# API Dash

> API Dash is an open-source, cross-platform API client built with Flutter (foss42/apidash,
> Apache-2.0) for macOS, Windows, Linux, iOS and Android — a lightweight alternative to Postman and
> Insomnia for creating HTTP, GraphQL, WebSocket, SSE and MQTT requests, inspecting responses across
> 40+ MIME types, and generating integration code in 15 languages. The same organization also
> publishes the API Dash APIs: a free, keyless, open-source REST utility API (OpenAPI 3.1.0, 57
> operations) at api.apidash.dev, and an MCP server over the same capability set.

Generated by API Evangelist on 2026-09-02 from apis.yml and the artifacts in this repository.
The provider publishes no llms.txt of its own: https://apidash.dev/llms.txt returns HTTP 200 with
the site's SPA shell (42,967 bytes of HTML, byte-identical to a random control path), and
https://api.apidash.dev/llms.txt returns 404. Both probed 2026-09-02.

## APIs

- [API Dash APIs](https://api.apidash.dev/docs): Free keyless REST API — country data, text and
  case conversion, number and date humanization, HTTP-client test endpoints, Server-Sent Events,
  and a sample user dataset. Base URL https://api.apidash.dev
- [API Dash client](https://apidash.dev): The desktop and mobile API client application itself.

## Specs

- [OpenAPI 3.1.0 (live)](https://api.apidash.dev/openapi.json): 57 operations, 9 schemas, 8 tags.
- [OpenAPI (harvested verbatim)](https://raw.githubusercontent.com/api-evangelist/api-dash/refs/heads/main/openapi/_original/api-dash-openapi.json)
- [OpenAPI (with servers[] added)](https://raw.githubusercontent.com/api-evangelist/api-dash/refs/heads/main/openapi/api-dash-openapi.yml)
- [OpenAPI Overlay](https://raw.githubusercontent.com/api-evangelist/api-dash/refs/heads/main/overlays/api-dash-openapi-overlay.yaml)

## Agent surfaces

- [MCP server](https://github.com/foss42/mcp): 5 tools (get_country_info, search_countries,
  transform_text, humanize_number, humanize_time). LOCAL STDIO ONLY — there is no hosted endpoint
  an agent can POST to; a human must clone and run it first.
- [Tool crosswalk](https://raw.githubusercontent.com/api-evangelist/api-dash/refs/heads/main/mcp/api-dash-tool-crosswalk.yml):
  binds each MCP tool to the REST operations covering the same capability.
- [AGENTS.md](https://github.com/foss42/apidash/blob/main/AGENTS.md): the provider's own agent
  operating guide for working in the API Dash codebase.
- No A2A agent card. /.well-known/agent-card.json and /.well-known/agent.json were probed on both
  hosts on 2026-09-02: 404 on api.apidash.dev, soft-404 SPA shell on apidash.dev.

## Docs

- [Documentation index](https://github.com/foss42/apidash/tree/main/doc)
- [User guide](https://github.com/foss42/apidash/tree/main/doc/user_guide): requests, collections,
  importing, code generation, authentication, environments, scripting, history, MQTT, WebSocket,
  SSL, Dashbot.
- [Developer guide](https://github.com/foss42/apidash/tree/main/doc/dev_guide)
- [Installation](https://github.com/foss42/apidash/blob/main/INSTALLATION.md)
- [API reference (Swagger UI)](https://api.apidash.dev/docs) · [ReDoc](https://api.apidash.dev/redoc)
- [Roadmap](https://github.com/foss42/apidash/blob/main/ROADMAP.md)
- [Changelog](https://github.com/foss42/apidash/blob/main/CHANGELOG.md)
- [Security policy](https://github.com/foss42/apidash/blob/main/SECURITY.md) ·
  [Threat model](https://github.com/foss42/apidash/blob/main/doc/security/THREAT_MODEL.md) ·
  [SBOM](https://github.com/foss42/apidash/blob/main/doc/security/sbom.json)
- [Privacy policy](https://apidash.dev/privacy/)

## Packages

Published to pub.dev under the verified publisher `apidash.dev`:

- [better_networking](https://pub.dev/packages/better_networking) 0.0.3 — REST & GraphQL request execution
- [genai](https://pub.dev/packages/genai) 0.0.1 — unified multi-provider generative AI client
- [json_field_editor](https://pub.dev/packages/json_field_editor) 1.2.1
- [multi_trigger_autocomplete_plus](https://pub.dev/packages/multi_trigger_autocomplete_plus) 1.0.2
- [curl_parser](https://pub.dev/packages/curl_parser) 0.1.2 — cURL to Dart and back
- [seed](https://pub.dev/packages/seed) 0.0.3
- [postman](https://pub.dev/packages/postman) 0.1.1 — Postman Collection v2.1 conversion
- [json_explorer](https://pub.dev/packages/json_explorer) 0.1.2

## Things an agent should know before calling this API

- No API key. 52 of 57 operations are anonymous. Only /profile, /users and the auth operations
  involve OAuth2, and the scheme declares zero scopes.
- The declared OAuth2 tokenUrl is "/login" but the token-minting operation is POST /auth/login.
  Use the latter.
- POST /auth/login takes `username` and `password` as QUERY parameters, not a body.
- The only error status in the contract is 422 (FastAPI validation envelope, application/json —
  not RFC 9457 problem+json). No 401, 403, 429 or 5xx is declared.
- No pagination, no idempotency key, no rate-limit headers, no request-id header.
- Nothing here is durably writable: /io/user/* are echo endpoints for exercising POST/PUT/PATCH/
  DELETE, with no read-back. Reversibility is `na` for that reason, not unmeasured.
- Newest tagged GitHub release of the client is v0.3.0 (2023-11-29) while main reads 0.5.0+5.

## Repositories

- [foss42/apidash](https://github.com/foss42/apidash) — the client (Dart/Flutter, Apache-2.0)
- [foss42/api](https://github.com/foss42/api) — the APIs (Python/FastAPI, Apache-2.0)
- [foss42/mcp](https://github.com/foss42/mcp) — the MCP server (Python/FastMCP, Apache-2.0)
- [foss42 organization](https://github.com/foss42)

## Community

- [Discord](https://discord.gg/apidash)
- [GitHub Discussions](https://github.com/foss42/apidash/discussions)
- [Issue tracker](https://github.com/foss42/apidash/issues)
- [LinkedIn](https://www.linkedin.com/company/apidash)