Mockoon

Privacy-first and more powerful: Mockoon v9.7.0 is here! 🚀 We are thrilled to announce the release of Mockoon v9.7.0, bringing significant improvements to your API mocking workflow, security, and developer experience. What's new in this release? 🔒 Goodbye Telemetry: As we committed to last month, we've completely removed telemetry from our desktop and web applications. Mockoon now collects zero usage data, because we believe in respecting your privacy as much as we value open-source. ⚡ Multi-select mode: Managing your mocks just got faster. You can now select multiple routes, data buckets, or callbacks (using ctrl/cmd + click or shift + click) to perform bulk actions like deletion or duplication. 🛡️ Admin API Hardening: Security is a top priority. We’ve added mandatory secure token authentication for the Admin API, disabled CORS by default, and implemented improved data redaction for transaction logs. 📊 Better Observability: We've introduced new metadata headers (X-Mockoon-Route-Uuid, etc.) to help you quickly identify which route and response served your request. ...and much more, including performance improvements and dependency updates. As always, a huge shoutout to our community for their contributions and feedback. Check out the full release notes and update today: https://lnkd.in/diu52man #APIMocking #OpenSource #DevTools #PrivacyFirst #APIdevelopment

In v9.6.0, we've introduced some new templating helpers and improvements: - Simplified {{oneOf}} syntax: {{oneOf 'pending' 'success' 'failed'}}. Newly imported OpenAPI (OAS) specs will automatically leverage this cleaner format. - New string manipulation helpers: use the new {{replace}} helper to swap the first occurrence of a string, or {{replaceAll}} to change every instance instantly. - new URL-Safe Base64 encodings: the new {{base64url}} and {{base64urlDecode}} helpers can be used to safely encode/decode payload strings without trailing padding bugs breaking your URLs. More details in our changelog: https://lnkd.in/dZSBw-F5 #OpenSource #API

Securing the Software Supply Chain: Say Hello to NPM Trusted Publishing 🔐 In open-source, code security doesn't stop when a pull request is merged. How that code gets packaged and published to registry ecosystems is just as critical. Traditional publishing relies on long-lived NPM tokens stored in CI/CD environments, a primary target for supply chain attacks. As part of our security hardening via the GitHub Secure Open Source Fund, we have officially moved Mockoon over to NPM Trusted Publishing. What this means under the hood: Instead of using static, stealable API tokens, our publishing workflow now uses short-lived OpenID Connect (OIDC) tokens issued dynamically by GitHub Actions. For the enterprise teams and developers who rely on Mockoon's packages every day, this standard significantly slashes the risk of malicious dependency injections. https://lnkd.in/dCj8Zva4 #OpenSource #CyberSecurity #SupplyChainSecurity #DevSecOps #AppSec

Enforcing DevSecOps: Automated Scanning & Vulnerability Tracking 🛡️ As part of our commitment to maintaining a highly secure open-source ecosystem, we have standardized and enforced continuous security scanning across all Mockoon repositories. For enterprise teams running Mockoon, this automation ensures that every line of code and every upstream dependency is verified for safety before it ever reaches a release. Here is how we've automated our repository security: - CodeQL (static code analysis): We verified and fine-tuned GitHub's advanced code scanning tool across all repositories. CodeQL automatically analyzes our codebase for coding vulnerabilities and quality regressions on every single pull request. - Dependabot (supply chain security): Dependabot is fully active and configured to monitor our project dependencies. It automatically flags vulnerable packages and generates immediate pull requests to patch them, keeping our stack secure. - Secret Scanning: We enabled automated secret scanning across our entire organization. This continuously monitors our code and commit histories to instantly detect and block any accidental exposure of API keys, tokens, or sensitive credentials. These automated guardrails run silently in the background of our development lifecycle, ensuring that Mockoon remains secure, compliant, and enterprise-ready by default. Read the details on our blog: https://lnkd.in/dCj8Zva4 #OpenSource #CyberSecurity #CodeQL #Dependabot #DevSecOps #AppSec

We are pleased to announce that rapid proxy has joined as a sponsor to support our open-source project. Corporate sponsorships are essential for keeping our core tool independent, free, and sustainable for the hundreds of thousands of developers who rely on it daily. Thank you to the Rapid Proxy team for supporting our roadmap and investing back into the open-source ecosystem. ➡️ Learn more about Rapid Proxy here: https://www.rapidproxy.io/ #OpenSource #Sustainability #OSS #DevTools

For teams running Mockoon in enterprise or highly regulated environments, pipeline security is critical. We maintain strict workflow protections across our GitHub repositories to prevent supply chain attacks. Here is how our build process is locked down: - Least Privilege Access: We restrict workflow permissions at the organization and repository levels. GitHub Actions only have the absolute minimum rights required to run. - Pinned Runner Versions: We pin GitHub Actions to specific commit hashes rather than generic version tags. This ensures upstream dependencies cannot silently inject malicious code during an update. - Pipeline Integrity: These protections ensure that every desktop, web, and CLI artifact we distribute is secure and tamper-proof. Read the details on our blog: https://lnkd.in/dCj8Zva4 #OpenSource #CyberSecurity #SupplyChainSecurity #GitHub #Mockoon

New Sponsor Announcement: Welcome Talordata 🤝 We are pleased to announce that TalorData has joined as a sponsor to support our open-source project. Corporate sponsorships are essential for keeping our core tool independent, free, and sustainable for the hundreds of thousands of developers who rely on it daily. Thank you to the TalorData team for supporting our roadmap and investing back into the open-source ecosystem. ➡️ Learn more about TaylorData here: https://lnkd.in/dj6hZw3h #OpenSource #Sustainability #OSS #DevTools

Maintainers, have you checked out the 2026 Partner Pack? 👀 These exclusive discounts, freebies, and perks are waiting for you. 🎁 https://lnkd.in/gMjWUGrP

Mockoon has a new sponsor: Welcome CodeRabbit 🤝 We are pleased to announce that CodeRabbit has joined as a sponsor to support the Mockoon open-source project. Maintaining a free, privacy-first tool for thousands of developers requires ongoing resources. Contributions like this from the industry are essential for keeping the open-source core sustainable, stable, and secure for everyone. CodeRabbit provides AI-driven pull request reviews, and their sponsorship directly helps us maintain our independent roadmap. Thank you to the CodeRabbit team for supporting the project and investing back into the developer ecosystem! ➡️ Learn more about CodeRabbit open-source funding here: https://lnkd.in/enyVpSY6 Santosh Yadav Erik Thorelli #OpenSource #Sustainability #OSS #DevTools

While many companies are busy enabling telemetry by default or using your data to train their AI models, Mockoon is going the opposite direction. Last week, we removed the last piece of telemetry from our apps. Mockoon is now 100% telemetry and tracking-free. ✅ No API call (unless you use our cloud). ✅ No tracking pixel or analytics. ✅ No AI Training on your data You need tools you can trust, and great software shouldn't come at the cost of your privacy. More on our blog: https://lnkd.in/dYgZ5fT2 #Privacy #OpenSource #DevTools