I Built an API Client With an Embedded MCP Server...

Every API client is racing to add AI features. But there's a fundamental problem nobody's talking about: API testing involves the most sensitive data in your stack. Auth tokens. API keys. Production user data. Payment details. Internal service credentials. When Postman added AI, they routed your data through their cloud. When Insomnia added MCP support, it's client-side only — your AI can call external services, but it can't actually interact with your API workspace. I wanted something different