sondahub / All Features
All Features
Everything on sondahub, grouped by kind — each card goes straight to its page. Free, no keys, no accounts; built as the playground for LockFlare Sonda.
The mock APIs
Seven complete fake APIs with related records, behind every protocol below.
Store — fake e-commerce API
An online shop: products, customers, orders, reviews and stock.
Fleet — fake IoT API
An IoT fleet: sites, devices, telemetry and alerts — the MQTT one.
Bank — fake banking API
Retail banking: customers, accounts, cards, nearly eight thousand transactions, transfers and FX rates.
Social — fake social media API
A social network: users, posts, comments, likes and follows — the GraphQL one.
Helpdesk — fake helpdesk API
A support desk: tickets, messages, agents, customers, SLAs — the state-machine one.
Flights — fake flight booking API
Airports, airlines, two and a half thousand scheduled flights and their bookings — the live-board one.
Identity — fake user directory API
A company directory: people, groups and memberships — behind SCIM 2.0, SAML and OpenID Connect.
Web APIs
The seven APIs over every way a web client talks.
Fake REST API
CRUD over 37 collections with paging, filters, sorting, search and relations.
Public GraphQL API
Seven schemas with introspection, nested relations and mutations.
OData test server
Every API as an OData v4 service: $metadata, $filter, $expand, paging, ETags, $batch.
gRPC-Web & Connect
Every API as a protobuf service, unary and streaming, .proto files included.
SOAP test server
A WSDL for every API: SOAP 1.1 and 1.2, WS-Security, faults by the book.
JSON-RPC & XML-RPC
Every API over JSON-RPC 2.0 and XML-RPC: batches, OpenRPC, multicall.
Socket.IO test server
A namespace per API: calls over acks, live events, binary, connect_error on demand.
WebSocket test server
An echo socket and live JSON event streams.
SSE test server
Server-Sent Events with ids, named events and resumption.
Messaging and streaming
Brokers and servers already busy with the APIs’ live activity.
Public MQTT broker
MQTT 3.1.1 and 5 over WebSocket with live IoT telemetry.
Kafka test broker
A Kafka cluster with sixteen live topics, consumer groups, SASL and orders that move — on localhost through a small bridge.
AMQP test broker
AMQP 0-9-1 the way RabbitMQ clients expect it: exchanges, live queues, DLX, confirms, RPC — on localhost through the bridge.
AMQP 1.0 test broker
AMQP 1.0 beside 0-9-1 on the same broker: links, credit, settlement, live queues, RPC — over TCP or WebSocket.
STOMP test server
STOMP 1.0–1.2 over WebSocket, or over TCP through the bridge, on the same broker as AMQP.
NATS test server
NATS with JetStream: live subjects, services that answer, streams, consumers and key-value buckets — over WebSocket or TCP.
Redis test server
RESP2 and RESP3 with live streams, consumer groups, pub/sub and keys that move — on localhost through the bridge.
Healthcare and finance
The protocols of a clinic and of a trading desk.
FHIR test server
FHIR R4 over a synthetic clinic: patients, vitals, labs, meds, search, transactions.
HL7 v2 test server
HL7 v2 messages over HTTP or MLLP: validated, ACKed, queries answered from a synthetic clinic.
FIX test server
A FIX 4.2, 4.4 and 5.0 acceptor with the session layer done right, filling orders against live FX quotes.
AI agents
Model Context Protocol servers, open and behind OAuth.
Identity and authentication
Every sign-in flow, checked for real.
OAuth 2.0 test server
Authorization code with PKCE, client credentials, OIDC, dynamic registration.
Auth test endpoints
Basic, Digest, API key, Bearer, JWT and AWS SigV4, checked for real.
SAML test IdP and SP
Sign in with SAML, or check what your IdP sends — signatures and all.
SCIM 2.0 test server
Users and Groups with filters, PATCH, Bulk and discovery.
Testing tools
What a client has to get right besides the API itself.
HTTP test endpoints
Echo, status codes, delays, redirects, cookies, gzip, uploads.
Writes that persist
POST, then GET it back — with no database: the state travels with you.
OpenAPI mock server
Point it at any OpenAPI or Swagger file and get a working mock.
Webhook tester
Signed webhooks to your endpoint: Standard Webhooks, Stripe or GitHub style.
Chaos and rate limits
Latency, failures, 429s, idempotency keys, cursors, CSV and XML on any endpoint.
Fake JSON data
37 downloadable datasets, 78,076 rows.
All Bridges
Every mode of the bridge that lends the hub a port on your computer: the command, the port, what to point a client at.
Connect from Sonda
Every protocol on one page, with what to type where in LockFlare Sonda.
Sandboxes
Stand-ins for vendors’ APIs, at their own paths, for their own SDKs.
Stripe sandbox
A Stripe mock API the official SDK works against: test cards, 3D Secure, refunds, Checkout, signed webhooks.
Twilio sandbox
A Twilio mock API: SMS, calls, Verify and Lookups, magic numbers, signed status callbacks.
SendGrid sandbox
A SendGrid mock API: Mail Send with real validation, templates rendered, bounces and opens, signed Event Webhooks.
Authorize.net sandbox
An Authorize.net mock API: XML and JSON checked like the real one, test triggers, settlement every minute, profiles, subscriptions, signed webhooks.
OpenAI sandbox
An OpenAI mock API with a scripted model: chat completions, the Responses API, streaming, tool calls, structured outputs, embeddings, errors on cue.
Anthropic sandbox
A Claude API mock with a scripted model: messages, streaming, tool use, signed thinking blocks, prompt caching, batches, errors on cue.
AWS Secrets Manager sandbox
An AWS Secrets Manager mock for boto3 and the SDKs: all 23 actions, SigV4 checked, versions and labels, rotation, deletion windows, replicas.
Azure Key Vault sandbox
An Azure Key Vault mock the Azure SDK signs in to: the bearer challenge, an Entra ID token endpoint, versions, soft delete, recover, purge, backup.
Google Secret Manager sandbox
A Google Secret Manager mock for the client libraries over REST: versions, aliases, CRC32C checks, delayed destruction, IAM, a service account.
1Password Connect sandbox
A 1Password Connect server mock: vaults, items, generated passwords, one-time codes, files, JSON Patch, activity.
Doppler sandbox
A Doppler API mock: configs and branch inheritance, references resolved, every download format for doppler run, logs and rollback, service tokens.
Infisical sandbox
An Infisical API mock: Universal Auth, raw secrets v3 and v4, references expanded, folders, imports, versions, personal overrides.
All sandboxes
What each sandbox answers, and how to point its SDK here.
Industrial
Simulators for the plant floor and the robots on it.
OPC UA test server
A bottling plant in an address space: browse, read, write, methods, subscriptions, events, seven days of history — over opc.wss.
Modbus TCP simulator
A gateway with a lift station PLC, a power meter, a drive and a slow sensor: twelve function codes, real exceptions, physics on the clock.
HART-IP simulator
A HART 7 loop of five field devices: universal and common commands, per-master status, units that convert, burst mode.
DDS simulator
An RTPS participant with a ROS 2 robot and a keyed DDS plant: discovery, reliable and transient-local writers, fragments, /cmd_vel and setpoints — over UDP or TCP, with DDS Security.
All industrial protocols
The plants, the loop and the robot behind them, and the bridge for tools that speak only TCP or UDP.