LocalREST — API Client for REST, cURL & Postman

An API client that runs entirely in your browser. LocalREST builds, sends and organises HTTP requests — like Postman, without the account, the cloud sync, or the 200MB desktop app. Open a tab and start working. WHY THIS ONE • No account. No sign-in, no team to create, no workspace to configure. • Nothing leaves your browser. Requests, collections, environments and history are stored on this machine. The only network requests LocalREST makes are the ones you send. • No analytics. Not anonymised, not aggregated. None. • It asks for nothing on install. There is no "read your data on all websites" warning to accept — site access is optional, and requested one host at a time, the first time you send to it. • It starts instantly. It is a browser tab, not an Electron app. WHAT YOU CAN DO • Build a request — method, URL, query parameters, headers, and a body as JSON, text, form-data or url-encoded. The params table and the URL stay in step in both directions: a query typed into the URL becomes editable rows, and a row edited in the table rewrites the URL. • Authenticate — Bearer token, Basic auth, or an API key in a header or the query string. • Work in tabs — several requests open at once, reorderable by dragging. • Paste a curl command — anywhere in the URL bar, and it becomes a request. Including what Chrome DevTools → Network → Copy as cURL puts on your clipboard. Copy any request back out as curl too, with environment values filled in or left as templates. • Bring your Postman collections — import and export v2.1 and v2.0. • Read the response properly — status, time and size, with the body pretty-printed: line numbers, syntax colouring, and objects and arrays that fold down to a one-line summary. Search within it. Save it to a file. • Use environments — {{variables}} substituted into the URL, params, headers, body and auth. A name the active environment does not define is marked in the URL bar, so you catch it before you send rather than after. • Replay from history — the last 50 requests, one click to reopen. • Light and dark — follows your OS and switches with it. ABOUT SITE ACCESS Chrome requires permission before LocalREST can reach a host, so site access is simply what lets your requests go out. Allow all sites once, or allow each host the first time you send to it — safer, but tedious across a lot of APIs. Nothing is granted at install. No content scripts, nothing injected into any page, nothing read from the sites you visit. WHERE YOUR DATA LIVES In this browser's extension storage, on this machine. There is no server and no sync — which also means uninstalling the extension or clearing the browser profile deletes everything. Backup & data exports your whole workspace as a single JSON file, and that file is the only copy that survives.