silence is the feature; the catch is the product.

Changes evaluated

2,140

against this repository, last quarter

Passed in silence

2,134

no check, no email, no interruption

Reached the team

6

each naming a file and a line

Caught before sunset

6 / 6

median 44 days of runway

live · watching acme/payments
evaluated 2,140 silent 2,134 reached you 6

What we would not know

A tool that hides its recall is worse than no tool.

Seven products in this category claim more than they demonstrably do. Here is where ours stops.

Two languages indexed
Python and TypeScript/JavaScript. Ruby, Go, Java, PHP and C# are scanned for vendor evidence and reported as unindexable — never counted as "no usage".
Opaque call sites
Where a response is stored, re-served or read by dynamic key, every field is treated as used. Noisier, never silently wrong — and the fraction is measured, not estimated.
Silent behaviour changes
A vendor altering what a field means without altering its shape is invisible to any differ, ours included.
No fix we cannot prove
Where there is no clean mechanical transform, you get an issue and the analysis — not a guessed rewrite of your payments path.

Under watch today

26 vendors, and the gaps named.

anthropic · bamboohr · clerk · cloudflare · cohere · datadog · elevenlabs · github · groq · klaviyo · neon · notion · openai · plaid · posthog · resend · retell · revenuecat · sendgrid · sentry · shopify · stripe · supabase · telnyx · twilio · vercel

Pick a repository. It opens a pull request adding one file.

Reviewable before it merges. Nothing auto-merged, and nothing unvalidated ever opened against a payments path.

Sign in with GitHub hello@oxpecker.dev