Show HN: toran – a read-only outbound API inspector

Hi HN, I built toran because I kept running into situations where I could not easily tell what my app was actually sending to third party APIs when things went wrong.

toran is a read-only outbound API inspector. You swap your API base URL for a toran URL, run your app or tests, and see live requests in the browser. There is no SDK, no agent, and it is fully reversible.

This is early and intentionally narrow. During this phase, all signups get Pro and Pro Plus features enabled and there is no billing yet.

I would love feedback, especially on where this feels unnecessary, risky, or breaks down in real-world setups.