hen 0.20.2

Run protocol-aware API request collections from the command line or through MCP.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

name = Redaction Rules Example
description = Extend Hen's default safe-output masking with explicit header, capture, and body-path rules.

$ API_ORIGIN = https://lorem-api.com/api
$ API_TOKEN = secret.file("./secrets/demo_client_id.txt")

redact_header = X-Session-Token
redact_capture = SESSION_ID
redact_body = body.session.accessToken

---

Login

POST {{ API_ORIGIN }}/echo

* Authorization = Bearer {{ API_TOKEN }}

~~~ application/json
{
  "username": "hen",
  "password": "demo-password",
  "session": {
    "id": "session-hen-demo",
    "accessToken": "access-hen-demo-token"
  }
}
~~~

& body.session.id -> $SESSION_ID

# Login request succeeds
^ & status == 200

---

Get session

POST {{ API_ORIGIN }}/echo

> requires: Login

* X-Session-Token = {{ SESSION_ID }}

~~~ application/json
{
  "session": {
    "id": "{{ SESSION_ID }}",
    "accessToken": "{{ API_TOKEN }}"
  }
}
~~~

# Returns a session access token
^ & body.session.accessToken != null

# Session request succeeds
^ & status == 200