What it does

Send one HTTP request from the backend and inspect its status, headers, timing and body. Browser CORS restrictions do not apply to this server-side connection.

Build

Prepare requests with environment placeholders, query parameters, Bearer/Basic authentication and JSON/form/text/XML bodies. Build produces a redacted cURL export without sending a request. Query values, headers and bodies are masked; secrets in URL paths cannot be identified, so review exports before sharing.

Access

Public internet destinations are supported. An administrator can optionally restrict origins. Rate limiting must be available before a request is sent. A fixed Tarsolution User-Agent identifies every call.

Limits

10 requests per minute per client IP, 30 per destination and 60 globally. JSON bodies up to 256 KiB, responses up to 1 MiB and a 12-second overall processing limit. Redirects are shown but never followed.

Privacy

Headers and bodies are not saved. Credentials entered here are sent to the selected approved destination. Requests can change data there; review the URL and method before running.

Inputs explained

Mode

Send makes one API call; Build only prepares a redacted cURL export without network access.

Request URL

Public HTTP(S) URL on port 80/443. Local/private addresses and redirects are blocked.

Method

The selected HTTP method is sent once. Requests are never automatically retried.

Environment variables

JSON object for {{name}} placeholders in the URL, query, headers and body. Server environment variables are never read.

Query parameters

JSON object appended to the URL; array values produce repeated parameters.

Request headers

JSON object of string values, for example {"Authorization":"Bearer …","Accept":"application/json"}. Transport and proxy headers cannot be overridden.

Body type

Select JSON, a JSON object encoded as form fields, raw text, XML, or no body.

Body

Optional body using the selected format. GET/HEAD cannot have a body. Supports {{name}} placeholders.

Authentication

None uses custom headers; Bearer and Basic set Authorization from the credential field.

Bearer token / user:password

Bearer token or Basic user:password. Sent only to the selected destination; masked in Build exports.

Expected status

Compare the response status with this value; failed assertions do not hide the response.

I am authorized to test this API and accept the API testing terms

Confirm ownership or permission to test the destination and accept /terms. This confirmation is required before every request and is not saved.