39 playful mock REST APIs. Every status code you'll ever need to test.

Q: Which Bearer token should I use?

qa-admin-token for full access, qa-viewer-token for read + write with 403 on DELETE. Anything else returns 401.

Real, working mock REST endpoints with Swagger-style docs — CRUD, Bearer tokens, pagination, filtering, GraphQL, webhooks, and errors on demand. Always free, no signup. Pick an API and hit Try it out.

Getting started guide

Fandom & Pop Culture

Friends API — Characters, episodes & quotes from the coffee-house gang. (14 endpoints)
Movies API — QA-themed cinema. Sort, filter, rate. (9 endpoints)
Harry Potter API — Houses, students & spells from a magic school. (10 endpoints)
Star Wars API — Characters, planets & starships from a galaxy far away. (11 endpoints)
Sherlock Holmes API — Cases, suspects & clues from Baker Street. (10 endpoints)
Pokémon API — Creatures, trainers & simulated battles. (10 endpoints)
Middle-earth API — Fellowship, quests & artifacts from a fantasy realm. (9 endpoints)
The Office API — Employees, pranks & quotes from a paper company. (8 endpoints)
Marvel API — Avengers, villains & mission assignments. (10 endpoints)
Game of Thrones API — Houses, nobles & dragons of Westeros. (12 endpoints)
Rick and Morty API — Characters, locations & episodes across the multiverse. (9 endpoints)
Starfleet API — Ships, warp limits & exponentially multiplying tribbles. (10 endpoints)
GTA API — Characters, vehicles, weapons, missions, heists, a wanted system & radio stations across Los Santos, Vice City and Liberty City. (17 endpoints)
Dragon Ball API — Fighters, transformations, power levels & tournaments. (6 endpoints)
Voxel Worlds API — Block worlds, players, inventories & coordinates. (6 endpoints)
Anime Tournament API — Original fighters, power levels & tournament brackets. (5 endpoints)
Retro Quest API — Pixel heroes, quests, loot & save-game conflicts. (5 endpoints)

Everyday Life

Pizza Orders API — Place & track orders. Includes a guaranteed 500. (9 endpoints)
Coffee Shop API — Drinks & orders. Home of the legendary 418. (6 endpoints)
Football API — Teams, squads, standings & simulated matches. (7 endpoints)
Bank API — Accounts, transfers & cursor pagination. Home of the 402. (9 endpoints)
Airline API — Flights, seat conflicts & overbooking drama. (9 endpoints)
Shop API — Carts, stock drama & expired coupons. (9 endpoints)
Cargo Tracking API — Shipment state machines. Writes need an X-API-Key. (9 endpoints)
World Cup 2026 API — Teams, groups, venues, match simulation, tickets & bracket predictions across the 2026 host cities. (17 endpoints)
FIBA World Cup API — Teams, Doha arenas, quarter-by-quarter game simulation, box scores, coach challenges, cursor-paged play-by-play & ticketing. (22 endpoints)
Formula 1 API — Drivers, constructors, races, telemetry & pit stops. (7 endpoints)

Original Worlds

Superhero API — Heroes, powers & nemeses. Great for nested resources. (6 endpoints)
Dino Park API — Dinosaurs, enclosures & the occasional breach. (9 endpoints)
Space Agency API — Launches, scrubs & probes with real signal lag. (9 endpoints)

Testing Scenarios

Auth Playground API — OAuth 2.0 flows — client credentials, auth code, refresh & expiry. (6 endpoints)
Webhooks API — Register callbacks, trigger events, inspect & replay deliveries. (7 endpoints)
Protocol Lab API — Async jobs, redirects, 503/504, JSON Patch & content negotiation. (12 endpoints)
Object Storage API — Objects, checksums, ranges & resumable uploads. (4 endpoints)
Modern Identity API — OIDC discovery, PKCE, device codes & token lifecycle. (6 endpoints)
Event Streams API — SSE events, replay cursors, heartbeats & ordering. (3 endpoints)
Fault Injection API — Latency, status codes, malformed payloads & flaky responses. (5 endpoints)
Search & Facets API — Full-text queries, facets, highlights & cursor pagination. (2 endpoints)
Fun Data Bridge API — Seeded fixtures from schemas, inspired by fundata.dev. (4 endpoints)

FAQ

No. The web playground runs entirely in your browser with zero backend, and the live API accepts the documented tokens without registration.

Which Bearer token should I use?

qa-admin-token for full access, qa-viewer-token for read + write with 403 on DELETE. Anything else returns 401.

How do I reset sandbox data?

Click ↺ Reset sandbox data on any docs page, reload the page, or call window.__funApiReset() in the browser console. Against the live backend, requests are isolated by X-Sandbox-ID.

Can I export the API spec?

Yes — every docs page has download buttons for an OpenAPI 3.1 spec and a Postman collection, and the whole catalog is served as one OpenAPI 3.1 document at /openapi.json.