API Tester

What it is

A browser-based client for calling HTTP APIs: build a request, send it, read the response, check it, and keep it for next time. If you've used Postman or Insomnia you'll feel at home — no desktop app, no subscription.

What you can do

• Send GET, POST, PUT, PATCH, DELETE, HEAD and OPTIONS requests with query parameters, headers and a JSON, XML, text, form, multipart (file upload), GraphQL or raw-file body.
• Authenticate with Bearer tokens, Basic, API keys, OAuth 2.0 (client credentials or password), Digest, NTLM or AWS Signature v4 — per request, or once on the collection.
• Read the status, timing breakdown, headers, cookies and a formatted, filterable body; images preview inline, and anything can be downloaded.
• Organise requests into collections with folders, and work in several tabs at once.
• Share collections with other getdowntonight users, read-only or read & write. Shared collections update live for everyone, and the app warns you before you overwrite someone else's change.
• Keep personal environments (dev, staging, live) and use {{variables}} anywhere — URL, parameters, headers, body and auth.
• Add checks (status, JSON values, headers, timing) and save values to variables — such as a login token — then run a whole collection or folder with the runner.
• Import Postman collections and environments or a curl command; export to Postman, or copy a request as curl, JavaScript or Python.
• See your history of recent requests.

Server or browser

Requests normally go out from our server, so browser CORS rules don't get in the way — but only to the public internet. To reach localhost, a VPN or your intranet, switch Send via to Browser: the request then leaves from your own machine (the API has to allow CORS).

Who it's for

Developers and testers who want a quick, shared place to work with an API. Because it runs on this platform rather than your laptop, your collections follow you between machines.

Getting access

Create a free account and add API Tester from your dashboard. It's available straight away.

Your data

Collections, environments and history are private to your account unless you share a collection; environments are never shared. Saved credentials and variables are encrypted at rest, history keeps 30 days (up to 200 requests) with auth headers, cookies and passwords redacted, and you can turn history off. Your data is never sold or shared, and you can ask for it to be deleted at any time. See the privacy policy.