← Back to Skills Marketplace
derick001

API Endpoint Tester

by Derick · GitHub ↗ · v1.0.1
cross-platform ✓ Security Clean
494
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install api-endpoint-tester
Description
CLI tool to test REST API endpoints with various HTTP methods, headers, and payloads.
README (SKILL.md)

API Endpoint Tester

What This Does

A simple CLI tool to send HTTP requests to REST API endpoints and validate responses. Supports GET, POST, PUT, DELETE, PATCH methods with custom headers and request bodies (JSON or form data).

When To Use

  • You need to test API endpoints manually or in scripts
  • You want to validate HTTP status codes and response formats
  • You're debugging API integrations and need quick requests
  • You need to check if an endpoint is reachable and responding correctly

Usage

Basic GET request: python3 scripts/main.py run --url "https://api.example.com/users" --method GET

POST with JSON body: python3 scripts/main.py run --url "https://api.example.com/users" --method POST --body '{"name": "John", "email": "[email protected]"}'

With custom headers: python3 scripts/main.py run --url "https://api.example.com/users" --method GET --headers '{"Authorization": "Bearer token123"}'

Examples

Example 1: Simple GET request

python3 scripts/main.py run --url "https://jsonplaceholder.typicode.com/posts/1" --method GET

Output:

{
  "status": "success",
  "status_code": 200,
  "headers": {
    "content-type": "application/json; charset=utf-8"
  },
  "body": {
    "userId": 1,
    "id": 1,
    "title": "sunt aut facere repellat provident occaecati excepturi optio reprehenderit",
    "body": "quia et suscipit\
suscipit recusandae consequuntur expedita et cum\
reprehenderit molestiae ut ut quas totam\
nostrum rerum est autem sunt rem eveniet architecto"
  },
  "response_time_ms": 245
}

Example 2: POST with validation

python3 scripts/main.py run --url "https://jsonplaceholder.typicode.com/posts" --method POST --body '{"title": "foo", "body": "bar", "userId": 1}' --expected-status 201

Requirements

  • Python 3.x
  • requests library (install via pip if not available)

Limitations

  • This is a CLI tool, not an auto-integration plugin
  • Does not support WebSocket or streaming endpoints
  • Limited to HTTP/HTTPS protocols (no gRPC, GraphQL, etc.)
  • No built-in authentication beyond headers
  • Does not save test suites or history (single request at a time)
  • Timeouts default to 10 seconds
Usage Guidance
This package appears to do what it says: a small CLI that issues HTTP(S) requests. Before installing or running it, consider: (1) the source/homepage is not provided — if you need long-term trust, prefer code from a known maintainer or repo; (2) the tool will send whatever headers and body you pass, so do not pass sensitive API keys or tokens unless you intend them to be transmitted to the target endpoint; (3) it can reach arbitrary network endpoints — run it in an environment where network access is acceptable; (4) the tool requires the Python 'requests' library (pip install requests). If you want extra assurance, review the provided scripts/main.py (included) and run it in an isolated environment or sandbox.
Capability Analysis
Type: OpenClaw Skill Name: api-endpoint-tester Version: 1.0.1 The skill provides a CLI tool for testing REST API endpoints, which is aligned with its stated purpose. The `scripts/main.py` code uses the standard `requests` library for HTTP communication and includes a critical security control to prevent arbitrary file writes by ensuring that any specified `--output-file` path remains strictly within the skill's designated directory. There are no indicators of intentional data exfiltration, unauthorized command execution, persistence mechanisms, or prompt injection attempts in the code or documentation. While the tool can be misused by a malicious actor (e.g., for SSRF or sending sensitive data to malicious endpoints), this is a capability inherent to any HTTP client and not a design flaw or malicious intent within the skill itself.
Capability Assessment
Purpose & Capability
The name/description (API Endpoint Tester) match the included CLI script and README. Required binary (python3) and the requests package are appropriate and proportional for the stated purpose. Minor metadata mismatch: SKILL.md lists version 1.0.0 while registry shows 1.0.1, but this is an implementation/versioning inconsistency rather than a security issue.
Instruction Scope
SKILL.md and README instruct the agent/user to run the included CLI which issues HTTP(S) requests to arbitrary URLs with user-provided headers/body. The runtime instructions and the script stay within that scope; there are no instructions to read unrelated files, environment variables, or to send data to other endpoints. Note: because the tool accepts arbitrary headers/bodies, a user could accidentally send secrets if provided.
Install Mechanism
There is no install spec (instruction-only), and the package relies on the widely used Python 'requests' library. SKILL.md and README advise installing requests via pip; no downloads from unknown hosts or archive extraction are present.
Credentials
The skill requests no environment variables or credentials. That is proportionate. However, the tool allows callers to supply Authorization and other headers; users should avoid passing secrets or long-lived tokens into requests unless they intend to transmit them to the target endpoint.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system-wide privileges. Autonomous model invocation is allowed (default) but this is expected for skills and is not combined with other concerning privileges. The script restricts output-file writes to the skill directory, limiting its ability to write arbitrary files elsewhere.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install api-endpoint-tester
  3. After installation, invoke the skill by name or use /api-endpoint-tester
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
No changes detected in this release. Version number updated only.
v1.0.0
Initial release of API Endpoint Tester. - CLI tool to test REST API endpoints using GET, POST, PUT, DELETE, and PATCH methods. - Supports custom headers and request bodies (JSON or form data). - Validates HTTP status codes and response formats. - Provides response details including status, headers, body, and response time. - Requires Python 3 and the requests library.
Metadata
Slug api-endpoint-tester
Version 1.0.1
License
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is API Endpoint Tester?

CLI tool to test REST API endpoints with various HTTP methods, headers, and payloads. It is an AI Agent Skill for Claude Code / OpenClaw, with 494 downloads so far.

How do I install API Endpoint Tester?

Run "/install api-endpoint-tester" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is API Endpoint Tester free?

Yes, API Endpoint Tester is completely free (open-source). You can download, install and use it at no cost.

Which platforms does API Endpoint Tester support?

API Endpoint Tester is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created API Endpoint Tester?

It is built and maintained by Derick (@derick001); the current version is v1.0.1.

💬 Comments