API monitoring that checks the response, not just the status code.

Send the real request — method, headers, body, credentials — and assert on what comes back: status code, JSON field, keyword, response time. From several European regions at once.

All plansAll plans · gRPC and certificate expiry from Pro · abnormal latency on Max
API endpoints LIVE
api.example.com/healthGET · 200 UP 48 ms
api.example.com/v1/ordersPOST · 201 · Bearer UP 112 ms
api.example.com/v1/statusJSONPath $.db == "ok" UP 61 ms
partner.example.com/v2/ratesGET · OAuth2 UP 87 ms
search.example.com/v2/queryPOST · > 800 ms SLOW 1,240 ms
grpc.example.com:443gRPC health UP 23 ms
The request

The request your clients send.

A health endpoint that answers 200 tells you little. Call the routes that matter, the way your clients call them.

METHODGET, POST, PUT, PATCH, DELETE, HEAD or OPTIONS
HEADERSCustom headers, per monitor
BODYJSON, form, XML or plain-text body
3XXRedirects followed, up to 5 hops
TLSCertificate checked, or skipped for internal endpoints
gRPCStandard health checking protocol, from Pro
Authentication

Protected endpoints, without a false 401.

Every secret is encrypted at rest and masked everywhere it is read back.

Basic auth All plans
User and password, sent as an Authorization header.
Bearer token All plans
A static token from the service you monitor.
API key All plans
In a named header or a URL query parameter.
Session cookie All plans
A raw Cookie header for endpoints behind a login.
OAuth2 client credentials All plans
OKStatus fetches the token from your identity provider, then calls the API with it.
Client certificate (mTLS) All plans
Certificate and private key presented during the TLS handshake.
Assertions

A 200 with the wrong body is an outage.

Each option tells you which plan unlocks it.

Accepted status codes All plans
Ranges and single codes: a 201, a 204 or an expected 404 stays green.
JSONPath All plans
Compare a field of the response with ==, !=, >, <, >=, <= or contains.
Keyword All plans
Require a word in the response, or alert when one appears.
Latency threshold All plans
Marked slow above the response time you set, in milliseconds.
Certificate expiry Pro+
Warned before the API's TLS certificate expires.
Abnormal latency Max+
Alerted when an endpoint gets slower than its own usual response time.
Confirmation

One failing region is not an outage.

An API that fails on one network path only should not wake anyone up.

01 Called from several regions Up to 2 regions per monitor on Free, 3 on Pro, 5 on Max and Enterprise.
02 Each answer checked Status code, assertions and response time, region by region.
03 Majority before the alert The monitor goes down only when more than half of its regions fail, then your alert channels are notified.
As code

Monitors that live next to your API.

Create and change monitors from your pipeline, not only from the dashboard.

RESTREST API v1, with its OpenAPI spec
TFTerraform provider
MCPAsk your AI assistant about your endpoints

Yes. Basic auth, Bearer token, API key, session cookie, OAuth2 client credentials and client certificates (mTLS) are available on every plan. Secrets are encrypted at rest and never returned in clear by the dashboard or the API.

Your first monitor in under a minute.

Free plan, no card. Hosted and operated in Europe.