Your traffic is sensitive.
You stay in control.

Local only

The recorder sends only to the collector on your own machine (127.0.0.1). Recordings stay in .stresseur/ in your project. Nothing is uploaded, and there is no telemetry.

Redacted in the browser

Auth headers, cookies, API keys, and fields named like password, token, secret or session are removed in the browser, before anything is sent.

Redaction goes by name

Other personal data in bodies, like emails or addresses, is stored as captured. Add your own field names with redact, and record against test data.

Secrets stay out of tests

A redacted value becomes a link to an earlier response or an environment variable. It is never written into a generated file.

Dev-only by design

Installed as a dev dependency and started only in development: every snippet checks NODE_ENV or localhost first.

Plain files you review

Generated tests are YAML files in your repo. Read, edit or delete them like any other code.

Delete anytime

Delete .stresseur/ to remove every recording.