22
40 Comments

I got tired of writing scripts just to pass API tokens, so I built a visual chainer.

Hey hackers,

Every time I had to test an API flow where Endpoint B needed a token or ID from Endpoint A, I had to open heavy tools, write boilerplate JavaScript in the tests tab, and fight with environment variables. It felt like overkill for simple sequence testing.

So I built a lightweight alternative: A visual API canvas that runs entirely in your browser.

You can visually chain requests by just dragging and dropping JSON outputs directly into the inputs of the next call. Because it's 100% client-side, there’s zero server latency and your data stays completely private.

I just opened up the free trial and would love to get your brutal feedback on the UX and the core loop.

Try it out for free here: https://flow.aaptics.in

What features should I prioritize next?

on September 11, 2026
  1. 8

    Completely agree with this perspective. Keeping things simple early on really helps avoid over-engineering. Thanks for sharing!

    1. 2

      Thanks James! Exactly. It's so tempting to build the 'everything app' with heavy orchestration, but fighting that urge and keeping the core debugging loop simple is the only way to actually ship and get real feedback.

  2. 3

    Congrats on the launch! Resolving request-chaining and token passing without wrestling with Postman environment variables or writing script boilerplate is definitely a real pain point.

    A few quick thoughts from playing around with it:

    UX / Flow: The drag-and-drop linking between JSON output fields and input parameters is super intuitive. It completely removes the friction of copy-pasting IDs across tabs.

    Client-side advantage: The local/browser-only aspect is a huge selling point—especially for devs worried about sending API keys or sensible payloads through 3rd party servers.

    Feedback / Edge Cases: How do you handle authentication tokens that expire quickly during a test flow? Having an automatic re-run or pre-request hook visually displayed on the canvas would make this an absolute power tool.

    Bookmarking this for quick sequence checks. Great work!

    1. 1

      Thanks so much for the kind words! Validating the UX and the client-side privacy aspect was exactly my goal for this launch.

      Regarding expiring tokens: Right now, you'd just hit 'Run' again on the auth node to grab a fresh token before running the downstream nodes. But you bring up a massive pain point. Having an 'auto-refresh' or a pre-request auth hook visually represented as a loop on the canvas is a brilliant idea. Definitely adding that concept to the feature board!

  3. 2

    Dragging JSON outputs straight into the next request's inputs is the part that sold me — that's the actual tedious bit in heavy GUI tools.

    Curious how you're thinking about debugging when a chain breaks mid-way. If step 3 fails because step 1 returned a different shape, do you plan to show the payload at each hop, or let people re-run from a single step?

    That feels more valuable early than a full environment vault, since client-side already keeps secrets local. What's your gut on priority?

    1. 1

      Glad the drag-and-drop hit the mark for you!

      Your intuition on the priority is spot on. Showing the exact payload at each hop and allowing a re-run from a specific step provides way more immediate debugging value than a full environment vault right now. When a chain breaks at step 3, seeing exactly what step 2 passed to it (without re-running 1 and 2) is the core problem this tool needs to solve flawlessly. That's definitely taking precedence.

  4. 1

    When a chain breaks, the expensive part is knowing which hop changed - often an upstream response quietly dropped or renamed a field and the next call still 'succeeded' with garbage. I'd prioritize per-hop response assertions: pin the field you depend on and fail loudly at that step, so silent chain rot becomes an obvious error.

  5. 1

    Love the visual chainer angle. Token plumbing is usually where solo workflows silently rot. One pattern that helped me: a tiny supervised runner that injects secrets at runtime from a local vault and never lets the model see raw keys, only named handles. SAO-W2-TOKEN

  6. 1

    Totally agree. It's easy to get distracted by premature scaling when the real bottleneck is distribution.

  7. 1

    This resonates with something I hit building a backtesting tool: the instinct to just retry/continue is almost always the wrong default when you're validating a chain of steps. I ended up doing something similar — the moment out-of-sample data doesn't match what the pipeline saw during tuning, it halts and flags it instead of quietly continuing with parameters that were clearly wrong. Slower to build, way easier to trust the output.

    Curious whether you've thought about surfacing why a node's output looked unreasonable (schema mismatch vs. semantically wrong value), or if for now "doesn't match expected shape" is enough of a signal?

  8. 1

    Keeping the canvas client-side makes the privacy story much stronger than a typical API testing tool, and the drag-and-drop mapping addresses a very real source of boilerplate. I like the choice to halt on a failure instead of guessing, because a visible break is easier to debug than a successful request built on a bad token. Exporting a readable chain that can later be reviewed in a pull request could make the workflow useful beyond one-off experiments.

  9. 1

    Same instinct that's had me building lately — existing tools are either overpriced or overbuilt for what you actually need. Was it the pricing model that pushed you over the edge (per-minute, subscription), or just the cost in general?

  10. 1

    The "node graph matches how people already think about the flow" point is the part I'd bet on long-term. We hit the same design question building agent workflows at Valtres, except our chain isn't just passing tokens between API calls — it's an agent deciding which tool to call next based on the previous output, so the failure modes compound: a 401 isn't just a broken chain, it's the agent potentially retrying with the wrong assumption about why it failed.

    We ended up doing something close to what you're describing you might avoid for now — every node can define what "reasonable" output looks like, and if a call returns something that doesn't match, the chain halts and hands control back to a human rather than letting the agent guess and continue. It's slower to build than "just retry," but silent wrong-guessing is worse in production than a visible halt.

    Following the CI/headless question from the thread — I'd actually push back gently on rushing there. The visual halt-and-inspect behavior is a genuinely different product than a CI runner (debugging vs. automation), and a lot of tools lose what made them good at the first job by bolting on the second too early.

  11. 1

    The token-passing problem is one of those things that's trivially annoying a hundred times before you finally decide to fix it. Every time I'm chaining an auth endpoint to a resource endpoint to a mutation, I'm either maintaining a brittle Postman environment or writing throwaway glue code that lives in a file called 'temp.js' forever.

    The visual canvas for wiring output fields to input params is the right idea. The mental model people already have is a node graph — the tool should match the way you're thinking about the flow, not force you to translate it into a flat script.

    Two things I'd be curious about as you develop it: how does it handle branching logic (if token endpoint returns 401, retry with refresh vs. abort chain)? And what's the save/export format — is a chain something you can commit to a repo and run headlessly in CI, or is it purely visual?

    1. 1

      Haha, the 'temp.js' graveyard is exactly what inspired this! To answer your questions:

      Right now, it's strictly linear—if a node fails (like a 401), the chain halts so you can visually inspect the exact point of failure. Conditional branching is a great idea, but I want to nail the basic linear UX first.

      Currently, it's purely a visual client-side debugging tool. You can save the JSON schema of the canvas, but a headless CLI runner for CI is a really interesting idea for down the road. Right now, trying to keep it simple!

  12. 1

    The visual handoff is the right wedge because it makes data flow inspectable. I would prioritize step-level replay with a frozen input snapshot and a redacted run export before adding more node types. When step 4 fails, users need to know whether the upstream payload changed, the mapping broke, or the destination rejected a valid value. A shareable, secret-safe failure artifact would make this useful in team debugging without turning it into another full API suite.

    1. 1

      This is incredible advice. You're totally right—building out a 'redacted shareable snapshot' and 'step-level replay' provides way more immediate value for team debugging than just piling on random node types. It keeps the tool focused on its core strength: inspectable data flow. Moving this to the very top of my priority list

  13. 1

    This is a much better direction than having people glue API calls together with scripts.

    The interesting part for me is the UX — once the visual layer becomes the interface for the workflow rather than just a nicer way to pass tokens, it gets really powerful.

    We build custom AI tools and interfaces at SCORVIA, so this is very much in the territory we like working in. Curious where you’re taking it next.

    1. 1

      Thanks! The visual mental model definitely lowers the cognitive load compared to writing scripts. As for what's next, I'm fiercely avoiding turning this into a heavy cloud-orchestration monster. The immediate focus is perfecting that 'local debugging loop'—adding environment vaults, step-replays, and a seamless way to share a workflow snapshot with a teammate.

  14. 1

    You asked about features, but features are not what kills tools in this category. Postman is already open on the same screen, so I would stop competing on chaining and own one thing Postman is bad at, then put it in the headline: a shareable read-only canvas of a flow that a backend dev hands to a frontend dev or a QA contractor. Of everyone who started the free trial this week, how many came back on a second day?

    1. 1

      That is a brutally honest and brilliant positioning angle. Focusing on the 'visual handoff between backend and frontend/QA' solves a massive communication gap that standard Postman collections don't handle well natively.
      As for Day 2 retention—I literally just launched the free trial, so the data is still baking! But optimizing the tool specifically for that read-only sharing use-case might be the exact hook to make it a daily habit.

      1. 1

        Environment vaults plus shareable snapshots is the pair I would design first, because they pull against each other. The moment a snapshot leaves your machine, someone has to decide what happens to the secret inside it — stripped, referenced, or re-prompted on the receiving end. Postman answered that late and it still confuses people.

        Get that right and it stops being a feature list. "Share a request flow without shipping your keys" is a sentence a backend lead repeats to their team, and that is the kind of thing that actually travels.

        What are you leaning towards for the handoff — does the receiver supply their own environment, or does the snapshot carry a redacted shape of yours?

  15. 1

    Same lesson here — the friction only shows up once real hands are on it. Curious what the first thing users reached for that you hadn't built.

    1. 1

      You're so right about real hands exposing the friction. The very first thing people reached for was a way to save and share the canvas state! I built the core chaining logic but totally underestimated how badly people want to take a 'snapshot' of a broken API sequence and send it to a teammate. That’s priority #1 now.

  16. 1

    The “time-to-next-useful-request” framing is strong. For the first-run path, are you thinking about a single template that gets someone from request to result before they build a full chain? That could make the free trial feel useful within the first minute.

    1. 3

      That’s a brilliant idea. A pre-loaded 'dummy' auth-to-data template would instantly show the value of the visual wires and give them that 'Aha!' moment without needing to type their own endpoints first. Definitely adding a quick-start template to the onboarding!

  17. 1

    Environment switching feels like the next part of this workflow

    I would want one safe place for short lived tokens so the same chain can move between dev and staging without secrets ending up in saved history or exports

    How are you handling that today

    1. 1

      Great point. Right now, because execution is 100% client-side, secrets never hit a backend database anyway. But for the workflow, adding a local 'Environment Vault' (stored strictly in IndexedDB/Session) to easily toggle base URLs and tokens between dev/staging without hardcoding them in the nodes is exactly what I'm planning next.

  18. 1

    Congrats on opening the Aaptics Flow trial. Keeping request chaining local in the browser is a thoughtful choice when people are handling tokens and test data.

    I’m testing a small tool that reviews public landing pages for clarity/conversion blockers using evidence from the page. I’d love to include flow.aaptics.in in a free beta review; in return, I’d only ask for 10 minutes of honest feedback on whether the diagnosis is useful. Interested?

  19. 1

    The lightweight companion answer is probably the signal to follow. I'd measure the time from 'I need to inspect this response' to the next useful request, not whether people replace Postman completely. I'd also test whether users can capture a redacted snapshot of a run when they get stuck. That could make quick debugging easier to share without turning the product into a CI platform.

    1. 1

      ou nailed it. Framing the core metric around 'time-to-next-useful-request' instead of total replacement is a great mental model for this. And the redacted snapshot idea is brilliant—it adds sharing/debugging value without bloating the app into a heavy CI tool. Definitely exploring that concept next!

  20. 1

    Execution history and step-level retries would be high on my list. Being able to replay just the failed node and redact secrets in logs makes these flows much easier to trust and debug.

    1. 1

      Spot on! Being able to replay just the failed node without re-running the entire chain is a massive time-saver. And redacting secrets locally aligns perfectly with the privacy-first focus of the app. I'm adding both of these to the top of the roadmap. Really appreciate the solid feedback!

  21. 1

    The visual chaining is a clear workflow change. Have early users actually replaced their scripts or Postman-style setup with Aaptics Flow, or do they try it once and then return to the tools they already know?

    1. 1

      Great question! It's still early days, but the trend is that users treat it as a lightweight companion rather than a 100% Postman replacement. They jump into Aaptics Flow for quick visual debugging and bypassing scripts, but keep their heavy CI/CD automation elsewhere. The goal is to own that quick, local testing loop perfectly

      1. 1

        That quick local testing loop is the interesting wedge. If you’re open to it, what’s the best email to reach you on?

  22. 1

    The best shipping lesson for me has been to test the smallest end-to-end loop with a real user before polishing the system around it. That exposes the friction quickly.

    1. 1

      100% agree! That's exactly why I pushed this version live right now. Getting the core drag-and-drop loop into users' hands immediately is the best way for me to figure out where the actual friction is and what nodes to build next, rather than over-engineering it in isolation.