mend.rest

the receipts river
Status  Development instance. The official benchmark held-out execution is BLOCKED pending independent steward isolation. Nothing rendered below is a production claim or an assurance claim.

Your credentials, your browser

This page has no accounts and no backend of its own. It sends what you type straight to the mend.rest API through a same-origin pass-through, and keeps nothing.

Read this before you paste anything. Credentials live in this tab's memory only. They are never written to disk, never sent anywhere except the mend.rest API, and are gone the moment you close or reload the tab — unless you tick keep for this tab below, which stores them in sessionStorage so a reload does not lose them. Even then they are cleared when the tab closes, and any script that can run on this page can read them. Do not use a credential you would not be willing to rotate. Prefer a private window. The Forget button wipes all three fields, the stored copy, and whatever task is on screen.
Transport-level. Gets you to the service; grants no authority inside it.
Product-level. Scoped per method and bound to a task; the transport never reads it.
Not a secret. Required for everything except discovery.
What this surface does not know