System

Settings & governance

Workspace configuration, roles, plan & licence, portability, privacy and gateway export.

Workspace

General & impersonation

Workspace nameNorthwind Integration

Time zoneEurope/Budapest

Default environmentProduction

Demo impersonation

Acting as

Current role: owner

Retention

Local state & retention defaults

API Workbench Pro stores workspace state locally so the workbench is offline and desktop-portable. Retention policies apply automatically via the schedule tick and on demand below.

Execution daysAudit daysSnapshot days

Run schedules automatically while the workbench is open

Tick interval (s)

"Load public test APIs" adds four free no-auth APIs (JSONPlaceholder, PokeAPI, Open-Meteo, REST Countries) with endpoints, environments, scenarios, mappings, an AI config and an hourly smoke schedule — enough to exercise every workbench surface end-to-end.

Portability

Workspace portability

Download the entire workspace — APIs, endpoints, scenarios, mappings, runs, audit trail and API Explorer state — as one portable bundle. Restore it on any machine; nothing touches a server.

Include secrets (environment auth headers, explorer API keys)Default: auth header values are written as <REDACTED> and API keys are omitted.Passphrase (optional — encrypts the bundle)Pro

Restore a .awpb.json bundle. Encrypted bundles are detected automatically and ask for their passphrase.

Import modeMergeAdds missing entries by id; newer imports win on conflicting timestamps. History is unioned. Your role and settings stay untouched.ReplaceOverwrites the whole workspace with the bundle contents — current local state is discarded. Requires typed confirmation.

Commercial

Plan & licence

Trial

Trial — all features unlocked. Explore everything; premium features carry a small plan chip so you know what each tier covers. Nothing is blocked.

Licence key

Keys are verified offline (Ed25519, WebCrypto) — activation never calls home. Evaluating? Use AWP1-DEMO-PRO or AWP1-DEMO-TEAM.

Payment is handled via our sales contact; licence keys are delivered by email. No card data ever enters the app.

What each tier includes

Free	The full workbench — catalog, explorer, designer, scenarios, mocks, mappings, schedules, audit
Pro	Free + CORS relay · Encrypted workspace bundles · CI pipeline exports · TM Forum conformance pack
Team	Pro + Evidence exports · Reviews & production locks at scale · Scheduled-run webhooks · API Change Intelligence
Enterprise	Team + EU-hosted encrypted sync · SSO (OIDC) (roadmap)

View pricing

Members

Role-based access

Name	Email	Description
Alex Owner	alex@northwind.co	Full control · roles · exports
Jordan Editor	jordan@northwind.co	Edit scenarios, mappings, OpenAI, endpoints
Sam Ops	sam@northwind.co	Run scenarios · view all
Riley Viewer	riley@northwind.co	Read-only access

Teams

Team & SSO

Roadmap

The multi-user model — 4 members across owner / editor / operator / viewer roles, mapping reviews and an audited actor — already ships and is enforced today. EU-hosted encrypted workspace sync and SSO (OIDC, then SAML) are on the roadmap, presented honestly with phases.

Team sync · roadmap SSO · roadmap Self-hosted · roadmap

Today, share a workspace with the encrypted bundle in Workspace portability above — the same format team sync will move over the wire.

View Enterprise & Teams roadmap

Gateway

Production-ready export

Generates a vendor-neutral JSON bundle and a Kong-compatible declarative YAML from the current state (environment: Production):

· 3 services from your APIs
· 8 routes
· 4 active prevalidation plugins
· 2 approved field mappings → response transformers

Preview · YAML

# ---------------------------------------------------------------
# Generated by API Workbench Pro — https://api-workbench-pro.lovable.app
# Generated at: 2026-06-14T17:53:39.759Z
# Declarative Kong configuration (decK format 3.0).
# ---------------------------------------------------------------
_format_version: '3.0'
_transform: true
services:
  - name: order-mgmt
    url: https://api.northwind.co/orders
    plugins:
      - name: request-validator
        config:
          version: draft4
      - name: jwt
        config: {}
      - name: request-transformer
        config:
          add:
            headers:
              - X-Tenant:default
      - name: ai-prompt-guard
        config:
          allow_patterns:
            - .*
      - name: response-transformer
        config:
          rename:
            - Order.id:Shipment.referenceId
            - Order.billingAddress.country:Shipment.destination.countryCode
          transforms:
            - destination.countryCode:iso3166_alpha2
    routes:
      - name: order-mgmt.post_orders
        methods:
          - POST
        paths:
          - /orders
        strip_path: false
      - name: order-mgmt.get_orders_id_
        me
…

Privacy

Privacy & data

Zero egress

Live data inventory — this browser

Key	Purpose	Size
Scanning local storage…

Everything above lives in this browser profile only. No backend, no sub-processors, no copies — erasing here erases everywhere.

Erase all local data

Removes every application key listed in the inventory and downloads a PDF deletion receipt (timestamp, key list, SHA-256 of the removed payload). The app reloads with seed data afterwards.

Different from "Reset workspace to seed", which only re-seeds the core state and keeps explorer data, plan and backups.

History

Versioned snapshots (0)

When	Kind	Label	By	Size
No snapshots yet — export a factsheet or gateway bundle.