Please report security issues privately to security@pametan.co rather than opening a public issue. We aim to acknowledge within 2 business days.

This is a development/testing tool, not production software:

• It does not authenticate requests and serves only synthetic, generated data — do not run it on a public interface or use it for real traffic. Bind it to localhost / your test network.
• Relevant reports: a request body that can crash the server or exhaust memory, or any path that could read/serve real data (there is none by design).

Use synthetic/example data in reports.

This project imitates Plaid's API shapes for local testing. It is not affiliated with or endorsed by Plaid, and is not a substitute for testing against Plaid's own sandbox before going live.

The latest published minor version receives fixes. Until a 1.0 release, the API is stable but not yet frozen.