curl

macOS has a kernel-level sandboxing tool you can use from the terminal. You can leverage it with the audit pattern: use a deny-list profile that lets you run a script once, watch the kernel deny its first write, and decide what to do next.

Docker Desktop is one way to run a Docker daemon on a Mac. colima is another: the same daemon, inside a Lima VM, driven by the same docker CLI.

While curl is universal in scripts, for interactive API work, HTTPie makes it easy to write your request.