This REST API client lets you test an API without installing Postman or Insomnia. Pick a method, paste a URL, add query parameters, headers and a JSON, text or form body, choose Bearer or Basic authentication and press Send. You see the status code, the time the request took, the response size, every response header and the body, with JSON pretty-printed and colour-coded.
Requests go straight from your browser to the API, so nothing passes through a ToolOrca server and your tokens stay on your device. Your recent requests are kept in this browser's history so you can run them again, and one click copies any request as a curl command or a JavaScript fetch() snippet. Presets for the free ToolOrca sample API let you try it straight away.
How to use the REST API Client tool
- Choose the HTTP method (GET, POST, PUT, PATCH, DELETE, HEAD or OPTIONS) and enter the request URL, or pick a preset from the ToolOrca sample API.
- Add query parameters and headers in the tables. Untick a row to leave it out without deleting it.
- For POST, PUT and PATCH, pick a body type (JSON, text or form) and type the body. Format JSON tidies it and checks it is valid.
- Under Auth, choose Bearer token or Basic (username and password) if the API needs it.
- Press Send (or Ctrl+Enter). Read the status, time, size, headers and body, then copy the response or the request as curl or fetch.
Why use ToolOrca REST API Client
- All common methods: GET, POST, PUT, PATCH, DELETE, HEAD, OPTIONS
- Query parameter and header editors with on/off switches
- JSON, plain text and form-urlencoded bodies
- Bearer token and Basic authentication
- Status, response time, size and all readable headers
- Pretty-printed, colour-coded JSON
- Copy as curl or fetch, and request history in your browser
- Works on phones as well as desktops
Why some APIs fail here: CORS
A web page may only read a response from another domain when that server allows it with the Access-Control-Allow-Origin header (CORS). Many public APIs do, and so does every ToolOrca sample API endpoint. Private APIs and many company backends do not, and then the browser blocks the response and the client shows a network error, even though the same request works in curl or a mobile app.
If that happens, use Copy as curl and run the request in a terminal, or ask the API owner to allow your origin. Browsers also hide some response headers unless the server lists them in Access-Control-Expose-Headers, and forbid setting a few headers such as Cookie, Host and Origin.
Reading HTTP status codes
2xx means success: 200 OK, 201 Created after a POST, 204 No Content after many DELETEs. 3xx are redirects, which the browser follows for you. 4xx means the request was wrong: 400 bad input, 401 missing or invalid login, 403 not allowed, 404 not found, 422 validation failed, 429 too many requests. 5xx means the server failed.
Use the HTTP Testing API to see each status on purpose: /api/v1/status/404, /api/v1/delay/3 for slow responses and /api/v1/echo to see exactly what your request sent.
Frequently asked questions
Is this an online Postman alternative?
For everyday testing, yes: methods, params, headers, bodies, auth, history and copy as curl. It runs in your browser with no install or account. For team collections and automated test suites, a desktop tool is still better.
Why do I get "Failed to fetch" or a network error?
Usually CORS: the API does not allow requests from web pages on other domains. It can also mean the URL is wrong, the server is down, or you called an http:// API from this HTTPS page (mixed content). Try the request with curl to compare.
Are my tokens and requests sent to ToolOrca?
No. Requests go directly from your browser to the URL you enter. History is stored only in your browser's local storage, and you can clear it at any time.
Can I test APIs on localhost?
Yes, if your local server allows CORS from this site. Browsers allow calls from an HTTPS page to http://localhost, but your server must send the CORS headers.
Is there an API I can practise with?
Yes: the free ToolOrca sample API has fake products, users, posts, todos and login, a Khmer dictionary and a Khmer calendar. Pick one from the presets menu.