What is CAPost?
CAPost (CA-Post) is a next-generation, fully sovereign desktop API studio and developer toolkit designed for testing, mocking, debugging, and automating HTTP, GraphQL, WebSocket, and gRPC APIs. Similar to traditional API testing tools, but built from the ground up with a strict commitment to Zero-Knowledge Security and absolute data sovereignty.
Core Architectural Pillars:
- Zero-Knowledge & Local-First: API collections, authentication headers, bearer tokens, database credentials, and test execution logs are encrypted with SQLCipher on your local disk. CAPost does not harvest telemetry or upload your data.
- OpenCollection YAML Format: A modern, human-readable, Git-versionable YAML specification that stores entire API collections, environments, and execution scripts in a portable, CI/CD-friendly format.
- Embedded QuickJS Engine: A full high-performance JavaScript runtime embedded directly inside the binary, allowing users to write and execute complex pre-request, post-response, and assertion scripts without external Node.js dependencies.
- Automated Assertion Generation: Built-in intelligence that generates deep schema-based JSON, XML, and OpenAPI assertions from single requests.
- Interactive API Mock Server: Build and run local API mock servers to decouple your frontend from unstable backend teams.
Supported Protocol Matrix
| Protocol | Features | Inspection Tools |
|---|---|---|
| HTTP / REST | Auth (OAuth2.0, Bearer, API Keys, mTLS, AWS SigV4) | Tidy JSON diff, Schema validation, Network waterfall |
| GraphQL | Query variables, multi-request execution | Schema introspection explorer |
| WebSocket | Real-time event streams, automatic ping/pong | Live data frame timeline visualizer |
| gRPC | Protobuf reflection, streaming RPCs | Tracing spans, binary payload inspector |