mrkeyoor.com_
Sat 31 Oct 21:52 UTC
Dev Toolsevaluationupdated 12 Oct 2026

hoppscotch review

Hoppscotch is an API client for sending requests, inspecting responses, and saving repeatable checks in collections. It gives developers a shared place to debug web services instead of passing around curl commands and copied headers.

+29stars / 7d
Verdict

Our Hoppscotch run passed 2,054 tests with 0 failures after a 2,620-package install, but the harness skipped the build, leaving deployment unverified. Use it for shared API exploration when its browser request route and edition fit your team. Choose Bruno for Git-centered collections, and check the Enterprise boundary before committing to SSO.

We ran it

Lab card: what happened when we ran hoppscotchScreenshot of hoppscotch (hoppscotch.io)
Install✓ · 119s2620 packages · 1366 MB
Buildn/ano build script
Tests✓ · 718s2054 passed · 0 failed · 2 skipped of 2056 (vitest)
Repo2492 files~352,157 lines of source · 23 MB · 4 CI workflows

Answers from our run

Does hoppscotch build from source?

Dependencies installed in 119 seconds (2620 packages), and the project has no separate build step. We cloned commit 63273f8 into a clean Debian container with 3 CPUs and no project-specific setup.

Do hoppscotch's tests pass?

Yes. The project's own test command finished in 718 seconds and reported 2054 passed, 0 failed, 2 skipped (vitest).

Who should not use hoppscotch?

Teams barred from installing agents or browser extensions when their endpoints block browser requests: the documented alternatives require an approved proxy or a change to the access path.

What are the alternatives to hoppscotch?

Bruno, Insomnia, Hurl. Our Hoppscotch run passed 2,054 tests with 0 failures after a 2,620-package install, but the harness skipped the build, leaving deployment unverified.

Setup3/5Install passed, but deployment needs Postgres and configured sign-in
Docs4/5Clear feature and interceptor guides, with separate hosting instructions
Community5/5October 12 push and current issue and PR activity
Maturity4/52,054 passing tests, with build and deployment still unverified

Discussed on

  1. hnHoppscotch: Open-source alternative to Postman668 points
  2. hnHoppscotch: Open source alternative to Postman / Insomnia177 points
  3. hnWhen 'open core' projects reject contributions for competing with the EE175 points
  4. hnHoppscotch – A free, fast API request builder86 points
  5. hnHoppscotch desktop application73 points

Who it’s for

API developers who want reusable HTTP and GraphQL requests with environments and scripts.
Teams that want shared collections and workspaces, with a choice of hosted or self-hosted use.
Contributors willing to work in a pnpm workspace monorepo with a substantial dependency tree.

Who it’s NOT for

Teams barred from installing agents or browser extensions when their endpoints block browser requests: the documented alternatives require an approved proxy or a change to the access path.
Organizations requiring Single Sign-On in Community Edition: the README marks SSO as an Enterprise feature.
Developers seeking Git-managed request files as the main collaboration model: Hoppscotch emphasizes synced workspaces and collection exports, while Bruno stores collections directly on disk.
Teams expecting self-hosted collaboration without database or identity administration: the official prerequisites require Postgres and authentication configuration.

Setup reality

Our run at commit 63273f8 installed 2,620 packages in 119 seconds and occupied 1,366 MB. Vitest passed in 718 seconds with 2,054 passed, 0 failed, and 2 skipped of 2,056 tests. The harness found no build script or target, so it skipped the build. We ran this on October 11, 2026, in a fresh unprivileged Debian container with 3 CPUs, 8 GB RAM, image lab-node:22, and no secrets.

Self-hosted collaboration needs Postgres, service URLs, and configured authentication. Third-party sign-in needs provider credentials and callback URLs. Email delivery is optional, but invitations need SMTP. The prerequisites recommend HTTPS because authentication uses secure cookies.

Browser requests can hit cross-origin restrictions, requiring the local Agent, browser extension, or a proxy. Self-hosted domains must be allowed by the extension. Our scan found a Compose file and 4 CI workflows, but no Dockerfile or dedicated tests directory. The passing suite doesn't verify a working deployment.

A saved request is the reason to choose Hoppscotch

Import a curl request into Hoppscotch, replace its hardcoded URL with an environment variable, and save it to a shared collection. That's the useful step beyond a disposable terminal command: the next developer can reuse the request without rebuilding its headers and body. The README documents curl import, environments, shared collections, and scripts that run before or after a request. Those features suit daily API debugging.

The small-looking interface sits on a substantial codebase. Our checkout contained 2,492 files and roughly 352,157 source lines, occupying 23 MB before installation. That matters if you're choosing something to fork or maintain internally. Hoppscotch covers GraphQL and streaming protocols alongside HTTP, so adopting its interface is a different commitment from taking responsibility for the whole workspace monorepo. I'd try the published client before choosing a source fork.

What happened when we ran it

Our Hoppscotch run installed 2,620 packages in 119 seconds and used 1,366 MB on disk. We cloned commit 63273f8 on October 11, 2026, into a fresh Debian sandbox with 3 CPUs and 8 GB of RAM, using the lab-node:22 image. The container had no secrets or elevated privileges. Installation succeeded, giving contributors a concrete indication that dependency setup worked in that environment.

Vitest completed in 718 seconds with 2,054 passed, 0 failed, and 2 skipped out of 2,056 tests. The build step was skipped because the harness found no build script or target. That's an unverified build, and it doesn't establish that Hoppscotch cannot be built. A green suite supports confidence in the exercised code. It gives us no measurement of request latency, desktop startup, or a functioning deployment.

Browser restrictions can require a local agent or proxy

The interceptor documentation explains how Hoppscotch reaches APIs that browser cross-origin rules would block. Its recommended Agent sends requests through your local machine and network configuration. A browser extension is another option, while Proxyscotch forwards traffic through a proxy. You choose an execution route as well as a request editor. For an internal API, that route determines which machine must be able to reach it.

Our 2,054 passing tests don't establish that your laptop, VPN, or proxy can reach a particular endpoint. If company policy forbids extensions and local agents, check whether your API permits browser requests or whether an approved proxy is available. The extension also needs your self-hosted domain added to its allowed origins. I'd settle that access question before moving a team's collections into the tool.

Self-hosted collaboration needs Postgres and working sign-in

Community Edition stores its data in Postgres. The prerequisites also describe authentication-provider configuration, including client credentials and callback URLs for third-party sign-in. SMTP is optional, but email invitations need it. HTTPS is recommended because authentication uses secure cookies. The README's short instruction to enter an endpoint and press Send describes using the client. Running your own team service brings database and identity administration with it.

Our scan found 4 CI workflow files and a Compose file, with no Dockerfile or dedicated tests directory detected. Vitest still ran successfully, so the directory finding plainly doesn't mean tests are absent. The published self-hosting instructions use containers, but our sandbox result doesn't verify that container deployment. Keep database backups, authentication callbacks, and an actual request from a teammate's machine on your adoption checklist.

Community Edition doesn't include every enterprise feature

The README marks Single Sign-On as an Enterprise feature. The September release also assigns its AI Assistant to Enterprise Self-Host and introduces an Enterprise Cloud tier with identity management and audit logs. A team requiring those capabilities should resolve edition boundaries before selecting Community Edition. The MIT license on this repository doesn't make every feature advertised across the product family part of the community package.

The 1,366 MB installed footprint is another boundary worth keeping straight. It describes our contributor environment, rather than a measured production image or browser download. You shouldn't reject the web client because of that figure, but a company maintaining a customized fork will carry the dependency tree we encountered. Using the maintained distribution is the easier choice when the existing collection and workspace behavior already fits.

Bruno suits file-based collections, and Hurl suits terminal workflows

Bruno stores collections as plain-text files on your filesystem and explicitly rejects cloud sync. Pick it when requests should travel through Git beside application code. Insomnia is worth comparing when gRPC or a native OpenAPI editor matters. Its README documents Local Vault, Git Sync, and Cloud Sync, along with account and paid-feature boundaries you should inspect before adopting it.

Hurl runs HTTP requests and assertions from text files. I'd choose it for a terminal workflow whose output belongs in CI, rather than making shared visual workspaces the center of the job. Hoppscotch's 2,620-package install makes more sense when you want to contribute to that broader application. It would be a lot of repository to adopt merely to preserve a few scripted HTTP checks.

October activity supports adoption, with desktop reports still open

GitHub recorded a push on October 12, 2026, with 80,593 stars and 852 open issues and PRs. Recent activity included translation work and an HTML-preview fix. Issue 6716 reports excessive zoom in the Linux desktop AppImage. That's a user's report about the desktop client, rather than something our sandbox reproduced. The push and issue activity show a maintained project, while leaving platform-specific behavior worth checking.

I'd choose Hoppscotch for shared API exploration once its request route and edition fit the team. Our 718-second test run gives contributors useful evidence, but the skipped build leaves deployment unresolved. Before migrating collections, ask a teammate to open one saved request, sign in through your chosen provider, and reach the endpoint from their own machine. That small trial answers the question the passing suite couldn't.

Alternatives

ProjectWhat it isPick it when
Bruno gh↗An offline API client that stores collections as plain-text files.pick this instead when you want requests reviewed and shared through Git alongside application code.
Insomnia gh↗A desktop API client with gRPC, an OpenAPI editor, and local, Git, or cloud storage.pick this instead when gRPC or OpenAPI editing matters enough to accept its account and edition boundaries.
HurlA command-line tool for HTTP requests and assertions written in text files.pick this instead when terminal execution and CI checks matter more than shared visual workspaces.

Sources

  1. Hoppscotch README
  2. Hoppscotch repository facts
  3. Community Edition prerequisites
  4. Request interceptors
  5. Hoppscotch 2026.9.0 release
  6. Linux desktop zoom report
  7. Bruno README
  8. Insomnia README

More dev tools reviews

cloc · rufus · linux-insides · cat-catch · date-fns · okhttp · the whole board →