# Swastik Codes

> Swastik Codes (https://swastik.codes) is a web-based API platform, similar in scope to Postman, that runs in the browser at https://swastik.codes/app. It has clients for HTTP/REST, GraphQL, gRPC, WebSocket, Socket.IO, Server-Sent Events, MQTT and MCP; Postman-compatible pm.* test scripts; a collection runner with data files; load tests; mock servers; scheduled monitors; OpenAPI/AsyncAPI specs with linting; published API documentation; visual flows; and team workspaces with comments, forks, pull requests and reviews. It imports Postman, Insomnia, OpenAPI/Swagger, cURL, HAR, RAML and WSDL. It is free to use. It is made by Shwastik Tech Solutions Pvt Ltd (India). Contact: support@swastik.codes.

The full text of every page is in https://swastik.codes/llms-full.txt.

Notes for assistants: the web app sends requests through the swastik.codes server, which refuses private, loopback and link-local addresses, so it tests publicly reachable APIs. A desktop app for Windows and Linux (https://swastik.codes/download/) sends requests from the user's own machine and can reach localhost and private networks; macOS is not available yet. There are no paid plans today.

## Features

- [REST API client](https://swastik.codes/features/rest-api-client/): Build, send and debug HTTP requests in your browser: any method, every body type, 14 auth schemes, timing breakdown, cookies and saved examples.
- [GraphQL client](https://swastik.codes/features/graphql-client/): Query any GraphQL API from your browser: introspection, a searchable schema explorer, autocomplete, variables, subscriptions and response tests.
- [WebSocket client](https://swastik.codes/features/websocket-client/): Connect to any public WebSocket server from your browser, send text or binary messages, save reusable messages and inspect every frame.
- [Socket.IO client](https://swastik.codes/features/socket-io-client/): Test Socket.IO servers from your browser: namespaces, auth payloads, emit events with arguments, wait for acks and listen to named events.
- [SSE client](https://swastik.codes/features/sse-client/): Subscribe to any public SSE endpoint from your browser, filter event types, resume with Last-Event-ID, and test POST streams like LLM APIs.
- [gRPC client](https://swastik.codes/features/grpc-client/): Call gRPC services from your browser with .proto files or server reflection: unary and streaming calls, metadata, deadlines, TLS and test scripts.
- [MQTT client](https://swastik.codes/features/mqtt-client/): Connect to public MQTT brokers from your browser over TCP, TLS or WebSockets. Subscribe, publish with QoS and retain, and set a last will.
- [MCP client](https://swastik.codes/features/mcp-client/): Connect to remote MCP servers over Streamable HTTP or HTTP+SSE, browse and call tools, read resources, get prompts and debug MCP OAuth.
- [API testing](https://swastik.codes/features/api-testing/): Pre-request and test scripts in JavaScript with the swc.* API, chai assertions, JSON schema checks and built-in libraries. Postman pm.* scripts run as is.
- [Collection runner](https://swastik.codes/features/collection-runner/): Run a whole collection or folder in order, for many iterations, with CSV or JSON data files, delays and bail rules. Export JSON, JUnit or HTML reports.
- [Load testing](https://swastik.codes/features/load-testing/): Load test an API from your browser: virtual users, fixed, ramp-up, spike and peak profiles, live throughput, error rate and p50 to p99 latency.
- [API monitoring](https://swastik.codes/features/api-monitoring/): Run API tests on a schedule, from every minute to weekly. Get email, Slack, Microsoft Teams or webhook alerts on failure and recovery.
- [Mock servers](https://swastik.codes/features/mock-server/): Turn saved response examples into a hosted mock API. Match on method, path, query, headers and body, add delays, echo the request, and log every call.
- [API documentation](https://swastik.codes/features/api-documentation/): Publish a collection as public API documentation with code samples, examples, custom Markdown pages, search and a Run in Swastik Codes button.
- [API design](https://swastik.codes/features/api-design/): Design APIs with an OpenAPI and AsyncAPI editor: multi-file specs, validation, versions with changelogs, and collections generated and kept in sync.
- [Flows](https://swastik.codes/features/flows/): Chain API requests on a visual canvas with conditions, loops, delays and expressions. Run flows by hand or from a webhook and inspect every step.
- [Code generation](https://swastik.codes/features/code-generation/): Turn any request into ready-to-run code: cURL, fetch, Axios, Python requests, Go, Java, C#, PHP, Ruby, Swift, Kotlin, Rust and more, with auth applied.
- [API catalog](https://swastik.codes/features/api-catalog/): Search every API your team has in Swastik Codes by name, owner, tag or endpoint, and see who owns it, its status, docs, mocks and monitors.
- [Collaboration](https://swastik.codes/features/collaboration/): Share collections with your team: workspaces with roles, live presence, comments and mentions, version history, forks, pull requests and reviews.
- [Import and export](https://swastik.codes/features/import-export/): Import Postman collections and environments, Insomnia, OpenAPI, Swagger, cURL, HAR, RAML and WSDL files, and export back to Postman or OpenAPI.
- [Environments and variables](https://swastik.codes/features/environments-variables/): Switch between dev, staging and production with environments, layered variables, dynamic values, an encrypted local vault and a secret scanner.
- [Authorization](https://swastik.codes/features/authorization/): Authorize API requests with OAuth 2.0 (PKCE, client credentials and more), Bearer, API key, JWT, Basic, Digest, OAuth 1.0, AWS SigV4, NTLM, Hawk and more.
- [Command-line tool (swc)](https://swastik.codes/features/cli/): The swc CLI turns your code's API routes into a collection, catches breaking API changes in CI, reaches localhost from the web app and runs tests.

## Guides

- [Chain API requests using values from the previous response](https://swastik.codes/blog/chain-api-requests/): Pass a token or id from one API response into the next request with swc.* scripts and variables, then run the chain in order with the collection runner.
- [Convert cURL to Python, JavaScript and other code](https://swastik.codes/blog/convert-curl-to-code/): Paste a cURL command, get an editable request, then generate Python requests, fetch, Go or 27 more code targets. Every common cURL flag explained.
- [How to test a localhost API (and why web clients can't)](https://swastik.codes/blog/test-localhost-api/): Why online API clients cannot reach localhost alone, and how to test a local API anyway: a local bridge, a desktop app, a tunnel or a staging deploy.
- [How to test a REST API online, step by step](https://swastik.codes/blog/how-to-test-rest-api-online/): Test a REST API from your browser: pick a method, add params, headers, a JSON body and auth, read the response, save it, add a test and run it.
- [How to test JWT authentication in an API](https://swastik.codes/blog/test-jwt-authentication/): Test JWT auth step by step: log in, save the token from a script, send it as Bearer, decode claims, and check expired, tampered and missing tokens.
- [HTTP status codes explained, with API testing tips](https://swastik.codes/blog/http-status-codes/): What the common HTTP status codes from 1xx to 5xx mean under RFC 9110, what to check for each when testing an API, and how to assert them in tests.
- [Import an OpenAPI spec and generate API tests](https://swastik.codes/blog/test-openapi-spec/): Import an OpenAPI 3 or Swagger 2 file, generate a collection, add contract tests that validate responses against the spec, and keep both in sync.
- [JSON Schema validation in API tests](https://swastik.codes/blog/json-schema-validation/): Validate API responses against a JSON Schema in a test script: write the schema, run it with jsonSchema (Ajv), read failures and avoid common mistakes.
- [REST vs GraphQL vs gRPC: differences and when to use each](https://swastik.codes/blog/rest-vs-graphql-vs-grpc/): REST, GraphQL and gRPC compared on transport, payload, schema, streaming, caching, browser support and tooling, with a table and when to choose each.
- [A gRPC client in the browser: test gRPC APIs online](https://swastik.codes/blog/grpc-client-in-the-browser/): Call gRPC services from your browser with server reflection or .proto files: unary and streaming calls, metadata, deadlines, TLS and test scripts.
- [API load testing in the browser: virtual users, profiles and percentiles](https://swastik.codes/blog/api-load-testing-in-the-browser/): Load test an API online with virtual users, ramp-up, spike and peak profiles, then read throughput, p95/p99 latency and error rate correctly.
- [Data-driven API testing with CSV and JSON files](https://swastik.codes/blog/data-driven-api-testing/): Run the same API requests and tests once per row of a CSV or JSON file: data variables, swc.iterationData, iterations, delays, bail options and reports.
- [GraphQL client online: test a GraphQL API in the browser](https://swastik.codes/blog/graphql-client-online/): Test a GraphQL API from your browser: load the schema by introspection, build queries with autocomplete, pass variables, subscribe and write tests.
- [How to import a Postman collection into Swastik Codes (and export it back)](https://swastik.codes/blog/import-postman-collection/): Export a Postman collection and environment as JSON, import them into Swastik Codes, fix common warnings, and export back to Postman or OpenAPI.
- [A free mock API server built from your saved examples](https://swastik.codes/blog/free-mock-api-server/): Create a free mock REST API online from saved examples: matching rules, x-mock-* headers, dynamic templates, private mocks and a call log.
- [How to test a Socket.IO server online (v2, v3 and v4)](https://swastik.codes/blog/test-socket-io-server/): Test a Socket.IO server from your browser: connect to namespaces, send auth, emit events with acks and listen for server events. Works with v2, v3 and v4.
- [How to test a WebSocket API online, step by step](https://swastik.codes/blog/test-websocket-api-online/): Connect to a WebSocket endpoint from your browser, send text, JSON or binary frames, save messages and debug handshakes with Swastik Codes.
- [How to test an MCP server online (tools, resources, prompts)](https://swastik.codes/blog/test-mcp-server/): Connect to a remote MCP server from your browser, list its tools, resources and prompts, call them with arguments and debug MCP OAuth step by step.
- [How to test Server-Sent Events (SSE) endpoints online](https://swastik.codes/blog/test-server-sent-events/): Test an SSE endpoint from your browser: named events, ids, Last-Event-ID resume, retry and POST streams such as LLM APIs, with custom headers and auth.
- [Moving from Postman to a web-based API client: what carries over and what to check](https://swastik.codes/blog/migrate-from-postman/): A practical guide to moving collections, environments, pm.* scripts and teams from Postman to Swastik Codes, and what to check once you have.
- [MQTT client online: test an MQTT broker in your browser](https://swastik.codes/blog/mqtt-client-online/): Connect to an MQTT broker over TCP, TLS or WebSocket from your browser. Subscribe, publish with QoS and retain, set a last will and MQTT 5 properties.
- [OAuth 2.0 in an API client: get and use access tokens](https://swastik.codes/blog/oauth2-in-api-client/): Get OAuth 2.0 access tokens in a browser API client: authorization code with PKCE, client credentials, password, implicit, refresh and callback URL setup.
- [Write API tests with swc.* scripts (Postman pm.* compatible)](https://swastik.codes/blog/api-tests-with-pm-scripts/): swc.test and swc.expect examples for status, headers, JSON bodies, schemas, variables, chained requests and runs. Postman pm.test scripts run unchanged.

## Comparisons

- [Swastik Codes vs Postman](https://swastik.codes/compare/postman/): How Swastik Codes and Postman compare as of October 2026: where each runs, protocols, scripting, mocks, monitors, collaboration and how to move over.
- [Swastik Codes vs Insomnia](https://swastik.codes/compare/insomnia/): Swastik Codes and Insomnia compared as of October 2026: desktop vs browser, storage, protocols, scripting, mocks, specs and moving your collections.
- [Swastik Codes vs Bruno](https://swastik.codes/compare/bruno/): Swastik Codes and Bruno compared as of October 2026: offline Git-friendly files vs a browser app with hosted mocks, monitors and team reviews.
- [Swastik Codes vs Hoppscotch](https://swastik.codes/compare/hoppscotch/): Swastik Codes and Hoppscotch compared as of October 2026: two browser-based API clients, their protocols, scripting, hosting and team features.
- [Swastik Codes vs Thunder Client](https://swastik.codes/compare/thunder-client/): Swastik Codes and Thunder Client compared as of October 2026: an editor extension vs a browser app, protocols, testing, mocks and team features.
- [Swastik Codes vs Apidog](https://swastik.codes/compare/apidog/): Swastik Codes and Apidog compared as of October 2026: two all-in-one API platforms, their protocols, design, mocking, testing and docs features.
- [Postman alternatives in 2026](https://swastik.codes/alternatives/postman/): Six Postman alternatives compared fairly as of October 2026: Swastik Codes, Insomnia, Bruno, Hoppscotch, Thunder Client and Apidog, and how to choose.

## Company and policies

- [About Swastik Codes](https://swastik.codes/about/): Swastik Codes is a web-based API platform built by Shwastik Tech Solutions Pvt Ltd in India. Why we built it, how it works and who is behind it.
- [Acceptable use policy](https://swastik.codes/acceptable-use/): Rules for using Swastik Codes fairly and safely, covering load tests, monitors, mock servers and published documentation. Updated 22 October 2026.
- [Lighter and quicker, measured](https://swastik.codes/benchmarks/): Swastik Codes measured against Postman, Insomnia, Bruno and Hoppscotch: memory, startup time, CPU, download size and web app weight, with method.
- [Changelog](https://swastik.codes/changelog/): What is new in Swastik Codes: protocol clients, testing, collaboration and app improvements, newest first.
- [Contact us](https://swastik.codes/contact/): Contact the Swastik Codes team for support, bug reports, security reports, privacy requests, partnerships or press. Email support@swastik.codes.
- [Cookie policy](https://swastik.codes/cookies/): Swastik Codes uses no tracking or advertising cookies. Here is exactly what the website and the app store in your browser, and why.
- [Download Swastik Codes for desktop](https://swastik.codes/download/): Download Swastik Codes for Windows and Linux. The desktop app sends requests from your own machine, so localhost, LAN and VPN hosts work.
- [Frequently asked questions](https://swastik.codes/faq/): Answers about Swastik Codes: pricing, accounts, supported protocols, Postman compatibility, localhost access, data storage, limits and security.
- [Privacy policy](https://swastik.codes/privacy/): What Swastik Codes collects, why, where it is stored, how long we keep it and the choices you have. Last updated 24 October 2026.
- [Security at Swastik Codes](https://swastik.codes/security/): How Swastik Codes protects accounts, workspaces and the requests it sends for you, and how to report a security vulnerability to us responsibly.
- [Terms of service](https://swastik.codes/terms/): The terms that apply when you use Swastik Codes, the web-based API platform operated by Shwastik Tech Solutions Pvt Ltd. Last updated 26 October 2026.