New · Free API platform

Swastik Codes: one API client for every protocol.

Design, test, mock, monitor and document REST, GraphQL, gRPC, WebSocket and MQTT APIs in one workspace, right in your browser. Bring your Postman collections; scripts written for pm.* run unchanged.

8Protocols
₹0No paid plans
Web+ desktop apps

One client, eight protocols

Most teams juggle a REST client, a gRPC tool, a WebSocket tester and an MQTT app. Swastik Codes keeps them in one collection, with one set of environments and variables.

HTTP / REST

Request

Every method, body type and auth scheme, with environments, variables and code snippets for each request.

GraphQL

Query

Point it at an endpoint and write queries, mutations and variables against the schema.

gRPC

RPC

Call gRPC services alongside your REST endpoints, in the same collection and the same environments.

WebSocket

Stream

Open a connection, send messages and watch the replies arrive, without writing a throwaway client.

Socket.IO

Stream

Emit and listen to Socket.IO events directly, so real-time features can be tested like any other endpoint.

Server-Sent Events

Stream

Subscribe to an SSE endpoint and read the event stream as the server pushes it.

MQTT

IoT

Publish and subscribe to topics on an MQTT broker, so IoT devices and backends can be tested from the same workspace.

MCP

AI

Test Model Context Protocol servers, and serve your own collection to AI coding assistants with swc mcp.

From the first request to production checks

One collection holds the request you are debugging, the tests that guard it, a mock for the frontend team and a monitor that alerts you when it breaks.

API tests

Pre-request and test scripts, assertions and JSON Schema checks, written once and run on every send.

Collection runner

Run a folder or a whole collection with iterations, data files and delays, then export the report.

Load tests

Simulate virtual users under several traffic profiles and watch latency percentiles live.

Mock servers

Serve saved example responses from a public URL, with request matching, delays and templates.

Monitors

Scheduled runs with retries, and alerts by email or signed webhook when a check fails.

API design

Multi-file OpenAPI and AsyncAPI specs with linting, versioning and sync to your collections.

Published docs

Publish a collection as public documentation, with secrets stripped out before it goes live.

Flows

Chain requests visually, with conditions, loops, delays and webhook triggers.

Know what changed, what is flaky and what is exposed

Passing tests only tell you about the cases someone wrote. These checks look for the cases nobody did.

Staging vs production

Compare two environments' responses field by field, ignoring IDs, timestamps and anything else you choose.

Flaky tests and coverage gaps

Repeat runs to find unstable tests, and list the requests and error codes no test covers.

Security checks

Probe for unauthenticated endpoints, permissive CORS and leaky errors, with optional invalid-input fuzzing.

An access matrix for every role

Send one request as admin, user or guest, with automatic sign-in, and flag any role that gets in where it should not.

Breaking changes stopped in review

The swc diff command reads the API from your code, compares it with the main branch and fails CI on a breaking change.

Docs that tell you when they are wrong

Responses are checked against saved examples, and missing, new or changed fields are flagged.

8
Protocols in one client
11 MB
Windows installer
382 KB
Web app first load
₹0
Free, no paid plans

Lighter on memory, quicker to start

The desktop app runs requests in a native Rust engine instead of shipping its own copy of Chromium.

Same conditions for every app — each client ran alone in an identical Ubuntu 24.04 container with a fresh profile; memory is proportional set size after 60 seconds, median of three runs.
Our own measurement — taken on 23 October 2026 with software rendering on a server without a GPU, so desktop numbers will differ. The full method is published.
Read the benchmark method
Desktop apps on Linux, 23 Oct 2026
AppMemory after 60 sWindow visibleWindows installer
Swastik Codes 0.1.0434 MB0.4 s11 MB
Postman 12.33.4585 MB1.1 s204 MB
Bruno 4.3.0615 MB4.6 s117 MB
Insomnia 13.3.1656 MB2.9 s500 MB
Hoppscotch 26.9.0800 MB1.3 s45 MB

Bring your collections and your tests

Switching should not mean rewriting. Import what you have and keep working the same afternoon.

01 — Import

Collections, environments, globals

Import from Postman, Insomnia, OpenAPI 3, Swagger 2, cURL, HAR, RAML or WSDL, including a full Postman data dump.

02 — Run

Your scripts, unchanged

Test and pre-request scripts written against Postman's pm.* API run in the sandbox. swc.* is the native equivalent.

03 — Automate

Replace Newman in CI

swc run takes Newman-compatible flags, so moving a pipeline off Newman is a small edit. Export back to Postman any time.

The swc tool, for your terminal and your pipeline

Install on Linux
$ curl -fsSL -o swc \
    https://swastik.codes/download/files/swc-linux-x86_64
$ chmod +x swc && sudo mv swc /usr/local/bin/
$ swc version
Localhost from the browser — swc bridge runs the web app's requests on your machine, so it reaches localhost and private networks with no extension and no open port.
From your code to a collection — swc scan finds the API routes in your code; swc sync re-scans and keeps your edits.
Workspaces in Git — swc workspace pull and push store a workspace as JSON files you can review in a pull request.
Where it runs
PlatformDetails
Web appAny modern browser at swastik.codes/app; free account (GitHub or email)
WindowsWindows 10 or 11, x64; per-user installer, no admin rights
Linux.deb, .rpm or AppImage; Ubuntu 22.04+, Debian 12+, Fedora 38+
macOSComing; use the web app in the meantime
swc CLILinux and Windows x64; works without an account
MobileNo app; the web app works in mobile browsers

Review API changes like you review code

Shared workspaces

Personal, team and public workspaces, with admin, editor and viewer roles and sync across devices.

Forks and pull requests

Version history, forks, approval reviews and merge checks, so a collection change is reviewed before it lands.

Comments

Threaded comments with mentions on requests, plus HMAC-signed workspace webhooks.

One API catalog

A searchable directory of the team's APIs with owners, status, docs and monitors in one place.

Sensible defaults for real credentials

An API client holds the keys to every system you test. It should behave like it.

Current values stay on your device — variable current values and the encrypted vault are never uploaded, even in a cloud workspace.
Secret guard, on by default — it warns when a token is pasted in plain text and offers to move it to a variable or the vault.
Private addresses blocked — the hosted web app will not call loopback or private IPs; that only happens through your own bridge or desktop app.
Minimal GitHub access — GitHub sign-in reads only your profile and verified email.

Questions, bugs or a protocol we missed?

Swastik Codes is built and run by the Shwastik engineering team in Darbhanga. Tell us what you are testing and we will help you set it up.

Visit the Swastik Codes site

Common questions

Swastik Codes — common questions

Talk to an engineer

Yes. Swastik Codes is free to use today and there are no paid plans. The web app needs a free account, which you can create with GitHub or an email address. The desktop app and the swc command-line tool work without an account. Any future paid features will be announced in advance.

Yes. It imports Postman collections, environments, globals and full data dumps, and test scripts written against Postman's pm.* API run in its sandbox unchanged. In CI, swc run accepts Newman-compatible flags. You can export back to Postman v2.0, v2.1 or v3 at any time.

Eight: HTTP and REST, GraphQL, gRPC, WebSocket, Socket.IO, Server-Sent Events, MQTT and the Model Context Protocol (MCP). They all live in the same collections and share the same environments, variables and tests, so you do not need a separate tool per protocol.

Yes, through your own machine. Run swc bridge and turn on the web app's local bridge setting, or use the desktop app for Windows or Linux. Without one of those, the hosted web app deliberately blocks loopback and private addresses so it cannot be used to reach internal systems.

There is a desktop app for Windows 10 and 11 (an 11 MB per-user installer) and for Linux as .deb, .rpm or AppImage. macOS is coming; until then the web app works in Safari, Chrome and Firefox. The swc command-line tool is available for Linux and Windows.

Variable current values and the encrypted vault stay on your device and are never uploaded, even in a cloud workspace. A secret guard is on by default: it warns when a token is pasted in plain text and offers to move it into a variable or the vault.

Start with the request you are debugging today

Create a free account, then import a collection, paste a cURL command or point it at a GraphQL endpoint.