ReqPad vs Sandbox Relay

ReqPad is the API client that Postman should have built for mobile. Test REST, WebSocket, GraphQL, gRPC, MQTT, Socket.IO and MCP — with built-in AI — all from your iPhone, iPad, or Mac. No laptop. No desktop app. No compromises. — WHY DEVELOPERS SWITCH TO REQPAD: You're on the train and staging is down. You're in a meeting and someone asks "is that endpoint returning the right schema?" You're in bed at midnight and a webhook isn't firing. With ReqPad, the answer is always the same: open your phone, test it, fix it, move on. — 7 PROTOCOLS, ONE APP: Most mobile API tools only handle REST. ReqPad handles seven: • REST/HTTP — every method with full header, body, and auth control, plus Server-Sent Events streamed live; Send as a Browser for sites that only answer browsers • WebSocket — Real-time bidirectional messaging with live connection status • GraphQL — Query editor with syntax highlighting, variables, and subscription support • gRPC — Server reflection and .proto file support • MQTT — Connect to IoT brokers with QoS levels and topic subscriptions • Socket.IO — Test event-driven real-time communication • MCP — Connect to Model Context Protocol servers: call tools, read resources, run prompts ReqPad is the only mobile API client with gRPC and Socket.IO support. — REQPAD AI — AN API EXPERT ON EVERY SCREEN: • Explain any failure — a 4xx, a GraphQL error, a refused WebSocket or a gRPC status — with the cause and a one-tap fix • Describe a request in plain words — ReqPad AI fills in the method, URL, headers and body • Write messages and queries — GraphQL from your schema, WebSocket, Socket.IO and MQTT messages, gRPC messages from the proto, MCP tool arguments • Write tests for the response you just got • Ask the JSON a question — get a JSONPath filter You see exactly what is sent before it is sent, and secrets are removed on your device first. — SCRIPTS & AUTOMATION: • Pre-request and test scripts with the Postman-compatible pm.* API • Collection Runner — run whole collections with CSV/JSON data files and a report • OAuth 2.0 flows with automatic token refresh • Secret variables kept in secure storage • JSON tree view with JSONPath filtering — ENTERPRISE AUTHENTICATION BUILT IN: Don't hack together auth headers manually. ReqPad supports: • Bearer Token & JWT • OAuth 1.0 & 2.0 (full flow) • Basic & Digest Authentication • API Key — header, query param, or cookie • AWS Signature v4 • Hawk Authentication • Akamai EdgeGrid — GENERATE CODE IN 20+ LANGUAGES: Build your request visually, then export it as production-ready code: Swift, Kotlin, Python, JavaScript, Go, Rust, PHP, Ruby, C#, Java, Dart, cURL, and more. — IMPORT EVERYTHING, START IN SECONDS: • Postman Cloud Sync — Import your existing workspaces in one tap • cURL Import — Paste a cURL command and ReqPad builds the request • OpenAPI / Swagger — Import full API specs • HAR Files — Import browser network recordings • APIs.guru Directory — Browse and test 2,500+ public APIs instantly Already invested in Postman? You don't have to start over. Bring your work with you. — ORGANIZE LIKE A PRO: • Collections — Group requests into folders by project, team, or API • Environments — One tap to switch between dev, staging, and production • Variables — Use {{dynamic_variables}} in URLs, headers, and request bodies • History — Every request saved and searchable • Cookie Manager — Full visibility and control over stored cookies — YOUR DATA STAYS YOURS: ReqPad is privacy-first. Your API keys, tokens, and request data live on your device. We don't track your requests, log your endpoints, or store your credentials on our servers. ReqPad AI is optional and sends only what an action needs, after you see it. — Free to start. No account required. Just open and test. Questions or feature requests? We actually read every email: support@reqpad.app Terms of Use: https://reqpad.app/terms Privacy Policy: https://reqpad.app/privacy

For developers who run Claude Code or Codex in Docker Sandbox, Sandbox Relay is the phone client for driving that agent. It is a companion, not a standalone app: it needs a broker you run, with an agent connected behind it. Kick off a task from the train, check on a long-running job from the couch, or steer the agent while you are away from your desk. Docker Sandbox runs each agent in its own isolated micro VM. A small broker you self-host sits in the middle: you send work from your phone, the broker passes it to the agent, and the streamed reply comes back. Your infrastructure, your agent. The app is just the remote. New to this setup? The app's support page explains how it works and what you need to run it. WHAT YOU CAN DO - Connect to your broker with a URL and a bearer token. Connections use HTTPS, with plain HTTP allowed only for local-network addresses. - See every connected agent at a glance, with live online/offline status. - Send the agent work and watch its reply stream in token by token. Stop a turn mid-stream, or start a fresh thread whenever you want. - When an agent goes offline, its thread stays readable as history. - See per-turn input and output token counts when the broker reports them. - Save reusable prompts as local notes, organised by hierarchical tags like #work/project/feature. Drill down by tag, copy a note straight into a thread, or link a note to the thread it came from. Notes live on your device only; they never touch the broker. WHAT YOU NEED - A broker you run, reachable from your phone (over your local network, or remotely through a tunnel or private network you control). - A coding agent, Claude Code or Codex, running in Docker Sandbox and connected to that broker. PRIVACY Sandbox Relay talks only to the broker you configure. Your access token is stored securely on your device and sent only to that broker, to authenticate you; it never goes to the developer or any third party. Your notes stay on your device and are never sent anywhere. No third-party analytics, no account to create. Note that the app streams whatever your agent outputs, verbatim.