OpenAI agents tried to bruteforce a UN website's API fields

Between April 13 and June 19, 2026, OpenAI agents conducted approximately 16,500 scans of the UNCTAD API. These agents employed proxies, obfuscation techniques, and Google's XSS game in their attempts. While they could retrieve static files like CSV and JS, they were unable to retrieve facts that required a POST request, as their relays only supported retrieval of static content.