Frequently asked questions
Short answers to the questions we hear most. If yours is not here, ask us.
Frequently asked questions about Swastik Codes
What is Swastik Codes?
Swastik Codes is a web-based API platform. You use it to send and debug API requests, write tests, run collections, load test, mock APIs, monitor them on a schedule, design them with OpenAPI or AsyncAPI specs and publish documentation, alone or with a team. It runs in the browser at swastik.codes/app.
Is it free?
Yes. Swastik Codes is free to use today and there are no paid plans. If we ever introduce paid features, we will announce them in advance, and what you use for free today will not start costing money without your agreement. See our terms.
Do I need an account?
The web app needs a free account (GitHub or email). It lets you send requests, connect with the protocol clients, sync across devices, use mock servers and monitors on our servers, and work with a team. The desktop app and the swc CLI also work without an account, because requests run on your own computer.
Which protocols does it support?
HTTP and REST, GraphQL (queries, mutations and subscriptions, with schema introspection), gRPC (unary and streaming, from .proto files or server reflection), WebSocket, Socket.IO (v2, v3 and v4), Server-Sent Events, MQTT (3.1.1 and 5) and the Model Context Protocol (MCP) over Streamable HTTP or HTTP+SSE. See the features overview.
Can I use my Postman collections?
Yes. Swastik Codes imports Postman collections (v2.0, v2.1 and the v3 format), environments, globals and data dumps. Scripts written against Postman's documented pm.* API, including pm.test, pm.expect, pm.sendRequest and pm.execution.setNextRequest, run in our sandbox unchanged. swc.* is our name for the same API, and the importer can convert your scripts to it. Read how to import a Postman collection and what changes when you move from Postman.
Can it reach localhost or my company network?
Yes, in two ways. In the browser, run swc bridge on your computer and switch on Local bridge in the app's status bar: requests and collection runs then run on your machine and reach localhost, your LAN and VPN hosts, with no browser extension or CORS settings. Or use the desktop app for Windows or Linux, which does the same for every protocol. Without either, the web app sends requests from our server, which refuses private and loopback addresses to protect its network.
Can I sign up with GitHub?
Yes. Click Continue with GitHub on the sign-in or sign-up page, in the browser or the desktop app. Signing in only reads your GitHub profile and verified email address, never your repositories. If you already have an account with the same verified email, GitHub is linked to it. You can add a password later under Account settings to also sign in with your email.
Can it document my private GitHub repositories?
Yes. Under Account settings → GitHub, connect GitHub and allow repository access, then choose a repository, branch and folder. Swastik Codes finds the API routes in the code (FastAPI, Django, Flask, Express, NestJS, Spring, Laravel, Go, Rails, ASP.NET and more) and builds a collection with its documentation. On every push it scans again and updates the requests and docs, keeping your own names, descriptions, examples and tests; published docs update with it. If you are not an admin of the repository, new commits are checked every 10 minutes instead of by webhook.
How do I delete my account?
Open Account settings → Security → Delete account and confirm. Your personal workspace and everything in it are deleted, along with your sessions and API keys. If you are the only admin of a team that has other members, make someone else an admin first.
Is there a desktop app, CLI or mobile app?
Yes, there is a desktop app for Windows and Linux: download it here. It sends requests from your own machine and includes everything the web app does. A macOS version is coming. The swc command-line tool for Linux and Windows scans your code for API routes into a collection, connects the web app to localhost with swc bridge, and runs collections in CI. There is no mobile app; the web app works on phones and tablets in the browser.
Where is my data stored?
Local workspaces stay in your browser. Cloud workspaces are stored in an access-controlled database on our servers so they can sync and be shared. Current values of variables never leave your device. Our privacy policy has the details.
Are my API keys and tokens safe?
Put secrets in the current value of a variable or in the encrypted vault, and they stay on your device. The secret guard is on by default: it warns you when you save or export a request with a token typed in as plain text, and before you make anything public through published docs or a public workspace. Read more on our security page.
Can I run load tests against any website?
No. Only test systems you own or are authorised to test. The hosted service caps virtual users and duration. See the acceptable use policy and the guide to API load testing in the browser.
How do mock servers work?
Save example responses on your requests, then create a mock server from the collection. It gets a public URL that answers each call with the best-matching example, with optional matching on headers and body, delays and templates that echo the request. See mock servers.
Can my team work together?
Yes. Create a team, invite people by email with admin, editor or viewer roles and share workspaces. You get live presence, comments with mentions, version history, forks and pull requests with reviews. See collaboration.
Can I export my data?
Yes. Export collections as Postman v2.1, v2.0 or v3, OpenAPI 3 (JSON or YAML), environments in Postman format, or a whole workspace as a ZIP archive.
How do I report a bug or a security issue?
Email support@swastik.codes or use the contact form. For security issues, follow our responsible disclosure policy.