API + webhooks console
Fourteen reusable console primitives for the Oak Flats Mufflermen REST + webhook surface — endpoint cards, a key manager, webhook subscribers, an event log, a retry queue, a request/response inspector, rate-limit and quota meters, a Postman-style explorer playground, HTTP and auth chips, a CORS policy editor, an OAuth app card, and signing-secret rows.
API + webhooks console is a reusable Oak Flats Muffler Men UI primitive with documented states, accessibility expectations, theme behavior, and implementation evidence.
API + webhooks console: Fourteen reusable console primitives for the Oak Flats Mufflermen REST + webhook surface — endpoint cards, a key manager, webhook subscribers, an event log, a retry queue, a request/response inspector, rate-limit and quota meters, a Postman-style explorer playground, HTTP and auth chips, a CORS policy editor, an OAuth app card, and signing-secret rows.
Endpoint card
REST endpoint card — METHOD chip, path, description, version, auth method, try-it CTA.
API key manager
Full key management — list, create, rotate, revoke, scope editor, last-used metadata.
Webhook subscriber
Subscriber row — URL, event chips, status, last delivery, masked secret, edit/revoke.
Webhook event log
Event log table — timestamp, event, endpoint, status, duration, retry chip, payload expand.
Retry queue
Retry queue — pending retries with backoff schedule, manual retry, abandon control.
Request / response inspector
Split panel — request on left (method, URL, headers, body) and response on right.
Rate limit gauge
Live rate-limit meter — requests-per-minute, burst capacity chip, throttle warning.
Quota meter
Monthly quota meter — used / limit / overage with tone-shifting progress bar.
Explorer playground
Postman-style request builder — method, URL, params, headers, body, send, response.
HTTP status chip
Tiny HTTP status chip — 2xx, 3xx, 4xx, 5xx tones with reason phrase.
Auth method chip
Auth method chip — Bearer, Basic, API Key, mTLS, OIDC with signature preview popover.
CORS policy editor
CORS rules — origins tag-input, methods chips, headers tag-input, credentials toggle.
OAuth app card
OAuth app — client name, masked client-id, redirect URIs, scopes, status.
Signing secret row
Webhook signing secret — masked secret, algorithm chip, rotate, last rotation date.
Full console composition
Explorer, endpoint list, key manager, webhook subscribers, event log, rate limits.