API client
Dial an endpoint. Hear it purr.
Free and open source, the API client of the family: collections, environments, tests and history on your Mac — and DialCatz Den, a server your team runs itself, so nobody else holds your requests or your secrets. Your DevCatz sites arrive as environments, their routes as collections.
GET catz-shop.localhost/v1/cats/mochi · 200 OK · Purr. · 51 ms · tests 5/5
In the app
Real screens from the app — no stuffed cats, no mock-ups. Keep scrolling: it plays.
Requests and responses
Requests leave from the app itself, not a browser: no CORS in the way, your local sites’ certificates accepted, every millisecond timed.
Params ⇄ URL · headers · JSON, XML, text, form, multipart with files, GraphQL, binary
Bearer, Basic and API-key auth, set once on a folder or collection and inherited below. Paste a cURL into the address bar and it becomes a request.
JSON tree · pretty · raw · table · image and PDF preview · hex · base64
Expand and collapse any object, search, decode a selection, see cookies and the response-time history; 200 purrs, 500 hisses.
Redirects · gzip / br · timeouts · self-signed on request · 25 MB cap
DevCatz’s local certificate is trusted for the sites it serves, so https://*.localhost just works.
Connect · send · a live log
Talk to a socket next to the REST calls that open it, with the same variables.
cURL · fetch
Every request as a command for the terminal or a snippet for the frontend.
Everything sent, with its response
Find the call that worked yesterday and open it again.
> sign in, then show me the paid orders
AI, with your collections
The same shared AI connection as DevCatz and DBCatz (Claude by default; OpenAI, Gemini, DeepSeek, Z.ai, Mistral, xAI, Groq, OpenRouter, Ollama and any OpenAI-compatible server). It knows your collections and environment by name, so plain words become requests you can read before anything goes out.
Nothing is sent on its own
Every step is a button — add the request, set the variable — and you still press Send.
Names and URLs, never your values
Ask DialCatz sees collection, request and variable names; tokens and keys in a response are masked before Explain sends it.
Keys stay in your Keychain
Encrypted by macOS, never in a settings file.
A switch per feature
Ask, Explain, Write tests and Generate each turn off on their own in Settings → AI.
“sign in, then show me the paid orders”, “a request that creates an order”
Plain words become steps — new requests in the right collection, variables to fill in, requests to open — each one a button.
A 422, a 401, a CORS error, an odd shape
What came back, the likely cause in this request, and what to change — tokens and JWTs masked before sending.
From the response you just got
Status, timing, content type and the fields that matter, in DialCatz’s dc.test syntax; tokens and ids saved for the next request.
JSON · XML · text · form
Describe the payload and get realistic fake data in the body’s own format — no real people’s data.
Off until you turn it on · one connection, shared with every Catzoid app ·Claude (default)OpenAIGeminiDeepSeekZ.aiMistralxAIGroqOpenRouterOllamaany OpenAI-compatible server
The MCP with the cats insidesoon
One MCP server for the whole Catzoid family. Your AI assistant — Claude, Cursor or any other that speaks MCP — will be able to send a saved request and run a collection against the environment you pick in DialCatz, and reach the other cats you have installed through the same connection. One connection, every cat — and you hold the keys: only what you allow, nothing runs without you seeing it.
Works with ClaudeGeminiGPTGLM— any app that speaks MCP.
Meet MCatzPCollections, variables and tests
Folders · drag and drop · groups · favourites · sort by name · duplicate · export
Deleting a collection or folder asks for its name typed out, so a stray click never costs an afternoon.
Postman v2 / v2.1 · a Postman data export · Postman workspaces with an API key, no export · OpenAPI 3 / Swagger 2 in JSON or YAML · cURL · DialCatz exports
Bring a whole team’s Postman workspace over in one import, bodies, auth and folders included.
Local · Staging · Production · an environment per collection · secrets hidden
Click any {{variable}} to see its value and where it comes from; ⌘S saves the environment.
Pre-request and test scripts on requests, folders and collections · async tests · dc.test / dc.expect · dc.env.set · iterations and delay · results export as JSON or JUnit XML
Run a whole collection in tree order; a token one request saves is there for the next. Green means every cat came home.
Better together
DevCatz runs your sites on their own https:// names; DialCatz reads what it runs and turns each site into something you can call — and DBCatz shows what the call changed.
Sites become environments.Each DevCatz site arrives with its URL and the names of its .env variables; the values stay on your Mac.
Check in DBCatz.After a request, Check in DBCatz opens the table the call just touched — at the row, when the URL or the JSON answer has its id.baseUrl = the site’s https://*.localhost · .env variable names · web and api apps of a monorepo
Pick a site and start calling it — no ports or hosts to copy.
Laravel (php artisan route:list) · OpenAPI documents the site ships or serves
Split into api and web folders when a site has both; bodies, params and auth taken from the spec.
From a DevCatz site
One click from the site you are running to its requests, on the right environment.
The table from the URL (/api/v1/order-items/42 → order_items, id 42) · a create’s id from the JSON answer · connection and database remembered per collection
See what the call changed without hunting for the row. The guess can be corrected per request; without DBCatz the button offers Get DBCatz.
Shared with every Catzoid app
Set the provider and the look once; DevCatz, DBCatz and DialCatz follow.
DialCatz Den · for teams
DialCatz Den is the self-hosted team server: each team runs its own, so nobody else ever holds the team’s collections or secrets. One small container — a Go binary with the admin panel inside, SQLite or PostgreSQL, about 30 MB.
$ docker run -d -p 8080:8080 -v dialcatz:/data \ -e DIALCATZ_PUBLIC_URL=https://den.catz-shop.test \ ghcr.io/catzoidhub/dialcatz-den
DialCatz Den 0.1.0 · SQLite · listening on :8080
First start: open https://den.catz-shop.test to create the admin account
Up in one command.
Yours from the first request.
The admin adds a member · one invite link per device · its own token, kept in the system’s secret store
Opening the link in DialCatz connects that device; every change is signed with the member it belongs to. Lose a laptop, revoke that device — nobody else notices.
Environments sync variable names · values only when someone chooses Share values…
Every member fills in their own values, so the server never sees a token, a password or an API key unless the team decides to share one.
A teammate’s push shows up within a second · who has which request open · a note when you both changed the same folder
Shared workspaces stay in step without “who changed this?” in chat. A token can be limited to some workspaces.
Several admins by invite · passkeys · two-step codes · optional Google / GitHub sign-in
The panel that hands out access is the best-guarded door in the den.
Dokploy from Git · Docker Compose · one docker run · SQLite or PostgreSQL
Deploy it next to the services it talks about; updates are a redeploy, data stays in its volume.
AGPL-3.0 · no seat limits · no licence server
Read every line that guards your team’s requests. Ten people or two hundred, the den costs the same: nothing.
Ready for adoption
macOS 13+ on Apple silicon and Intel; Windows is on the way. No account, no licence key — all cats, no catch.
Apple siliconIntel MacWindows · soon
