Envelope
Behemehal
A local HTTP client. No cloud, no account, free forever.
Files
Commit your collections
7
Variable layers
Secrets stay local
0
Accounts
3
Platforms
Screenshots
About this app
Envelope is a program on your computer. No cloud, no account, nothing to sign in to, and free forever.
It keeps the request editor you already know and fixes the parts that never worked. Every variable shows which layer it came from, so “why is this going to the wrong server” is a question you answer by looking rather than by guessing.
An endpoint can become a small app: a few lines of script give it a form, and whoever only needs the button never has to see the request behind it.
Your credentials are encrypted on your machine and never written anywhere you would share.
Yours, on your machine
- Free forever — no tier, no seat, no licence to renew
- No account. Nothing to sign in to, and nothing that stops working when you do not
- No cloud. A collection is a folder of plain JSON files in a directory you chose
- Commit a collection with the code it tests, review it in a pull request, clone it on another machine
- The only address it reaches on its own is ours, to ask whether there is a newer version — and that can be switched off
See where a request is actually going
- Seven layers of variables, each chip tracing back to the one that won
- A URL preview that is the bytes on the wire — the frontend never interpolates anything itself
- Collection defaults for the collections with one server, environments for the ones with more
- Production marks the window, and a mutating send against it asks first
- A name with no value goes out as written and is reported, never quietly replaced with nothing
Credentials that stay out of your repo
- A secret’s value never reaches a collection file; the file carries only the flag
- Values are encrypted on your machine, sealed so a copied folder opens to nothing
- One screen lists every secret the app holds, by name — and reads none of them to draw it
- History keeps the masked request beside the response
Endpoints as small apps
- A few lines of script turn a request into a form: pickers, sliders, file inputs, a button
- A handler can send, branch on the answer and send again, then raise a table of what came back
- Scripts run in a Rust sandbox, not in the page
- Publish one as a mini app for the people who only need the button
More than one request at a time
- Scenarios: a named list of requests that already exist, with state carried between them
- Each step sends exactly the way the Send button does — same auth, same hooks, same history
- The timeline runs down the rows you arranged rather than opening a report beside them
Bring what you already have
- Import an OpenAPI or Swagger description, from a file or straight from a URL
- Import a Postman collection; pm.* scripts are preserved, shown, and not run until you say so
- Paste a curl command into the URL bar and it fills the request in; copy any request back out as one
Data safety
Safety starts with understanding how developers collect and share your data. Here is what this app does.
Nothing is sent anywhere
No account, no telemetry, no crash reporting. Besides the servers you point it at, Envelope reaches exactly one address: behemehal.org, to ask whether there is a newer version. That request carries no identifier and says nothing about you, your machine or your APIs, and it can be switched off.
Credentials stay on your machine
A secret’s value is never written into a collection file, so the folder you commit carries none of them. The values live encrypted in the app’s own data folder, sealed to this computer — a backup or a synced copy of that folder opens to nothing.
Your collections are your files
Plain JSON in a folder you choose, readable and diffable. The app keeps a local cache of history beside them; deleting it loses the history and nothing else.
Scripts are shown before they run
A collection can carry JavaScript. Imported scripts arrive flagged and are not executed until you have read them and said so, and everything that does run is sandboxed away from the page.
App info
- Availability
- In development — not yet released
- Requires
- macOS, Windows or Linux
- Imports
- OpenAPI 3.x, Swagger 2.0, Postman, curl
- Category
- Developer tools
- Offered by
- Behemehal
- Built with
- Tauri 2, Rust, React
- In-app purchases
- None
- Ads
- None
- Languages
- English
Content rating
verified_user Everyone
A developer tool. No accounts, no advertising, no purchases, and nothing that renders untrusted content with any privilege.
Support
Found a bug, or stuck on a level? Write to us — a real person reads it.
mail [email protected]