i. Opinionated
Pick a side, say why.
Every tool has a recommended answer for the common case. We say what we'd do and the rationale. The contested topics get a side-by-side, not a both-sides shrug.
A small family · Opinionated · No tracking
Tools for the
annoying parts
of REST.
01 — The family
Eight sites. One vibe.
Each one is a single-page tool. Pick what's relevant; ignore the rest. Bookmark the URLs — they're stable.
01 / Auth
<wtf page="auth"/>
Pick the right method — Bearer, API key, Basic, sessions, OAuth (with
flow sub-picker), mTLS, HMAC. Honest about the deprecated ones.
auth.restapi.wtf →
02 / Endpoint
<wtf page="endpoint"/>
Audit a pasted endpoint, build a new one with best-practice guidance,
or browse the conventions and contested topics.
endpoint.restapi.wtf →
03 / Errors
<wtf page="errors"/>
Pick the right format (RFC 9457 by default), compare the major
conventions side by side, or paste any JSON error and audit it.
errors.restapi.wtf →
04 / Headers
<wtf page="headers"/>
Pick the right header for caching, CORS, auth, or content negotiation.
Look any header up. Compare two side by side.
headers.restapi.wtf →
05 / Mock — new
<wtf page="mock"/>
POST a spec, get a URL. Ephemeral mock REST APIs for 60–3600
seconds. No accounts. Strict validation and rate limits keep abuse out.
mock.restapi.wtf →
06 / Pagination
<wtf page="pagination"/>
Pick page-based, offset/limit, cursor-based, or keyset. Compare
all four. Generate a worked example endpoint with Link headers.
pagination.restapi.wtf →
07 / Status
<wtf page="status"/>
Pick the right code by answering a few questions, look one up, or
compare any two side by side.
status.restapi.wtf →
02 — House style
Three rules. That's it.
The brief we wrote ourselves before any of these existed. Still holds.
ii. Honest
Conventions disagree.
We show where the major players (RFCs, Google, Stripe, GitHub, Microsoft) line up — and where they don't. No false unity.
iii. Quiet
No tracking. No cookies. No accounts.
Every site is mostly static, served from one Cloudflare Worker. The mock service has a backend (it has to), but it stores nothing about you.