Gostman is an open source client for REST, GraphQL, gRPC and WebSocket that keeps your collections as files on your machine. Tests, a command line for CI, a mock server and sharing with your team are all in the free download.
Every protocol in one window #
Any method, with JSON, form, multipart or file bodies, and the response as a tree, raw text or a preview.
Tests, the command line, Git, mocks, captured traffic, sharing and your coding agent all work from the same files.
Add checks as plain rows, or write a script with test() and expect(). The results sit beside the response, so a broken contract shows up on the request that broke it.
- Checks on status, headers, body and response time
- Pre-request and post-response scripts, run in a sandbox
- A runner in the app for a whole folder at once
gostman run sends every request in a folder with its scripts, variables and cookies, prints what failed and why, and exits non-zero so the pipeline stops. There is no runtime to install.
- Text, JSON and JUnit reports
- Secrets passed from the environment, never stored in the collection
- Linux, macOS and Windows builds on every release
Open a folder and every request becomes a small YAML file: one file per request, one directory per folder. Commit it next to the code it tests and review changes line by line.
- Tokens, cookies and history never reach the folder
- A cloned folder runs no scripts until you trust it
- The app, the command line and your agent all read the same files
Save any response as an example, then start a local server that answers each route with it. Build the frontend before the API exists, and watch every request it makes arrive in the log.
- Pick which example each route returns while the server runs
- Optional delay and CORS for browser clients
- Also available as gostman mock and to agents over MCP
Point your app at a local address and Gostman forwards every call to your API while listing each one live. Save any of them as a request, with its response kept as an example. There is no certificate to install.
- Works for any app whose API base URL you can change
- Authorization and cookie headers are never saved
- In the desktop app and as gostman capture
Send a folder as an encrypted link or file that is built in your own window and never uploaded, or turn the collection into a single documentation page you can host anywhere.
- Variable values and saved responses stay out unless you include them
- The recipient sees what is inside before importing
- One self-contained HTML file, from the app or gostman docs
Claude Code, Codex and Cursor can call Gostman through MCP in place of curl. They use the collection you already have, and variable values and credentials are filled in inside Gostman and replaced with their names in everything the agent reads.
- Cookies, tokens and variables carry across calls in a session
- Responses are capped and can be narrowed to the fields that matter
- Agents reach only the hosts your collection already uses, unless you allow more
Gostman is open source. Every feature below is included, with no licence key and no seat count.
Send and inspect
- Every protocol
- REST, GraphQL with a schema browser, gRPC through reflection or .proto files, WebSocket, Socket.IO, MQTT, Server-Sent Events, SOAP and MCP in one window.
- Auth for real APIs
- Basic, bearer, API key, OAuth 1 and 2 with renewal, Digest, AWS SigV4, NTLM, Akamai EdgeGrid, JWT, ASAP and Hawk.
- Bodies and transport
- JSON, XML, form, multipart and file bodies, a cookie jar, proxy and client certificates, and curl commands pasted straight into a request.
- Responses
- JSON tree, HTML, image and PDF previews, headers, cookies, size and timing. Download any body, including binary, or copy it as code in 13 languages, including cURL, Python, Go, Java, C#, Swift and Rust.
Variables and secrets
- Variables done properly
- Secret variables in your OS keychain, plus global, collection, folder and request scopes, dynamic variables and prompts.
- Secret managers
- Pull values from Vault, AWS, Azure, Google Cloud, 1Password, Bitwarden or KeePassXC at send time.
Test and automate
- A runner built for CI
- CSV and JSON data, parallel runs, HTML and JUnit reports, and a CLI that exits non-zero on failure.
- Mock server
- Serve saved examples or an OpenAPI spec locally, with rules and a live request log.
Your data and tools
- A real Git panel
- Diff, commit, push, branches, stash and conflict resolution, in the desktop app.
- Plain files
- Nested collections, tabs and history, kept as plain YAML files in a folder or in app storage.
- Import and export
- Import Postman, OpenAPI, Insomnia, HAR, WSDL, Bruno collections, .http files and curl commands. Export to Postman, OpenAPI, Markdown, .http files or a backup.
- Agent-ready, and in the browser
- An MCP server with secret redaction and a host allowlist, and a web version with nothing to install.
- AI features, bring your own key
- Off by default, and hidden while off. Bring your own key for Anthropic, OpenAI, Gemini, OpenRouter, Ollama, LM Studio or any compatible URL. Keys stay on your device, in the OS keychain on desktop, and each request is previewed with secrets masked unless you turn the preview off.
From their public pricing and docs, October 2026. Moving from Bruno or Insomnia? Read [Coming from Bruno](https://gostman.com/docs/coming-from-bruno) or [Coming from Insomnia](https://gostman.com/docs/coming-from-insomnia).
- Included: Included
- Partial: Partial
- Not included: Not included
| Gostman, Postman, Bruno and Insomnia compared feature by feature. | ||||
|---|---|---|---|---|
| Feature | Gostman | Postman | Bruno | Insomnia |
| --- | --- | --- | --- | --- |
| Price | GostmanIncluded: Free. MIT licence. | PostmanPartial: Free plan; paid from $9 a month. | BrunoPartial: Free plan; Pro $6, Ultimate $11 a month. | InsomniaPartial: Free plan; Pro $12, Enterprise $45 a month. |
| Git push, data files, vaults | GostmanIncluded: All free. | PostmanPartial: Shared Vault from Solo; vault integrations on Enterprise. | BrunoPartial: Git push and data files on Pro; secret managers on Ultimate. | InsomniaPartial: Git Sync free for up to 3 users; vaults on Enterprise. |
| Share without Git | GostmanIncluded: Encrypted link or file. | PostmanPartial: On the Team plan. | BrunoPartial: Export a file. | InsomniaPartial: Cloud sync with an account, or export a file. |
| Load testing | GostmanIncluded: Built in. | PostmanIncluded: Local runs free. | BrunoNot included: Not documented. | InsomniaNot included: Not documented. |
| Socket.IO, MQTT, MCP | GostmanIncluded: All three. | PostmanIncluded: All three. | BrunoNot included: Not documented. | InsomniaPartial: Socket.IO and MCP. |
| Web version | GostmanIncluded: No account needed. | PostmanPartial: Needs an account. | BrunoNot included: None. | InsomniaNot included: None. |
| CLI for CI | GostmanIncluded: One binary. | PostmanIncluded: Postman CLI. | BrunoIncluded: Node.js package or Docker image. | InsomniaIncluded: Inso CLI. |
| VS Code extension | GostmanNot included: No. | PostmanIncluded: Yes. | BrunoIncluded: Yes. | InsomniaNot included: Not documented. |
Something else? Ask on GitHub.
Is Gostman free? #
Yes. Gostman is open source under the MIT licence. Every feature is in the download, with no account, no licence key and no seat count.
Will Gostman add a paid tier? #
Gostman has no paid tier, no account and no licence key, and every feature is in the free download. It is released under the MIT licence, so the published code stays free to use, change and fork whatever happens to the project.
Where are my collections kept? #
On your machine. The desktop app keeps them in its data folder or in a folder of YAML files you choose, and the web version keeps them in your browser's storage. Nothing is synced to a Gostman server.
Does the web version send my requests through a server? #
Yes. Browsers cannot call any API directly, so the web version relays each request through a small proxy, which cannot reach localhost or private addresses. The desktop app sends requests from your own machine.
Can I bring my Postman or Bruno collections? #
Yes. Import Postman, Bruno (.bru files or the YAML format), Insomnia, OpenAPI, HAR, .http files and curl. Common pm.* and bru.* script calls are rewritten to Gostman's script API. An import only adds data, and it lists any scripts it carries before you accept them.
How does a team share a collection? #
Open a folder and commit it with your code: one YAML file per request, reviewed in pull requests like any other change. For a quick hand-off, send an encrypted share link that is built in your window and never uploaded.
Can it run in CI? #
Yes. gostman run sends a folder with its scripts and assertions, prints what failed and exits non-zero, with text, JSON, JUnit and HTML reports. The repository includes a GitHub Action and a Dockerfile.
Download the desktop app for Windows, macOS or Linux, or open the web version now. There is nothing to sign up for.
Free and open source · macOS, Windows, and Linux · No account