AirREST - REST Client

Fast browser-based API client with Postman collection compatibility and zero CORS restrictions.

AirREST is a fast, lightweight, and modern in-browser REST API testing client designed for developers who want to test endpoints without leaving Google Chrome. KEY FEATURES • Direct in-browser HTTP and HTTPS request dispatching with zero CORS limitations • Dual storage mode: 100% offline local workspace storage or optional self-hosted cloud team synchronization • Multi-workspace isolation: Multiple offline workspaces and online personal/team cloud workspaces • Supports all standard HTTP methods: GET, POST, PUT, PATCH, DELETE, HEAD, and OPTIONS • Native import and export compatibility with Postman Collection v2.1.0 and Environment files • Multi-tab workspace with in-memory response persistence, zero-tabs empty studio state, unsaved change indicators, tab duplication, and keyboard shortcuts • Comprehensive request body support: JSON (with beautifier & syntax check), GraphQL (query & variables), XML, URL-encoded, Form-Data (file uploads), and raw binary • Parameter and header editors with dynamic variable interpolation ({{$guid}}, {{$timestamp}}, custom variables) • Sandboxed scripting engine supporting pre-request scripts and post-response test assertions • Response viewer with syntax highlighting, header inspection, timing metrics, and image/binary previews HOW TO USE 1. Click the AirREST icon in your browser extensions toolbar to open the workspace. 2. Enter your target request URL, select an HTTP method, and configure headers, parameters, or body payloads. 3. Click "Send" or press Ctrl+Enter (Cmd+Enter on macOS) to dispatch the request. 4. Inspect the formatted response status, response time, headers, and payload. 5. Organize your requests into nested collections and environments for repeatable testing. 6. (Optional) Connect to your self-hosted AirREST backend to sync workspaces with your team. PRIVACY & SECURITY AirREST prioritizes developer privacy. All collections, environments, and histories are stored directly in your browser. API requests are dispatched directly from your browser to your specified target server without third-party proxies, ensuring your tokens, keys, and confidential payloads remain secure and private. SELF-HOSTED CLOUD SYNC The optional cloud synchronization backend (Go backend and AirREST Hub portal) is completely self-hosted and open source. The extension publisher does not provide a public cloud service, host a central database, or collect user credentials. You maintain 100% ownership and control over your data by deploying your own instance using the source code and instructions provided in the GitHub repository. PERMISSIONS • Access all websites ("host_permissions"): Needed to send API requests to any endpoint you configure (including localhost and private network servers) and connect to your chosen self-hosted sync server without CORS restrictions. • Local database quota ("unlimitedStorage"): Needed to store your collections, environments, settings, and request history locally in IndexedDB without quota limitation errors. • Network diagnostics ("webRequest"): Needed strictly as an observational listener to capture low-level network failure codes (e.g., ERR_CONNECTION_REFUSED, ERR_NAME_NOT_RESOLVED, ERR_CERT_AUTHORITY_INVALID) for accurate diagnostic feedback when local servers are offline or certificates fail. It does not block or modify requests. SUPPORT For questions, bug reports, or feature suggestions, visit the project repository on GitHub: https://github.com/adiputera/AirREST Version 1.1.9 — Added dynamic URL path variables (:param and {param}) with automatic URL parsing, parameter editing, and live dispatch substitution; collapsible request editor sections; improved sidebar dropdown positioning; and Cloud Auth modal lifecycle resets for password and visibility state. Version 1.1.8 — Added Hub-managed controls for moving, deleting, and exporting cloud collections. The extension refreshes these controls when changing cloud scope or using Sync Online, and prevents moving project collections into personal workspaces. Version 1.1.7 — Added universal sidebar collection and request search with multi-token parsing, multi-tab request isolation eliminating collisions across collections, in-memory per-tab response persistence, zero-tabs empty state studio, and collection badges in editor and tab hover tooltips. Version 1.1.6 — Added Save As duplicate request independence, HTTP method and name duplicate collision guard with interactive conflict resolution (Save Copy / Replace), reader scope read-only enforcement, Scope Switcher personal workspaces management, resilient empty workspace cloud delta sync, team project auto-loading, and unified file picker flow. Version 1.1.5 — Removed unused storage permission to adhere to the Chrome Web Store minimal permissions policy; all workspaces, collections, and environments persist durably in IndexedDB. Version 1.1.4 — Added request lifecycle safeguards (pre-request aborts, cancellation, 30s timeout, 10 MiB stream caps), atomic item-collection versioning, side-by-side environment OCC conflict resolution, durable multi-window storage sync, and attachment recovery. Version 1.1.3 — Added seamless password change re-authentication, sequential cloud collection import with real-time progress, and aligned move collection capabilities. Version 1.1.2 — Added strict RBAC authority enforcement across project scopes, read-only UI indicators, and hardened client stability against edge-case crashes. Version 1.1.1 — Refined dropdown & action button UI, optimized cloud sync payload streaming for serverless backends, and added resilient session eviction handling. Version 1.1.0 — Added interactive Move Request modal, drag-and-drop tree reordering with safety guards, and 12-hour offline workspace caching. Version 1.0.0 — Initial release with full Postman v2.1 compatibility, multi-tab workspace, direct in-browser dispatching, and sandboxed test scripts.