httpbin.org

```json
{
  "service_type": "platform",
  "base_url": "https://httpbin.org",
  "auth_method": "none",
  "auth_config": {},
  "endpoints": [
    "/get",
    "/post",
    "/put",
    "/patch",
    "/delete",
    "/headers",
    "/ip",
    "/user-agent",
    "/status/:code",
    "/redirect/:n",
    "/redirect-to",
    "/cookies",
    "/cookies/set",
    "/cookies/delete",
    "/basic-auth/:user/:passwd",
    "/bearer",
    "/hidden-basic-auth/:user/:passwd",
    "/digest-auth/:qop/:user/:passwd",
    "/stream/:n",
    "/delay/:n",
    "/drip",
    "/range/:n",
    "/bytes/:n",
    "/image",
    "/image/jpeg",
    "/image/png",
    "/image/svg",
    "/image/webp",
    "/gzip",
    "/deflate",
    "/brotli",
    "/anything",
    "/anything/:anything",
    "/base64/:value",
    "/cache",
    "/cache/:n",
    "/encoding/utf8",
    "/etag/:etag",
    "/response-headers",
    "/robots.txt",
    "/uuid",
    "/json",
    "/html",
    "/xml",
    "/forms/post"
  ],
  "pricing_model": {
    "type": "free",
    "details": {
      "hosted_instance": "https://httpbin.org — free public demo instance",
      "self_hosted": "Free and open source (MIT/ISC license), runnable via Docker: `docker run -p 80:80 kennethreitz/httpbin`",
      "note": "Original hosted instance has historically been community-maintained; no paid tier exists"
    }
  },
  "rate_limits": {
    "public_instance": "No formally documented limits; historically the public instance enforces soft limits and may be unreliable under load",
    "self_hosted": "None"
  },
  "capabilities": [
    "Echo HTTP request data (method, headers, args, form data, JSON body, files)",
    "Return arbitrary HTTP status codes for testing",
    "Simulate redirects (single and chained)",
    "Cookie get/set/delete operations",
    "Authentication testing (Basic, Bearer, Digest, Hidden Basic)",
    "Response streaming and controlled delay/latency injection",
    "Return static assets (images in multiple formats, HTML, XML, JSON)",
    "Content encoding tests (gzip, deflate, brotli)",
    "Range and byte-range request testing",
    "Cache control and ETag testing",
    "UUID generation",
    "Base64 encode/decode helper",
    "Drip-feed data for streaming tests",
    "Anything endpoint that echoes any path and any HTTP method"
  ],
  "raw_analysis": "httpbin.org is a diagnostic HTTP echo and testing service originally created by Kenneth Reitz (author of Python's `requests` library) and now maintained by the community (postmanlabs/httpbin on GitHub). It is not a typical 'platform' or SaaS product in the collaboration/dashboard sense; it is a developer utility that returns information about the HTTP request it receives, making it indispensable for testing HTTP clients, proxies, authentication flows, debugging, and CI pipelines.\n\nAudience: backend engineers, API developers, QA/SDET teams, DevOps engineers, and anyone writing HTTP client libraries. Language-agnostic — used heavily from Python, JavaScript, Go, Java, shell (curl), and Postman collections.\n\nMaturity: Very mature. It has been a de facto standard for HTTP testing since ~2014, is open source (MIT/ISC), Dockerized, and widely referenced in documentation. The public hosted instance is a free best-effort service and is known to occasionally rate-limit or go down; serious users self-host via Docker or deploy to their own infrastructure.\n\nIntegrations: There is no formal SDK or plugin ecosystem — it is itself the tool you integrate into tests and scripts. It pairs naturally with any HTTP client, CI system (GitHub Actions, GitLab CI, Jenkins), API testing frameworks (Postman, pytest, Jest, Karate, REST Assured), and mocking/proxy tools (mitmproxy, Charles, WireMock as an alternative).\n\nAlternatives worth noting: `httpbun.com`, `postman-echo.com`, `webhook.site`, `beeceptor.com`, and `Mockoon` for local mocking; these may be preferred when httpbin.org's public instance is rate-limited.\n\nNon-API note: The catalog entry's URL field lists https://kennethreitz.org (the author's personal site), but the actual service is hosted at https://httpbin.org. This analysis treats httpbin.org as the canonical base_url."
}
```

2/3 tests passed

{
  "overall": 78,
  "dimensions": {
    "token_efficiency": 8.5,
    "first_try_success": 9.0,
    "response_parseability": 9.5,
    "error_clarity": 7.5,
    "doc_quality": 7.0,
    "auth_simplicity": 9.5,
    "latency": 9.0,
    "consistency": 7.0
  },
  "pricing_normalized": {
    "model": "free",
    "hosted_instance": "https://httpbin.org",
    "self_host": "docker run -p 80:80 kennethreitz/httpbin",
    "has_paid_tier": false,
    "cost_per_1k_requests_usd": 0
  },
  "issues": [
    "No llms.txt (404) — agents can't discover canonical capabilities in a machine-readable format",
    "No security headers on responses, despite being an HTTP-testing service (ironic given its purpose)",
    "Hosted instance has a history of community-maintained uptime — reliability is not enterprise-grade SLA backed",
    "Documentation is sparse and largely served via the HTML landing page rather than structured guides",
    "robots.txt disallows /deny (which exists specifically to return 403) — minor but worth noting"
  ],
  "recommendations": [
    "Add /llms.txt enumerating endpoints in a compact machine-readable format so agents can self-discover capabilities without scraping HTML",
    "Publish OpenAPI/JSON-schema spec describing all echo/status/redirect/cookie/auth endpoints",
    "Add security headers (HSTS, X-Content-Type-Options) even on the demo instance — reinforces trust for a service used to test HTTP behavior",
    "Provide documented status/uptime page or badge for the hosted instance",
    "Document known limitations (rate limits if any, streaming size caps, file upload limits) explicitly on a /docs endpoint"
  ]
}