Features
A complete API workspace — without the Electron tax.
Requests
- All HTTP methods with params, headers, and bodies (raw, x-www-form-urlencoded, multipart with file parts)
- Automatic gzip / brotli / deflate, redirect & timeout policy, response timing and size
- Request tabs, a collection tree, and a command palette (⌘K) with fuzzy search
- Import from cURL and from Postman v2.1 collections + environments
- Generate code: copy as cURL, fetch, Python, HTTPie, PowerShell, wget
Auth & security
- API key, Bearer, and Basic auth
- OAuth 2.0 — client credentials and authorization code + PKCE (opens your browser, loopback capture)
- mTLS with PEM client certs or PKCS#12 (.p12/.pfx) bundles, plus custom CA bundles
- Secrets stored in the OS keychain (macOS Keychain / Windows Credential Manager) — never written to disk
Scripting & variables
- Pre- and post-request JavaScript with a Postman-style pm.* API (sandboxed QuickJS)
- Variable scopes (global → collection → environment → script → request) with {{var}} templating and dynamic vars
- Tests and assertions, console output, and variable extraction for request chaining
Beyond REST
- WebSocket console — connect, send, and watch frames live
- Dynamic gRPC client — discover services via server reflection or load .proto files (unary + streaming)
Workspace & performance
- Git-friendly storage: flat YAML, one request per file — clean diffs and easy review
- Run history, save responses to disk, cancel in-flight requests
- A Rust core in an OS-native webview — fast startup and a small memory footprint