Kurlo

Kurlo is a fast, local-first desktop API client for macOS, Windows and Linux. There are no accounts, no cloud sync and no telemetry: your collections live on your machine, or as human-readable YAML in your own Git repository.

Requests

• HTTP (all methods), GraphQL, WebSocket, Socket.IO, Server-Sent Events, gRPC and MCP requests
• Paste a cURL command into the URL field to import it
• Import from Postman, Insomnia, Bruno/OpenCollection, OpenAPI/Swagger (file or URL), HAR and cURL; export to Postman, OpenAPI and OpenCollection

Authentication

• Bearer, Basic, Digest, API Key, OAuth 2.0 (Client Credentials, Authorization Code with PKCE, Password, Device Code), AWS Signature v4 and client certificates (mTLS)

Scripting and testing

• Pre-request and test scripts in sandboxed JavaScript with a Postman-compatible pm.* API, so imported Postman scripts keep working
• Collection runner with data files, iterations, parallel runs and HTML reports
• Headless CLI (npx @kurlo/cli run) for CI with JUnit and JSON reporters

Workspaces

• Multiple workspaces and environments, a matrix view for editing variables across environments
• Git-backed YAML workspaces with conflict helpers and local-only secrets
• Request history, cookie jar with optional browser cookie sync, response examples and a local mock server

More

• Built-in MCP server so AI agents (Claude Code, Cursor, Codex and others) can run your saved requests, with secrets masked
• Browser request emulation: CORS preflight and Content Security Policy checks
• Code generation in 14 languages, response diff, timeline view, keyboard-first command palette, dark and light themes
• Local data encrypted at rest with AES-256-GCM; signed releases and a verified auto-updater

Kurlo is free and open source under the MIT licence.