A whole world of vendors, on your laptop. Stripe, Twilio, Resend, Clerk, S3 — stateful, time-travellable, signed at the wire. Charge a card. Issue a refund. Expire a token. None of it ever leaves the room.
Molar is a release guard with four surfaces. Clones are stateful mirrors of every third party your app touches — so Cartographer's agent, Guard's checks, and Trace's replays never charge a real card or email a real customer.
Maps your app, plans goals, drives a real browser, writes Playwright tests you own.
Stateful, time-travellable clones of Stripe, Twilio, Email, Auth, S3. World snapshots across vendors.
Runs Cartographer's flows against live production on a schedule. Catches bugs before users do.
04 / DEBUGGERReplay any failed run like a debugger. Diff against last green to see exactly what changed.
Every clone holds the real vendor's object graph — customers, charges, subscriptions, messages, sessions, buckets — in a per-run tenant. No shared state across CI workers, no test pollution.
Advance the clone clock by 30 days to trigger trial expiry, dunning emails, JWT rotation, S3 lifecycle. No more sleep(86400). Subscriptions renew on command.
Clone webhooks fire at your URL — including localhost — signed with HMAC keys you control. Force redelivery, simulate retry storms, validate signature code paths sandboxes can't reach.
Snapshot every clone at the same logical instant. Restore the whole world — Stripe, Twilio, Email, Auth, S3 — to test step 7 again without rerunning steps 1–6.
Inject 429s, 422s with the exact payload shape, latency spikes, idempotency conflicts, dunning failures. Drag-and-drop scenarios; persisted into snapshots.
If your env still points at api.stripe.com with a live-mode key, the SDK refuses to make the call. Never charge a real card from a CI runner again. Provable safety KPI on the home page.
Test mode was built for a developer poking at the API once a week. Clones was built for the thousand calls a minute your agents and CI actually make. The numbers tell the story.
Clones replace your STRIPE_API_BASE, TWILIO_ACCOUNT_SID, and friends. Your app code doesn't change. Your tests do everything they couldn't before.
One API call (or one MCP tool, or one CLI command) gives you a tenant-scoped URL per clone kind. Tenants are isolated cryptographically — Run A's Stripe customers are invisible to Run B's, even on the same clone instance.
Export MOLAR_CLONE_STRIPE_URL et al, or use the SDK to auto-detect. Your existing Stripe client, Twilio client, Resend client speak to the clone — same SDKs, same wire format, same error shapes.
Inject the 422 with the exact payload shape your debugger showed last week. Hold a webhook for 90 seconds. Decline a card on the third charge. Expire an OTP. Snapshot the world before, so the next test starts clean.
One call drops the tenant. Or hand the world snapshot to Guard for shadow-prod runs, to Cartographer's agent for autonomous QA, or to Trace's debugger for layer-2 replay. Clone state travels with the run.
Most vendor portals show you "test mode events" and a search box. Clones gives you the live request stream, the virtual clock, the active chaos rules, the snapshot graph, and the destructive-call refusal log — for every session, in one workspace.
Teams search for WireMock alternatives, Stripe test sandboxes without rate limits, and MCP-native API mocking. Clones is all three — stateful, vendor-faithful, and built for agents.
WireMock and MSW are great for hand-written HTTP stubs. Clones are vendor-faithful: they implement Stripe, Twilio, Clerk, and S3 object graphs with signed webhooks, virtual clocks, and world snapshots — so checkout and auth flows behave like production without hitting real APIs. See Stripe clone docs.
Yes. Point your SDK at a clone tenant — no Stripe account, no sk_test_ keys, no network calls, no rate limits. Read how to test Stripe without real cards.
Clones run locally, in CI, or air-gapped on-prem. Parallel workers each get an isolated tenant with deterministic IDs — no shared sandbox state, no vendor rate limits.
Clones expose spawn, snapshot, clock-advance, and webhook tools over the Model Context Protocol so Cursor, Claude Code, and other agents can drive sandboxes without shell scripts. Works with Cartographer and Guard in the Molar suite.
One unit. $0.002 a minute. A typical CI run uses six of them. There's no per-vendor tax, no webhook overage, no "talk to sales" before you can spawn your second tenant.
Clone-minute = $0.002. A typical CI run uses 6 clone-minutes. Pro covers ~8,000 CI runs/mo.
Five minutes from one command to a stateful, signed-webhook-firing, clock-controllable clone of Stripe, Twilio, Email, Auth, and S3 — all in one tenant.