Request workbench
Full method / URL / params / headers / auth / body editor with GraphQL, form, and raw support.

Orbittest Client is the local-first API testing workstation in the OrbitTest family. Send requests, inspect responses, catch schema drift, mock APIs, and run data-driven suites — all on your machine. No account. No cloud. No telemetry.
If you build or test software that talks to servers, Orbittest Client is your control panel for those conversations: build a request, send it, read the reply, validate it, and save it for next time. Everything you do is stored in a single JSON file in your Documents folder.
A traditional API workflow scatters you across tools: one app to send requests, a terminal for curl, a notebook for tokens, and nothing watching whether the server’s response shape quietly changed. Orbittest Client folds all of that into one workspace and adds an Insights rail that grades every response as it arrives — reliability, schema stability, speed, and leaked secrets — without you configuring anything.
Request workbench
Full method / URL / params / headers / auth / body editor with GraphQL, form, and raw support.
OAuth 2.0 authentication
Request, store, and attach OAuth 2.0 access tokens from the auth editor — no hand-pasted bearer tokens. New in 1.0.1.
Syntax-highlighted editor
A real code editor with JavaScript highlighting for pre-request scripts, test scripts, and request bodies. New in 1.0.1.
Variable autocomplete
Live scanning surfaces your {{variables}} as you type, with inline autocomplete across the request builder. New in 1.0.1.
Command-line runner
A CLI runs collections and requests from the terminal — scriptable, CI-friendly, with JSON / JUnit reports. New in 1.0.1.
Insights rail
A live Orbit Score, response timeline, and at-a-glance reliability — without leaving the response.
Contract Drift Radar
Automatically diffs each response’s schema against the last good one and flags breaking changes.
Secret Guard
Scans responses, headers, and URLs for leaked tokens and credentials before you share them.
Data-driven runs
Drive a collection from a CSV / JSON file, iterate rows, and expose them to scripts as ot.data.
Beautiful run reports
Export a self-contained HTML / JSON report — headers, payloads, timings, logo, the lot.
Ghost mock server
Replays your recorded responses as a local mock API in one click.
Offline licensing
Ed25519-signed, machine-locked keys with tamper-proof storage — verified entirely offline.
The whole app lives in one window: a request builder and live response in the center, your saved collections on the left, and the Insights rail on the right.

Run a whole collection

Catch contract drift

contextIsolation, hardened CSP)undici fetch with dispatcher pooling, mTLS, and proxy supportcrypto Ed25519 + Electron safeStorage (DPAPI)electron-builder + electron-updater (GitHub Releases)Orbittest Client uses an offline, machine-locked license system. Keys are Ed25519-signed (unforgeable), bound to one computer, stored with OS-level encryption, and verified without any server or internet.
| Capability | Free | Pro |
|---|---|---|
| Request workbench, history, environments, variables | ✅ | ✅ |
| OAuth 2.0 authentication | ✅ | ✅ |
| Syntax-highlighted editor & variable autocomplete | ✅ | ✅ |
| Data-driven runs (CSV / JSON) | ✅ | ✅ |
| In-app Console & schema drift | ✅ | ✅ |
| Command-line runner | ✅ | ✅ |
| Collections | up to 3 | ♾️ unlimited |
| HTML / JSON run reports | — | ✅ |
| Ghost mock server | — | ✅ |
Expired keys gracefully drop to Free — the app never stops working. Activate a key in-app under Settings → License.