v1.1.0 is out — now with 14 built-in themes

Local-first. Open source. Built for developers.

No account. No cloud sync. No telemetry. A powerful open-source API client that lives entirely on your machine.

macOS users:if Gatekeeper blocks the app, open System Settings → Privacy & Security and click “Open Anyway”.
No account requiredNo telemetry, everFree & open sourcemacOS + Windows
Curlex — API client interface
Privacy first

Your data never leaves your machine

Curlex was built from day one with a simple rule: your collections, credentials, and request history belong to you. No cloud accounts, no sync servers, no telemetry. Everything lives on disk, encrypted and under your control.

  • OS keychain integration — secrets stored by macOS Keychain or Windows Credential Store
  • Encrypted vault with lock/unlock flow and optional key storage
  • Zero outbound connections except the requests you explicitly send
  • Works fully offline — no internet required after install
KeychainVaultCloudServerZero telemetry — verified
Zero telemetry — verified
Organised

Keep every project perfectly structured

Build deep collection trees with nested folders, drag-and-drop reordering, and collection-level auth that cascades to every request inside. Switch between independent workspaces in one click.

  • Unlimited nesting — folders inside folders, collections inside workspaces
  • Collection-level auth and variables inherited by all child requests
  • Drag-and-drop reorder, duplicate, and bulk move requests
  • Full-text search across every request name in the sidebar
CollectionsSearch requests...My WorkspaceProduction APIBearerAuthPOSTLoginGETRefresh TokenDELLogoutStaging APIAPI KeyGETList UsersPUTUpdate UserDrag to reorderMove here
GitHub Sync built-in
Automate

Script everything, run anything

Write pre-request and test scripts in plain JavaScript with a Postman-compatible API. Chain requests, set variables dynamically, assert response shapes — then run entire collections automatically with the built-in runner.

  • Postman-compatible fc scripting API — migrate without rewriting scripts
  • Pre-request scripts to set headers, tokens, or transform body before sending
  • Test scripts with assertion helpers for status, body, and headers
  • Collection Runner with retry logic, stop-on-failure, and JUnit/HTML/PDF export
pre-request.js12345678consttoken=pm.environment.get( 'auth_token');//set auth headerpm.request.headers .add({ key:'Authorization', value:`Bearer ${token}`Collection Runner12 / 16 requests75%Status 200 — response time < 200msBody contains 'access_token'GET/auth/token200POST/users201GET/users/:id200DELETE/session204
Postman-compatible scripts
GraphQL

First-class GraphQL support

Not an afterthought — Curlex ships a dedicated GraphQL mode with schema introspection, live autocompletion against your schema, and real-time WebSocket subscription streaming. All in the same client you use for REST.

  • Schema introspection with 5-minute in-memory cache
  • Autocompletion and inline validation against the live schema
  • Schema explorer and docs panel — browse types without leaving the app
  • WebSocket subscription support with real-time streaming results
QueryUserPostCommentProfileTagMediaSCHEMAQueryUserPostCommentProfileTagMediaAutocompleteidID!nameString!emailStringposts[Post]createdAtDateWebSocket Livestreaming...
WebSocket subscriptions
All features

Everything you need, nothing you don't

Curlex ships every feature on day one. No paid tiers, no feature gates, no upsells — ever.

Secure Credentials
Secrets stored in the OS keychain. Vault encryption with lock/unlock. No data leaves your machine.
Privacy-first
Collections & Folders
Nested folders with drag-and-drop. Collection-level auth and variables cascade to every request inside.
Environments & Variables
Switch dev/staging/prod with one click. Secret masking, variable inspector, and built-in dynamic variables — $guid, $timestamp, $randomInt and more.
Scripts & Automation
Pre-request and test scripts in JavaScript. Postman-compatible fc API for programmatic assertions.
Postman-compatible
GitHub Sync
Auto-backup collections and environments to a private GitHub repo on your chosen schedule.
GraphQL
Dedicated GraphQL mode with schema introspection, autocompletion, and WebSocket subscriptions.
Import & Export
Import cURL, OpenAPI, Postman, YAML. Export JSON, OpenAPI, or PDF. One-command snippet generation.
Collection Runner
Batch-run entire collections. Retry logic, stop-on-failure, PDF/HTML/JUnit export of results.
OAuth 2.0
Full OAuth 2.0 — Authorization Code, PKCE, Client Credentials, Password, and Implicit flows.
FAQ

Questions & answers

Everything you need to know before making the switch.

Completely free — no catch. Curlex is open source and will always be free. There are no paid plans, no premium tiers, and no features locked behind a paywall. Everything ships on day one.

Never. All your collections, environments, credentials, and request history live entirely on your local machine. Curlex contains zero telemetry, zero analytics, and makes no outbound network calls on your behalf. The only connections it opens are the ones you explicitly trigger.

Yes — import your Postman collections (v2.1 format) directly. Environments, variables, pre-request scripts, and test scripts using the fc API are all compatible. The import wizard handles the conversion automatically.

Curlex has built-in GitHub Sync that backs up your collections and environments to a private GitHub repository on a schedule you control. You can also export manually to JSON or OpenAPI at any time.

Yes. Curlex has a dedicated GraphQL mode with schema introspection, autocompletion against the live schema, and real-time WebSocket subscription support — all in the same client you use for REST.

macOS 12 Monterey or later (Apple Silicon and Intel) and Windows 10 or later (64-bit). Linux support is on the roadmap.