Tetiva
Blog
API questions you were afraid to ask
401: the server doesn't know who you are. 403: it knows, but won't let you in. Status codes, headers, endpoints and cookies explained with envelopes and badges.
Collection final_v2: why everyone has a different copy
Why a Postman collection splinters into final_v2 copies in the chat, three ways to share it with your team (Git, cloud, a link) and a 15-minute clean-up.
The token in the screenshot: how API keys leak without any hackers
A screenshot in a ticket, a call, a cURL command in chat: five everyday ways API keys leak, why masking doesn't protect them, and what to do once one has.
Friday, 6:40 pm: the request went to the wrong environment
What environments and variables are in Postman and other API clients, why a DELETE lands on production, and five habits that prevent it.
What runs when you import someone else's collection
How Postman, Insomnia, Bruno and Hoppscotch sandbox pre-request scripts, what each costs the person importing a collection, and how to test your client.
How to test gRPC services
A hands-on gRPC testing guide covering schema discovery, sample requests, streaming, deadlines, metadata, TLS, and common failures.
Why an API client needs an MCP server
How MCP lets AI agents use API collections for smoke tests and request generation while keeping secrets and execution controlled.
Postman alternatives in 2026, compared in daily use
Insomnia, Bruno, Yaak, Hoppscotch and Tetiva compared on install size, account, telemetry, protocols, sync and price, and what each one is good at.