Zuntenium API Explorer
VS Code extension — explore, test, and operate the QuFlow Cloud FastAPI gateway without leaving the editor.
Features
- Spec-driven endpoint tree — auto-loads from
/openapi.json or a local file, grouped by OpenAPI tags
- Authenticated requests — JWT and API key stored in VS Code
SecretStorage; never in logs
- Safety rails — unsafe operations on production require explicit confirmation; dry-run mode available
- Code generation — Python (
CloudClient), curl, PowerShell, JavaScript — credentials as env-var placeholders
- Drift detection — SHA-256 snapshot comparison; alerts when the gateway spec changes
- QuFlow job helpers — submit, poll, and list jobs from the sidebar
- Request history — last 100 requests (redacted), clearable, local-only
- Gateway health — status bar shows
healthy / unhealthy / unreachable + version, polled every 30s
Install
code --install-extension zuntenium-api-explorer-0.1.0.vsix
Quick Start
- Open the API Explorer Activity Bar panel.
- Click Load Spec and enter your QuFlow Cloud URL (e.g.
http://localhost:8000).
- The endpoint tree populates from
/openapi.json.
- Click an endpoint → Send Request (authenticate first if required).
Authentication
- Run Zuntenium API: Sign In and select JWT or API Key.
- Credentials are stored in VS Code
SecretStorage.
- Generated code snippets use
$QUFLOW_API_KEY env-var placeholders — never embed real tokens.
Settings
| Setting |
Default |
Description |
zunteniumApiExplorer.defaultEnvironment |
local |
Default environment profile |
zunteniumApiExplorer.requestTimeoutMs |
30000 |
HTTP request timeout |
zunteniumApiExplorer.driftCheckOnLoad |
true |
Compare spec hash on every load |
zunteniumApiExplorer.rateLimitRpm |
60 |
Max requests per minute |
Commands
- Zuntenium API: Load Spec — load OpenAPI spec from URL or file
- Zuntenium API: Sign In — store JWT or API key
- Zuntenium API: Sign Out — clear stored credentials
- Zuntenium API: Run Request — send selected endpoint request
- Zuntenium API: Generate Code — emit Python/curl/PowerShell/JS snippet
- Zuntenium API: Clear History — wipe local request history
- Zuntenium API: Check Drift — compare current spec against saved snapshot
Security
- All cloud responses shown via
textContent — no innerHTML
- Credentials redacted in audit log, history, and output panel
- Strict CSP on all webviews
- Workspace Trust required before sending any request
| |
