v1.0 · ships May 2026

The API client your
platform team deserves.

Native binary. Local-first. Zero telemetry. MIT-licensed. A Bruno-class engine with enterprise polish — HTTP, GraphQL, gRPC, SOAP, native git, secret-manager bindings, and OAuth2 in the system browser.

Free & open source · MIT · zero telemetry · works offline
The Vegha desktop app with a Swagger Petstore OpenAPI collection open and a POST addPet request ready to send
First-class support for HTTP / REST GraphQL gRPC WebSocket SOAP & WSDL OpenAPI 3.x
What's inside

Everything Postman has.
None of the cloud.

Vegha runs entirely on your machine. Your collections live in plain-text files inside a folder you choose — commit them, branch them, review them like any other code.

Modern request execution

HTTP, GraphQL, gRPC (unary + all streaming modes), WebSocket, SOAP 1.1/1.2. Per-request retry, timeout, and a connection timeline.

HTTP/2gRPC-WebmTLS

Every auth flow you need

Bearer, Basic, Digest, OAuth1, OAuth2 (PKCE, client-credentials, password), AWS SigV4, NTLM, WSSE, mTLS — fourteen methods in all.

System browserPKCESigV4

Secret managers, first-class

Reference secrets inline with secret://. Azure Key Vault and AWS Secrets Manager today; Vault, GCP, Doppler, 1Password and Conjur on the roadmap.

Azure KVAWS SMresolved at send

Native git, three-pane diffs

Init, clone, branch, stage, commit, push, pull, stash. A real three-pane merge-conflict resolver. Backed by LibGit2Sharp — no external git required.

PATSSH keysOS keychain

Scripting that's actually safe

Pre-request and post-response scripts run in a sandboxed JS engine. Hard limits on memory, time, recursion. No filesystem, no process access. Ever.

Jintbru APITest runner

Plain-text collections

Human-readable Bruno-style .bru files in a folder. Diff them. Review them. Import from Bruno, Postman, Insomnia, or any OpenAPI 3.x / Swagger 2.0 spec.

.bruPostman v2Insomnia v5OpenAPI

Native binary, not Electron

Built on Avalonia + .NET 10. Boots in under a second. Stays responsive with thousands of requests open. Memory footprint a fraction of Electron rivals.

Avalonia 11.NET 10x64 + arm64

Headless CLI included

The same engine runs in your terminal and your CI. vegha run a collection, export results, fail your build on broken contracts.

JUnit XMLJSONGitHub Actions

Zero telemetry. Period.

No analytics. No crash reporting. No phone-home. The only outbound traffic is what you explicitly send. Audit the source on GitHub.

MITNo trackingOffline-capable
Native git

Your API specs are code. Treat them that way.

Branch a request the way you'd branch a feature. Open a PR on a payload change. Resolve merge conflicts with a real three-pane editor. The git engine is built in — there's no git binary to install.

  • Clone & push with PAT or SSH keys from your OS keychain.
  • Three-pane merge-conflict resolver with side-by-side diffs and live preview.
  • Stage and stash any change to any request, without leaving the app.
  • OpenAPI sync with drift detection: regenerate requests when the spec changes.
Vegha's git diff view — a side-by-side comparison of HEAD and the working tree for a .bru request file
Real OAuth, real browser

No embedded webview.
No silent secret leaks.

OAuth2 in Vegha opens your real browser — the one with your password manager, your MFA token, your SSO cookies. A loopback listener receives the callback. The token is cached locally, encrypted with your OS keystore.

  • PKCE by default for every public client.
  • SSO works because your browser is the one with the cookie.
  • Tokens live in Keychain / Credential Manager / Secret Service — never on disk in plaintext.
A Acme SSO via Okta

Vegha is requesting access to:

Your profile information
openid · profile · email
EU Services API · production
orders:write · customers:read
Continue as r.patel@acme.io
Cancel

Redirect to http://127.0.0.1:53241/callback
Vegha will receive the code and exchange it locally.

One engine, two surfaces

Your tests run the same
in your terminal as they do in your editor.

The desktop UI and the vegha CLI share one core engine. Run a collection from the GUI, pin the pass — then drop it into GitHub Actions with the exact same files and the exact same results.

  • JUnit XML output that drops into any CI that reads tests.
  • Environment switching at the command line — no rebuild, no rebake.
  • Importers built in — bring Postman, Insomnia or OpenAPI specs straight into a collection.
~/code/eu-services — vegha
# Run a folder of requests against staging
$ vegha run collections/login \
Resolving collection ………………………………
Resolving environment 'staging' ……
Resolving 7 secrets via Key Vault …
POST /auth/login/app1-test 137 ms
POST /auth/login/app1-stage 142 ms
POST /auth/login/app2-test 119 ms
POST /auth/login/app2-stage 128 ms
POST /auth/login/app3-stage 488 ms slow
POST /auth/login/app3-stage 134 ms
6 passed, 0 failed, 1 warning in 1.21 s
$
v1.0.0 · May 2026 · Free

Pick your platform

Every build ships with auto-update via Velopack. No account, no sign-in.

Linux

Ubuntu 22+, Fedora 38+, Arch · x86_64

Self-contained · runs on any modern distro
winget · winget install Vegha Microsoft Store Mac App Store All releases & checksums Source · GitHub
Ready when you are

Stop paying for the parts
you'd rather own.

Vegha is free, MIT-licensed, and built to last. Get the desktop app and the CLI — no account required.