Mock engine
Priority routes, weighted responses, latency profiles, reject mode, and template helpers.
Hosted mocks
Bearer / JWT
OpenAPI
API Mock Server
Stand up realistic HTTP mocks in minutes — routes, rules, logs, auth, and safe upstream proxy — then ship integrations without waiting on backends.
Platform
What it is
A first-class SSIT feature for Admin and Partner Tenant Manager. Each mock server gets a public path under
/mock/:slug, so frontends, mobile apps, and webhooks can hit stable endpoints while you iterate on contracts.
Configure auth once, publish versions when rules go live, and inspect every request.
Workflow
How it works
Three steps from empty workspace to a live mock your team can call.
1
Create a server
Name it, pick a slug, enable logging and CORS. Optionally require Bearer or JWT on every request.
2
Add routes & rules
Match method, path, headers, or query — return JSON or text. Publish version to promote draft rules.
3
Call the public URL
Hit /mock/:slug/…, inspect requests, replay them, and refine rules from real traffic.
Capabilities
Features
Everything you need to mock, test, and harden API contracts.
Inspector & tester
Built-in request inspector, API tester with auth header, snippets, and rule dry-run.
Auth (Bearer / JWT)
Protect the whole mock with Bearer, JWT, API key, or Basic — configured once in Settings.
Proxy & callouts
Selective proxy with SSRF allowlist, encrypted secrets, and rate limits.
OpenAPI
Import specs to scaffold mocks; export config for sharing across teams.
Publish version
Promote draft rules to live and bump a clear version badge without changing the URL.
Integration
Use it from any client
Call your public base path with the same headers your production API expects.
curl -X GET "https://your-host/mock/demo-store/products" \ -H "Authorization: Bearer demo-bearer-token" \ -H "Accept: application/json"
Trust
Security baseline
Built for teams that mock real integrations without exposing internals.
No config on public path
Runtime never mutates server settings.
Secret redaction
Auth headers masked in logs and UI.
Template sandbox
Allowlisted helpers only — no eval.
SSRF gate
Private IPs and metadata hosts denied.
Mock smarter — start in PTM
Entitle API Mock Server on your workspace and create your first slug in under a minute.
Open in PTMSupport
Frequently Asked Questions
What is SSIT API Mock Server?
It is a hosted mock API platform for developers and teams. Create a slug, define routes and rules, return static or dynamic responses, inspect traffic, and optionally proxy to allowlisted upstreams.
How do I try it?
Open Partner Tenant Manager (PTM), entitle API Mock Server on your workspace, then create a mock server under /workspace/api-mock-server. Public calls go to /mock/:slug/*.
How do I add Bearer or JWT auth?
Auth is configured once per mock server under Settings → Authentication. Enable require auth, choose Bearer or JWT, paste the exact token string, and save. Clients send Authorization: Bearer <token>. JWT is matched as an opaque Bearer value (signature is not verified). Auth applies to every public endpoint on that server.
Does it support dynamic responses?
Yes. Response templates support safe helpers such as uuid, timestamp, random.* and request.* without eval. Weighted responses, latency, and stateful collections are available on entitled plans.
Is outbound proxy safe?
Proxy and callouts require an explicit host allowlist. Private IPs, metadata hosts, and non-HTTP(S) targets are blocked (SSRF protection).
Can I import OpenAPI?
Yes. Import an OpenAPI document to generate routes and example responses, or export your mock configuration as OpenAPI-ish JSON.
What does Publish version do?
Publish version promotes draft rules to published and increments the version badge. It does not change the public URL. Use it after editing rules so your team knows which config is live.
Where do I manage limits?
PTM catalog quotas and tenantCapabilities control max servers/routes/rules, retention, proxy, callouts, analytics, and OpenAPI features — not hard-coded in the runtime UI. Free trial includes a starter quota of mock request runs.
Need help choosing a plan? Compare pricing or schedule a meeting.
Ready to mock smarter?
Open PTM, entitle API Mock Server, and create your first slug in under a minute.
Open in PTM