For years, development teams relied on API desktop clients to test endpoints, craft requests, and debug web services. However, recent trends have seen traditional API clients force user data, sensitive environment secrets, and internal endpoints into closed proprietary cloud ecosystems—creating severe security compliance risks and vendor lock-in.
CAPost is our answer: a 100% sovereign, local-first API studio and workbench engineered for developers who demand the highest standard of data privacy and native execution speed.
OpenCollection YAML: Git-Native Collections
Instead of proprietary binary formats or closed databases, CAPost stores entire request hierarchies, folder structures, pre-request scripts, and test assertions in OpenCollection YAML format:
- Human-readable, plain-text YAML files designed for standard Git workflows and conflict-free code reviews.
- Compatible with the Bruno open specification, ensuring portability across modern developer toolchains.
- CI/CD friendly: run your collections directly inside GitHub Actions or GitLab CI using the lightweight
capost-clibinary.
Zero-Knowledge Secret Scrubber (SQLCipher)
Your production API tokens, OAuth2 client secrets, database connection strings, and private keys must never be committed to Git repositories. CAPost enforces a strict separation:
All sensitive credentials are stored inside a local SQLCipher database encrypted with Argon2id. During request dispatch, CAPost injects secrets dynamically from the local vault into request headers in RAM, without ever writing plaintext secrets to disk or sync logs.
Embedded QuickJS Scripting Engine
Unlike clients that depend on external Node.js runtimes or heavy V8 instances, CAPost embeds the lightweight, standards-compliant QuickJS JavaScript runtime directly into the native binary. Write pre-request scripts, transform payloads, and execute complex assertion suites with sub-millisecond execution times and zero runtime dependencies.
Automated Assertion Generator
Writing comprehensive test assertions for complex JSON response payloads can be tedious. CAPost features an intelligent assertion generator that analyzes live HTTP responses and automatically synthesizes deep JSON-schema validation tests, status code checks, and response latency assertions in seconds.