Docs
API docs for QA automation and backend development
This hub is for QA, automation, and frontend teams who need a reliable API - for testing or production. It includes quickstart steps, OpenAPI reference, and practical guidance for Postman, Playwright, and CI runs.
Start here
What you will do in 2 minutes
Use the fastest path to get predictable responses, then decide whether you need per-user sessions for isolation testing.
Create a project + keys on app.reqres.in.
Use a manage key for setup and a public key for read-only testing.
Send your first request with
x-api-key.
Your starter project has a Products collection with sample data ready to query.
For per-user testing, mint a session token and
use
Authorization: Bearer.
App-user sessions isolate reads and writes to a single user.
curl "https://reqres.in/api/collections/products/records" \
-H "x-api-key: YOUR_API_KEY" \
-H "X-Reqres-Env: prod"Paths
Choose a path
API key required for all requests
Every request to reqres.in requires an x-api-key header.
Sign up free to get your key and a starter project with sample data.
Quickstart
First request with Postman or curl
After signup you get a project with a Products collection and sample data. Use your API key to read, create, update, and delete records. Changes persist.
For per-user isolation, start an app-user session and send the session token as a Bearer header.
Read the Postman setup guide →curl "https://reqres.in/api/collections/products/records" \
-H "x-api-key: YOUR_API_KEY" \
-H "X-Reqres-Env: prod"curl -X POST "https://reqres.in/api/collections/products/records" \
-H "x-api-key: YOUR_API_KEY" \
-H "X-Reqres-Env: prod" \
-H "Content-Type: application/json" \
-d '{"data":{"name":"New Product","price":9.99}}'curl "https://reqres.in/app/collections/products/records" \
-H "Authorization: Bearer YOUR_SESSION_TOKEN"QA automation
Reliable runs without getting blocked
ReqRes is tuned for predictable payloads and stable status codes. Logs help explain failures fast, and guidance keeps CI runs from tripping rate limits or WAF rules.
What this helps with
- Stable payloads for Postman collections and Playwright suites.
- Predictable status codes to keep QA assertions consistent.
- Logs for auth, rate limits, and WAF-related failures.
API reference
API reference
Machine-readable specs for tooling, LLMs, and code generation.
Example app
Notes app flow with auth + CRUD
See how magic links, per-user data, and collections work together in a real UI.
Common issues
Common failure modes
Getting a 401 or 403?
All requests require an x-api-key header.
Get your key here.
Use Authorization: Bearer only for per-user sessions.
Environment header
If you see environment errors, set
X-Reqres-Env to
prod or
dev.
Rate limits in CI
CI runners can trigger rate limits or WAF rules. Add backoff and stable user agents, then review the QA guide.
Related reading
Deeper dives for API testing and QA automation
QA automation without getting blocked
Keys, headers, logs, and retries that keep tests reliable.
When mock data slows you down
Why fake APIs hide real issues and when to move on.
When JSONPlaceholder is not enough
A path from fake endpoints to real persistence.
Frontend-only auth
Login flow testing without standing up servers.