ProbePad - API Client

ProbePad is a privacy-first API testing client built natively for iPhone and iPad — the Postman alternative that fits in your pocket.

Build, send, and inspect HTTP, GraphQL, and WebSocket requests. No telemetry, no analytics, no team workspace lock-in. Your requests, tokens, and secrets stay on your device.

BUILD & EXECUTE

• HTTP methods: GET, POST, PUT, PATCH, DELETE

• Multipart/form-data with file upload

• JSON, raw, and form-encoded request bodies

• Headers, query parameters, cookies

• Per-request timeout (1–300s)

ORGANIZE

• Collections and folders

• Environments — switch between dev, staging, and production

• Secrets Vault — API keys stored in iOS Keychain, biometric unlock

• Search and filter the request list

INSPECT

• Syntax-highlighted JSON tree

• Response history with side-by-side diff

• Status, headers, timing, and byte count

AUTHENTICATION

• Bearer Token, Basic, API Key (header or query)

• OAuth 2.0 Authorization Code with PKCE

• OAuth 2.0 Client Credentials

• Automatic token refresh, Keychain storage

• Provider presets: Google, GitHub, Azure AD, Auth0

• JWT inspection and decoding

GRAPHQL

• Query editor with syntax highlighting

• Schema introspection and autocomplete

• Variables, named operations, query history

WEBSOCKET

• Connect to ws:// and wss:// endpoints

• Send and receive with full message history

• Reusable message templates, auto-reconnect

IMPORT

• Postman collections (v2.1)

• OpenAPI 3.0 and Swagger 2.0 — file, URL, or share sheet

• cURL commands

APPLE-NATIVE

• Apple Shortcuts via App Intents — run saved requests from Siri, automations, or widgets

• Face ID / Touch ID for the secrets vault

• iCloud sync for requests, collections, and environments (PRO)

• Universal app for iPhone and iPad

• Full keyboard shortcuts on iPad

PRO FEATURES

Unlock unlimited collections and environments, Postman/OpenAPI import, response diff, iCloud sync, and the secrets vault with a single $5.99 lifetime in-app purchase. No subscription. No team plan.

PRIVACY-FIRST

• All data stays on device (and your iCloud, if you enable PRO sync)

• No analytics, no third-party SDKs, no token telemetry

• Open about what we access: PrivacyInfo.xcprivacy declares everything

• Your secrets are stored in the iOS Keychain, never in plain text