Governance
Help & documentation
Technical guidance for current modules, explicit remote operations and browser-open runtime limitations.
Open the full Documentation CenterThe complete user manual, architecture, governance and trust docs — searchable, with diagrams, rendered offline from the in-app documentation set.
Start here
Quick start
First suite run in 5 minutes
- 1Settings → “Load public test APIs” adds four no-auth APIs (JSONPlaceholder, PokeAPI, Open-Meteo, REST Countries) with endpoints, environments, scenarios, mappings and an hourly smoke schedule. Scheduled execution requires the browser workspace to remain open. Open Browser schedulerRuns only while this browser and workspace are open.
- 2Open the Execution Console (G then E), pick a seeded scenario and press Run. Open
- 3Read the step-by-step trace: prevalidation, request, assertions — every step timed and recorded.
- 4Optional: Gateway Smoke runs the same scenarios against an exported gateway profile. Open
No account, no install — the demo workspace is already seeded.
Import
Four ways to bring a spec in
- 1File — drop an OpenAPI/Swagger JSON or YAML straight into the import wizard. Open
- 2URL — paste a spec URL and explicitly start the import. The loader normalizes and may probe supported paths; the selected server and browser CORS policy govern access, and a successful generic fetch can download the full specification. Open URL importAvailable in the current product.
- 3SwaggerHub — pull a published API by owner/name/version. Open
- 4Postman — convert a collection export into catalogued endpoints. Open
Every import gets a weakness report: missing enums, absent examples, vague descriptions.
Data residency & backups
Your workspace lives in this browser
- 1Application-managed workspace state persists in this browser profile by default. Browser storage is not application-level encrypted at rest, and explicit or configured operations can reach destinations listed on the Trust page. Open Workspace storageRuns locally in this browser.
- 2Settings → Portability exports the whole workspace as one bundle (optionally AES-256-GCM encrypted). Open
- 3Restore on any machine via merge or replace — encrypted bundles ask for their passphrase.
- 4Settings → Privacy & data shows the live key inventory and the erase-all-data control. Open
Browsers can clear storage — export a bundle before big cleanups.
Governance
Roles, reviews and locks
- 1Four roles — owner, editor, operator, viewer — with one-click impersonation in the topbar. Open
- 2Mapping changes flow through pending → approved / rejected / changes-requested. Open
- 3Mappings flagged as production are editable by owners only — locks live where the work happens. Open
- 4Every governance action lands in the append-only audit log. Open
Schema Diff impact reports export to PDF for the evidence file.
Module index — grouped like the sidebar
Workspace
3 modules
Modeling
6 modules
- Data PacksReusable request/response data sets that feed scenarios.
- ScenariosHappy paths, failures, malformed JSON and rate-limit rehearsals.
- Mapping StudioField-level mappings across APIs with live preview and a transform engine.
- Mapping ReviewsReview gates and production locks on every mapping change.
- Error LibraryStructured error cases ready to wire into scenarios.
- Schema DiffVersion diffs with endpoint/mapping/scenario impact, exportable as PDF or JSON.
Runtime
6 modules
- EnvironmentsBase URLs and auth profiles per API and stage.
- PrevalidationRule-based gates that stop bad requests before they leave.
- Execution ConsoleStep-by-step traces for every run — read the trace, not the tea leaves.
- Gateway SmokeSmoke-test exported gateway config (JSON / Kong YAML) against a profile.
- Scheduled RunsCron-style recurring runs require this browser workspace to remain open; throttling, sleep or closing the tab can pause them. A configured notification webhook is a separate explicit outbound capability.Browser schedulerRuns only while this browser and workspace are open.Configured webhookRuns only while this browser and workspace are open.
- Mock ForgeMock artefacts per endpoint and status code, driven by scenarios.
Intelligence
3 modules
Governance
3 modules
- Audit LogAppend-only record of every governance action.
- Trust Center11 manifest records disclose outbound boundaries, local data inventory and architectural GDPR mapping; 0 unresolved conflicts remain visible.11 records · 0 conflicts
- SettingsRoles, retention, portability, plan & licence, gateway export.
Keyboard
Shortcuts
| Keys | Action |
|---|---|
| Ctrl/⌘K | Open the command palette |
| / | Open the command palette (outside inputs) |
| GH | Go to Overview |
| GC | Go to API Catalog \ Import |
| GX | Go to API Explorer |
| GI | Go to Insights |
| GM | Go to Mapping Studio |
| GE | Go to Execution Console |
| GS | Go to Settings |
| ←→Esc | Navigate / close the product tour |
G-sequences: press G, then the letter within 1.5 seconds. They are disabled while typing in a field.
Support
Contact APIMaster support
The intended APIMaster support mailbox is UNVERIFIED/HOLD. Its delivery, ownership and staffing are not proved, so no public mail action or response-time promise is exposed; the in-app documentation and Trust Center remain available.
Support contact remains disabled until an owner-approved send-and-receive receipt proves mailbox delivery.
Open documentation Where your data lives