What happens if I clear my browser storage?

Workspace state is gone, like deleting a local file. Use Settings → Snapshots to export workspace snapshots and re-import them anywhere. Retention pruning is configurable.

Is this really GDPR-compliant?

Compliance is a property of your process, not of any tool. APIMaster Integration Workbench is browser-local by default and publishes an ordered manifest of audited outbound paths. The host-injected error callback remains an unresolved boundary, and deployment-specific legal relationships require separate review.

How do teams collaborate without a cloud?

Today: asynchronous workspace bundle export/import and branded artefact exports. End-to-end-encrypted workspace sync is a roadmap target, not a current collaboration or confidentiality guarantee.

What is the TMF starter catalogue?

Bundled TM Forum Open API examples can be imported as local starting points. Exact inventory, version and licence provenance remain subject to the dedicated release audit; no certification or official endorsement is implied.

How is this different from a request-only workflow?

The workbench connects import, design, mock, mapping, validation, execution and governance in one local-first workflow. Evaluate other products’ current cloud and local behavior from their own documentation.

Browser-local-first · EU-built · audited boundaries

One workbench for the API lifecycle, with boundaries you can inspect.

Q: Where is my data stored?

Application-managed workspace state is stored in your current browser profile. Explicit API, URL, GraphQL, realtime and Companion actions can contact destinations you select; configured webhooks can also transmit summaries while the browser runtime is active.

Design, mock, map, test and govern APIs in a keyboard-driven workbench. Workspace state is browser-local by default; explicit and configured remote operations are disclosed in the Trust manifest.

Open the workbench View pricing

No account or installation is required. The demo workspace includes bundled TMF examples; exact inventory, version and licence provenance remain under release audit. Browser storage is not application-level encrypted at rest.

apimaster — northwind workspace audited boundaries

Catalog

Explorer

Mappings

Mock Forge

Execution

Gateway

Audit

POST/tmf-api/productOrdering/v4/productOrder200142 ms

schema valid · auth: OAuth2 auto-detected · prevalidation 6/6

Mapping Studio — live preview

order.total→ round(2) →orderTotalPrice.valueapproved

customer.vatId→ upper() →relatedParty[0].id prod

Execution trace

prevalidation — 6 rules3 ms

POST request → staging138 ms

assertions (3)1 ms

Readiness

87%

audit: mapping.approve · a.kovacs · just now

20modules — one lifecycle

ExamplesTMF examples · inventory under release audit

11audited outbound and browser-boundary records

trust manifest — audited boundariesverify the record set

$ Open the Trust Center.
> Audited outbound and browser-boundary records: 11. Explicit, configured and host-conditional paths are disclosed.

Browser-local workspace by defaultManifest-backed boundary disclosureNo required vendor account

APIMaster product architecture

One platform, four clear entry points

Start with the focused workflow you need, then move into the complete workbench without changing tools or data.

Primary productContractRadarReview API contract changes through a guided, evidence-focused workflow.Open ContractRadar ModuleAPI ReadinessInspect delivery, governance and security readiness from one review surface.Open API Readiness WorkbenchTMF Telco WorkbenchEnter the existing TMF-focused catalogue and telco workflow surface.Open TMF Workbench WorkbenchIntegration WorkbenchUse the complete offline-first workspace for API design, testing and governance.Open the workbench

The workbench

Eight modules deep, one keyboard away.

Mapped 1:1 to what ships in the app today — nothing on this grid is a mock-up of the future.

Catalog \ ImportImport that audits your specPull OpenAPI/Swagger from file, URL, SwaggerHub or Postman collections. The weakness classifier flags missing enums, absent examples and vague descriptions before they become integration bugs.Import a spec API ExplorerAn explorer that knows your schemaAuth auto-detected from the spec. Requests validated against the schema before they leave. Mock responses per status code, and spec watch that diffs upstream changes.Open Explorer Mapping Studio · ReviewsMapping is a first-class citizenMap fields across APIs with live preview and a transform engine. Reviews gate every change; production locks mean only owners touch what is live.Open Mapping Studio Mock ForgeMocks with a memoryForge mock artefacts per endpoint and status, then drive whole scenarios against them — happy paths, failures, malformed JSON and rate-limit cases included.Forge a mock Prevalidation · ExecutionTraces, not guessesRule-based prevalidation gates the call; the Execution Console records every step as a trace. When a call fails you read the trace, not the tea leaves.Run an execution Gateway SmokeGateway hand-off, smoke-testedExport gateway config as vendor-neutral JSON or Kong declarative YAML, then smoke-test it in place — before a deploy window does it for you.Export config Scheduled RunsBrowser-open scheduled rehearsalsRecurring scenario runs use the open browser runtime. Background throttling, sleep or closing the tab can pause execution; this is not a hosted 24/7 runner.Schedule a run Audit Log · Schema DiffAudit that writes your evidenceEvery governance action lands in an append-only audit log. Schema-diff impact reports export to PDF for the evidence file.Open the audit log

How it works

Spec to gateway in three moves.

Import

Drop an OpenAPI or Swagger file, or pull from URL, SwaggerHub or a Postman collection. The weakness report scores what you received before you build on it.

Rehearse

Forge mocks, author scenarios from data packs and the error library, map fields across APIs, and run everything with prevalidation and step-by-step traces.

Hand off

Export gateway configuration as JSON or Kong YAML, smoke-test it, schedule browser-open runs and keep the audit trail as review evidence.

Trust boundaries, documented

Browser-local by default, with every audited boundary visible.

APIMaster Integration Workbench stores application-managed workspace state in the current browser profile by default. Explicit API, URL import, GraphQL, realtime and Companion actions can contact destinations the user selects; configured webhooks can transmit summaries while the browser runtime is active. The host-provided error callback remains an unresolved deployment boundary, disclosed in the Trust manifest.

Review the outbound manifest

Workspace state is browser-local by default
11 audited outbound and browser-boundary records
Encrypted bundle export is separate from localStorage at-rest protection

TMF / Telco

Start TMF contract exploration from bundled examples.

Bundled TM Forum Open API examples can be imported into the local catalogue and explored with the existing mapping tools. Exact inventory, version and licence provenance remain a release-audit gate; this catalogue does not imply certification or official endorsement.

Browse the catalogue

Product ordering exampleService ordering exampleTrouble ticket exampleCustomer exampleParty exampleAdditional bundled examples

Pricing

Pricing that respects your architecture review.

All plans remain free during beta. Prices are presentation-only and do not enable runtime entitlements.

SoloBeta · presentation only

€0 forever

All plans remain free during beta. No checkout, account or runtime entitlement is enabled by this packaging.

Compare tiers

ProBeta · presentation only

€19 per user / month

All plans remain free during beta. No checkout, account or runtime entitlement is enabled by this packaging.

Compare tiers

TeamBeta · presentation only

€45 per user / month

All plans remain free during beta. No checkout, account or runtime entitlement is enabled by this packaging.

Team workspace sync

Compare tiers

EnterpriseBeta · presentation only

from €12k/year

All plans remain free during beta. No checkout, account or runtime entitlement is enabled by this packaging.

Team workspace syncSingle sign-onSelf-hosted runner or agent

Compare tiers

Full pricing & feature comparison

Owner-approved proposal

Requestable ContractRadar 14-day pilot

The owner-approved requestable proposal covers an indicative 10–50 contracts over 14 days, using existing local engines and evidence exports. Scope and price are confirmed separately; no fee, customer or outcome is guaranteed here.

Create pilot Pilot scope is owner-approved, but the APIMaster sales mailbox is UNVERIFIED/HOLD and the public mail action remains disabled until delivery is proved.Review enterprise capability truth

FAQ

The questions reviews actually ask.

Engineering answers — the same ones we give your security and procurement teams.