API monitoring

Your API broke at 2am. Your customers found out before you did.

PulseStack watches every endpoint for status code, response time and availability, and pages you the moment a route starts failing. Attach custom headers to reach authenticated routes, not just the public ones.

14-day trial. No card on the free plan. All eight monitor types from £15 a month.

Live HTTP request from our network - the same check PulseStack runs as often as every 30 seconds.

3

signals per check: status code, response time, availability

30s

fastest check interval on Enterprise

8

native alert channels, on failure and recovery

Custom

request headers to monitor authenticated routes

The endpoint is up. That does not mean it is working.

A 200 on the homepage tells you nothing about the API your product actually runs on. These are the failures that slip past a basic uptime check.

01

The route returns the wrong status

A deploy flips a 200 to a 500 or a silent 401. The page loads, the API does not, and orders quietly stop.

02

Responses crawl to a stall

The endpoint still answers but takes six seconds. Timeouts cascade through every service that depends on it.

03

Auth expires unnoticed

A rotated key or lapsed token locks out an integration. Without a header-aware check, you never see it fail.

04

A dependency goes dark

A third-party API your route calls falls over. Your endpoint returns errors it did not cause and you get blamed.

05

One region fails, not all

The endpoint is fine from your desk but broken from another location. Single-location checks miss it entirely.

06

You hear it from a customer

Support tickets become your monitoring. By the time someone reports it, the damage to trust is already done.

Point it at an endpoint. Watch it in seconds.

No agent to install, no SDK to import. Give PulseStack a URL and a header, and the first check runs immediately.

Four steps to a monitored API

Setup takes minutes, not a sprint. Here is the whole flow.

1

Add the endpoint

Paste the URL of the route you want watched. GET, health check or a real business endpoint.

2

Attach your headers

Add a bearer token or API key so the check hits authenticated routes exactly as your app does.

3

Set the rules

Choose the healthy status range, the check interval and how many failures in a row trigger an alert.

4

Route the alerts

Pick channels: Slack, PagerDuty, SMS and more. Alerts fire on failure and again on recovery.

A check that speaks your API's language

Each cycle, PulseStack sends the request with your headers, reads the response and records the result. Here is what a healthy check looks like next to a failing one.

  • -Status code classified against the healthy range you define.
  • -Response time captured in milliseconds and tracked over time.
  • -Custom headers sent so authenticated routes respond as they would to your app.
pulsestack api check
GET /v2/orders/status
Authorization: Bearer ****9f21
-
200 OK - 142ms - healthy
200 OK - 138ms - healthy
200 OK - 2,910ms - slow
503 UNAVAILABLE - failure 1 of 2
503 UNAVAILABLE - threshold met, alerting
-
alert sent -> Slack, PagerDuty

Everything in every API monitor

No add-on tiers for the basics. These come with the monitor.

Status code classification
Response time tracking
Custom request headers
Authenticated route support
Configurable check intervals
Consecutive-failure thresholds
Multi-location checks
Failure and recovery alerts
Eight native alert channels
Public status pages
Maintenance windows
Incident history

API monitoring is one of eight types

Run your API checks alongside everything else that keeps your product online, from one account.

HTTP

Page and endpoint availability by status code and response time.

Keyword

Confirm a word or phrase is present, or flag when it appears.

TCP Ping

Reachability check at the network layer for any host.

Port

Watch a specific port and the service listening on it.

API

Status code, response time and availability with custom headers.

Heartbeat

Cron and background jobs that must check in on schedule.

DNS

Resolve records and catch unexpected changes.

Domain Expiry

Days-to-expiry tracking so a domain never lapses.

Stop finding out from your customers.

Set a threshold, route it to Slack, and let PulseStack watch the endpoints you cannot afford to lose.

An honest look at your options

Where a PulseStack API monitor sits against a rough homemade check or a status page you refresh by hand.

CapabilityA cron + curl scriptManual checkingPulseStack API monitor
Status code and response time trackedIf you build itNoBuilt in
Custom headers for auth routesManualNoYes
Consecutive-failure thresholdRarelyNoConfigurable
Failure and recovery alertsYou wire itNoEight channels
Multi-location checksNoNoYes
Public status page and incident historyNoNoIncluded
Setup timeHoursOngoing effortMinutes

Who leans on API monitoring

Backend and platform engineers

Watch health checks and business-critical routes with the same auth headers your services use, and catch a bad deploy before it spreads.

SaaS teams with integrations

Third-party APIs fail on their schedule, not yours. Monitor the routes you depend on and know instantly when an upstream goes dark.

On-call and DevOps

Thresholds cut the noise, PagerDuty and Slack routing gets the right person, and recovery alerts close the loop without a manual all-clear.

Alerts that reach you where you already are

Every API monitor can fire through any of these, on failure and again on recovery, only after your threshold is met.

EmailSMSSlackMicrosoft TeamsDiscordPagerDutyTelegramWebhooks

API monitoring questions, answered

What is API endpoint monitoring?

API endpoint monitoring sends real HTTP requests to your API endpoints at regular intervals and validates the responses. Unlike website monitoring that checks if a page loads, API monitoring verifies status codes, response times, response body content, JSON structure, and header values. It catches issues like a 200 response that returns empty data, a response missing critical fields, or latency that has crept above acceptable thresholds.

How does response validation work?

After each request, PulseStack™ runs your configured assertions against the response. You can check that the status code matches (e.g. 200), that the response body contains specific text or JSON keys, that numeric values fall within expected ranges, and that headers include required values like cache-control or content-type. If any assertion fails, the check is marked as failed and alerts trigger. This catches silent data corruption that status codes alone would miss.

Can I monitor APIs that require authentication?

Yes. PulseStack™ supports Bearer tokens, API keys in headers or query parameters, Basic authentication, and custom header schemes. You can set any combination of request headers, including Authorization, X-API-Key, or custom authentication headers your API requires. Credentials are encrypted at rest and never exposed in logs or the dashboard.

What is the difference between API monitoring and synthetic monitoring?

Synthetic monitoring typically refers to scripted multi-step browser transactions that simulate user journeys. API monitoring focuses on individual endpoint health: sending a request and validating the response. PulseStack™ API monitoring is closer to synthetic API testing. You define the request (method, headers, body) and the expected response. For browser-based synthetic monitoring, use our website monitoring with keyword checks.

How do I monitor a POST endpoint with a request body?

When creating an API monitor, select POST as the HTTP method and enter your request body as raw JSON. Set the Content-Type header to application/json. PulseStack™ sends exactly the request you configure, including the body, and validates the response against your assertions. This works for any method: POST, PUT, PATCH, and DELETE.

Can I monitor GraphQL endpoints?

Yes. GraphQL APIs use POST requests with a JSON body containing the query. Create an API monitor with the POST method, set your endpoint URL, add the Content-Type: application/json header, and put your GraphQL query in the request body. Add response assertions to validate that the data field contains expected values and that the errors field is absent or empty.

How does multi-region API monitoring reduce false positives?

PulseStack™ checks your API from 7 global locations simultaneously. If only one location reports a failure while others succeed, it is flagged as a regional network issue rather than an API outage. This eliminates false alerts caused by transient routing problems, regional CDN issues, or monitoring-location-specific network blips. You can configure how many locations must fail before an alert triggers.

What latency percentiles does PulseStack™ track?

We track P50 (median), P95, and P99 response times for every endpoint. Average response time hides outliers. The P95 value tells you that 95% of requests complete within that time. The P99 reveals your worst-case scenarios. Set alert thresholds on any percentile to catch degradation before it affects enough users to generate complaints.

Can I monitor third-party APIs I depend on?

Yes. Monitoring third-party APIs like Stripe, Twilio, SendGrid, or OpenAI is one of the most common use cases. You cannot control their uptime, but you need to know immediately when they degrade. Create monitors for each external dependency and set response time thresholds appropriate to their SLAs. When a provider has an incident, you will know before their status page updates.

How many API endpoints can I monitor on the free plan?

The free plan includes 50 monitors total, and each API endpoint counts as one monitor. Checks run every 3 minutes on the free plan and as frequently as every 30 seconds on paid plans. All plans include response validation, multi-region checks, and access to all 16+ alert channels.

Monitor the endpoints your product runs on

Status code, response time and availability on every route, with the headers to reach the ones that matter. Start free, upgrade for API monitoring from £15 a month.