v0.1.0 • macOS & Linux native • Zero telemetry

Native, local-first API client in Rust.

Name: Blitz
Author: h3ma209

Sub-150ms boot. ~10MB RAM runner. Uses your existing Git repos for team sync and your OS Keychain for secrets — without forced cloud accounts or Electron bloat.

Download for macOS (.dmg) View on GitHub

cargo install blitz

Boot Time

< 150ms

native machine code

CLI Footprint

~10.2 MB RSS

vs 800MB+ Postman

Team Sync

Any Git Remote

GitHub / GitLab / self-hosted

Secrets Storage

OS Keychain

never committed to git

Blitz Desktop • Production Release

Dioxus Native

Blitz Desktop App running natively on macOS

Genuine screenshot captured from target/release/blitz on macOS.

COMPARISON

Why switch to Blitz

How Blitz addresses specific constraints across Postman, Bruno, Insomnia, and Yaak.

vs Postman No Cloud Accounts

Offline-First & Zero Accounts

✗ Requires cloud sign-in and syncs workspace data to external servers by default.
✓ 100% offline-first. Zero telemetry, no account required, and imports Postman v2.1 collections.
✓ ~10.2 MB RSS CLI runner vs 800MB–1.5GB Electron footprint.

File → Import Collection (.json)

vs Bruno Native Binary

Compiled Rust Core

✗ Electron UI wrapper and proprietary .bru file specification.
✓ Pure Rust + Dioxus: Compiled to native binary without node runtime overhead.
✓ Visual 3-way Git merge resolver built directly into the UI for branch conflicts.

Open standard formats (JSON/Postman/OpenAPI)

vs Insomnia No Paywalls

Free Git Team Sync

✗ Restricts cloud sync and local project features behind subscription tiers.
✓ Git sync uses your own remote. Push to any GitHub, GitLab, or self-hosted Git server.
✓ Built-in support for 8 protocols including MQTT, SSE, and MCP.

Zero per-seat invoices

vs Yaak Permissive Open Source

Zero Commercial Licensing

✗ Uses web view UI (React/Tauri) with commercial Fair-Core / SSPL licensing.
✓ 100% open source under Apache-2.0. Full code inspection and local compilation.
✓ Includes built-in Traffic Proxy, Local Mock Server, and Swagger Export.

Complete local ownership

INTERFACE TOUR

Core workflow modules

Select a module below to inspect its behavior and layout.

Blitz Vault & Environment Variables

AES-256 Keychain Enforced

🛡️

4-Tier Zero-Leak Variable Architecture

Vault keys live in native OS Keychain. Never stored in collection JSON, never committed to Git.

Resolution: Vault > Env > Col > Global

Variable Name

Value (Encrypted at Rest)

Scope

Git Commit Safety

vault:stripe_secret

sk_live_••••••••••••••••39a1

Vault (OS)

✓ Excluded from Git

vault:jwt_token

eyJhbGciOi••••••••••••••••7F9a

Vault (OS)

✓ Excluded from Git

endpoint_user

https://api.v2.internal.corp

Environment

Git Branch Synced

// How to use vault secrets in Request Header or Auth Tab:

Authorization: Bearer {{vault:jwt_token}}

→ Blitz resolves this variable directly from system Keychain in 0.2ms at request time. Zero plain text saved to disk.

Blitz Auto-Assertion Test Engine

Zero Boilerplate Tests

One Click Inferred Test Generation

Blitz inspects the response status, headers, latency SLA, and JSON keys to generate production test assertions automatically.

INCOMING RESPONSE

200 OK 18ms

{
  "status": "success",
  "data": {
    "user_id": 4821,
    "email": "dev@blitz.rs",
    "roles": ["admin", "tester"],
    "created_at": "2026-10-19T18:00:00Z"
  }
}

GENERATED TEST SCRIPT (pm.test) ✓ 4 Tests Ready

// 1. Status Code Assertion
pm.test("Status code is 200", () => {
  pm.response.to.have.status(200);
});

// 2. Latency Threshold
pm.test("Response time is under 150ms", () => {
  pm.expect(pm.response.responseTime).to.be.below(150);
});

// 3. Schema & Type Validations
pm.test("Response payload contains user_id", () => {
  const json = pm.response.json();
  pm.expect(json.status).to.eql("success");
  pm.expect(json.data.user_id).to.be.a("number");
  pm.expect(json.data.roles).to.include("admin");
});

Blitz Visual 3-Way Git Merge Conflict Resolver

⚔️ 1 Merge Conflict

⚠️ Simultaneous Team Edit on /api/v2/orders

Both you and teammate @sarah modified headers and timeouts on branch env/production.

YOUR LOCAL CHANGES (HEAD) Saved 2m ago

{
  "name": "Create Order",
  "method": "POST",
  "url": "https://api.store.com/v2/orders",
  "timeout_ms": 3000,
  "headers": [
    { "key": "X-Client-App", "value": "ios-mobile" }
  ]
}

INCOMING REMOTE CHANGES (@sarah) commit 8bf3a1c

{
  "name": "Create Order",
  "method": "POST",
  "url": "https://api.store.com/v2/orders",
  "timeout_ms": 5000,
  "headers": [
    { "key": "X-Client-App", "value": "ios-mobile" },
    { "key": "X-Trace-Id", "value": "{{trace_id}}" }
  ]
}

Blitz Tools: Traffic Capture Proxy & Mock Server

Proxy :8080 Active Mock :3001 Active

Live Capture Proxy (127.0.0.1:8080)

iOS / Android / curl

POST /v1/charges

200 OK • 142ms

GET /v1/customer/cus_982

200 OK • 38ms

PUT /v1/subscriptions

204 No Content • 22ms

Captured calls automatically convert into replayable request items with complete headers and payloads.

⚡ Instant Local Mock Server (127.0.0.1:3001)

< 1ms Latency

GET /api/v1/users/:id Matched: "User Example"

Wildcard pattern matching with pre-saved example payloads.

POST /api/v1/auth/login Matched: "200 Success"

Stub responses for frontend testing before backend deployment.

Mock responses spin up locally in 10ms with zero Docker containers or external servers required.

DECENTRALIZED TEAM SYNC

Your Cloud Is Any Git Repository

No proprietary servers, no monthly per-seat subscription invoices. Blitz turns any Git repo—public, private, GitHub, GitLab, or self-hosted Gitea—into a seamless team cloud backend.

Plug In Any Git Remote

Point Blitz to any repo URL (HTTPS or SSH):

git@github.com:org/api-specs.git

Blitz clones it locally under {data_dir}/blitz/cloud/. Works with private repos via your existing SSH keys or gh auth login.

Environments = Git Branches

Each environment you create maps directly to a dedicated branch:

env/development
env/production
env/staging-us-east

Switching environments in the top bar checks out the corresponding Git branch and instantly reloads the workspace tree.

Save Local, Sync to Team

Two distinct actions give you full autonomy:

Save (⌘S): Commits changes locally to your local git clone. Never pushes automatically.

Sync: Pulls with rebase, integrates peer updates, and pushes upstream without force-pushing.

Interactive Architecture Flow

How Data Flows Across Machines

Decentralized & Encrypted

Engineer A (Workstation)

1. Edit collection in UI

2. ⌘S → Commit to local clone

3. Click "Sync" → Git Push

🔒 Secrets filtered via Keychain

Your Git Repository

GitHub • GitLab • Gitea • Bitbucket

├── collections/

├── environments/

└── branches: env/*

Engineer B (Teammate)

1. Click "Sync" → Git Pull

2. Auto rebase without conflicts

3. UI hot-reloads with updates

🛡 Local secrets remain untouched

How Private Repos & Team Members Work

Adding team members requires zero setup inside Blitz. You manage access exactly where you already do: in your Git provider.

▸ Invite via GitHub / GitLab / Bitbucket: Grant repository read or write access to your team member or contractors.
▸ Native Authentication: Blitz uses system git under the hood. It automatically uses your existing SSH keys, Git credential helpers, or gh token.
▸ Pull Requests & Reviews: Since every collection and environment is clean JSON in a Git repo, teams can open PRs, conduct peer reviews, and review diffs.

Zero Secret Leaks by Design

Cloud platforms frequently leak bearer tokens when shared across team workspaces. Blitz enforces strict isolation boundaries:

✓ Synced: Collections, endpoints, scripts, schema, public variables.

🔒 Redacted: Password values, private bearer tokens, secret:// refs.

🛡 Machine Only: Cookies, request history, vault.json, OS Keychain keys.

MULTI-PROTOCOL ENGINE

One Unified Interface. 8 Modern Protocols.

Stop switching between five different niche tools. Blitz supports every protocol in your distributed architecture with equal speed.

REST & HTTP/1.1+2

Automated Decompression

Brotli, Gzip, Deflate, multipart form-data, and chunked transfer decoding.

GraphQL & GraphQL-WS

Query & Subscription

Syntax highlighted query editor, variable interpolation, and live subscription streams.

WebSockets

tokio-tungstenite Core

Bi-directional frame stream, heartbeat handling, and real-time inspector.

Server-Sent Events

Live Event Stream

Listen to text/event-stream feeds with custom ID tracking and reconnect stubs.

Socket.IO v4

Event Emitter & Listener

Connect to modern Socket.IO clusters, send custom payloads, and capture responses.

gRPC Unary

JSON-to-Protobuf Stubs

Fast unary gRPC invocation with structured payloads and metadata reflection.

MQTT v3.1.1 / 5.0

Publish & Subscribe

Model Context Protocol

AI Agent Tool Testing

Inspect and invoke MCP tools via STDIO JSON-RPC for Claude and LLM agent tooling.

DEVSECOPS, AUTOMATION & AI AGENTS

Built-in CLI Runner & MCP Agent Server.

Never install newman or heavyweight Node packages again. Blitz ships with its own single-binary CLI runner for CI/CD pipelines, plus a native Model Context Protocol (MCP) server for AI agents.

Terminal — blitz run

Exit Code: 0 (PASS)

$ blitz run api-tests.json --env staging.json

⚡ Blitz Collection Runner v1.0

Loaded collection: Authentication & Billing API (14 requests)

Active environment: Staging Cluster (US-East)

✓ PASS POST /oauth/v2/token [200 OK, 12ms]

✓ PASS GET /user/billing [200 OK, 28ms]

✓ PASS POST /v1/charges [201 CREATED, 44ms]

Summary: 14/14 tests passed (0 failures) • Duration: 142ms total

AI Agent MCP — blitz mcp setup

Auto-Config

$ blitz mcp setup

⚡ Blitz MCP Scanner & Setup

Scanning installed IDEs & AI coding agents...

[1] Cursor (~/.cursor/mcp.json)

[2] Claude Desktop (claude_desktop_config.json)

[3] Antigravity / Gemini (~/.gemini/antigravity/mcp_config.json)

[4] Windsurf (~/.codeium/windsurf/mcp_config.json)

[5] VS Code (Cline & Roo Code)

[6] Zed (settings.json context_servers)

✓ Configured seamlessly across all selected IDEs

ENGINEERED FOR DEVELOPERS

Real Capabilities. Zero Fluff.

Everything you expect from an industry-standard API workbench, built to run cleanly on your workstation.

Pure Native Rust Core

Instantaneous boot time (<150ms) and minimal RAM usage. Never endure another spinning wheel just to test a single endpoint.

Vault & macOS Keychain

Store tokens securely with {{vault:key}} and secret:// URLs. Sensitive variables are automatically redacted before team sync.

Git Branch Team Sync

Sync environments and collections with your team using Git branches (env/<slug>). Full PR reviews, merge histories, and conflict resolution.

Embedded JS Sandbox

In-engine Boa JavaScript execution for pre-request scripts and post-response tests. Full support for blitz.test, assertions, and CryptoJS signing.

Enterprise Auth Suite

OAuth 2.0 (with loopback redirect token refresh), OAuth 1.0a, AWS SigV4, Akamai EdgeGrid, Hawk, Digest MD5, and Basic/Bearer.

UPDATED

1-Click Live Mock Recorder

Hit any live staging endpoint and click ⚡ Save to Mock to instantly capture status, headers, and body into your local 127.0.0.1 mock router. $0 cloud fees, 100% offline.

NEW

Multi-Language Code Drawer

Generate production-ready code with live variable substitution in Rust (reqwest), TypeScript (axios), Python (httpx/requests), Go, and cURL.

NEW

Swagger UI & Static HTML Exporter

Publish API documentation without Postman's paid cloud fees. Export any collection into a self-contained, standalone Swagger UI (OpenAPI 3.0) interactive bundle or a sleek, dark-themed HTML documentation portal with live search and multi-language snippets.

⚡ Swagger UI (OpenAPI 3.0) Standalone HTML

NEW

Smart OpenAPI Reconciliation

Updated backend schema? Blitz discovers new endpoints and updates definitions without ever wiping your existing test assertions, pre-request scripts, or saved mock examples.

NEW

Git 3-Way Merge Defense

Eliminates merge headaches on team branches. Built-in visual 3-way conflict detection flags unmerged branches and allows clean 1-click resolution between local changes and remote commits.

NEW

Smart Auth Inheritance & Live Preview

Full hierarchical auth inheritance across nested folders and collections. Shows a live origin card (e.g. folder 'Auth' or collection 'Billing') and lets you jump directly to edit parent credentials without losing request draft state.

NEW

Real-Time Syntax Coloring & Var Mirror

Vibrant syntax highlighting for JSON, Form-Data, and GraphQL request bodies. Embedded variable pills {{token}} render directly inside code tokens with live hover inspectors and one-click environment variable overrides.

NEW

Git-Tracked Workspace Assets (Uploads)

Upload binary files and multipart form data payloads directly into your workspace assets/ repository. Payloads are committed and synchronized across your team with automatic relative path resolution on any machine.

NEW

Built-in MCP Server for AI Agents

Expose collections, environments, and execution runtime to Antigravity, Gemini, Claude, and Cursor via blitz mcp. Autonomous agents can run requests, parse responses, generate client code, and update environment variables directly.

⚡ 18 Agent Tools JSON-RPC 2.0 stdio

TECHNICAL BREAKDOWN

The Head-to-Head Comparison

See how Blitz compares against other desktop API clients across licensing, runtime, and architecture.

🔬 Benchmark Methodology & Transparency Notice

CLI memory footprint was measured on macOS Sonoma 14.6 (Apple M-series) using Apple's /usr/bin/time -l and footprint command-line tools. Blitz was compiled in --release mode with binary size 21 MB. Headless cold start execution completed in < 10ms with 10,207,232 bytes (~10.2 MB) peak resident memory.

Competitor CLI tools (Newman, Bru, Inso) execute within the V8 / Node.js runtime environment. All feature and protocol specifications reflect publicly released capabilities as of October 2026.

Capability	⚡ Blitz	Postman	Bruno	Insomnia	Yaak
Runtime Architecture	Pure Native Rust	Electron (Node.js)	Electron (Node.js)	Electron (Node.js)	Tauri (React/JS)
License & Pricing	100% Free / MIT	Proprietary / Paid ($$$)	Open Source / Paid Pro	Proprietary / Paid ($$$)	Fair-Core / Commercial
App Startup Latency	< 150 ms	4,000 - 8,000 ms	1,500 - 3,000 ms	3,000 - 6,000 ms	< 300 ms
Headless CLI Runner	Built-in (10.2 MB RSS)	Newman CLI (Node.js)	Bru CLI (Node.js)	Inso CLI (Node.js)	Community CLI (Node.js)
Mandatory Cloud Account	Never (100% Offline)	Yes (Forced Login)	No	Yes (Forced Login)	No
Team Collaboration	Direct Git Branch Sync	Proprietary Cloud	Git Directory	Proprietary Cloud	Yaak Cloud ($$$)
Protocols Supported	8 Protocols (incl. MQTT & MCP)	HTTP, WS, gRPC, GraphQL, MQTT	HTTP, WS, gRPC, GraphQL	HTTP, WS, gRPC, GraphQL, SSE	HTTP, WS, gRPC, GraphQL
Secrets Vault & Keychain	Native OS Keychain	Synced to Cloud	.env files	Synced to Cloud	SQLite file
Postman v2.1 Import	Seamless 1-Click	Native	Partial Conversion	Partial Conversion	Basic Import
Static Docs Publishing	1-Click Swagger UI & HTML	Paid Cloud Only ($$$)	None	None	None
Live Mock Recording & Proxy	⚡ 1-Click Local (Offline)	Cloud Hosted Only	None	Basic Mock Plugin	None
Code Generators	Rust, TS, Python, Go, cURL	Legacy Snippets	Basic cURL / fetch	Basic Snippets	curl only
AI Agent Server (MCP)	⚡ Native Stdio (12 Tools)	Paid Cloud AI ($$$)	None	None	None

100% PRIVATE CLIENT-SIDE DEMO

Inspect Any Postman Collection Right Now

Curious how cleanly Blitz handles nested folders, environments, and variables? Drag and drop any .json file below. Zero data leaves your browser. Parsing runs entirely on your local CPU.

Drop your Postman v2.1 Collection or Environment JSON

Click to browse your hard drive or drag files here to test instant native parsing speed.

v2.1.0 schema Postman Environment Client-Side Only

GETTING STARTED

Ready to Run Lightning Fast?

Install the native desktop binary on macOS, Linux, or Windows.

macOS (Apple Silicon & Intel)

Download for Mac

Native .app bundle with Keychain & Dioxus WebKit integration.

Linux (x86_64)

Download for Linux

Standalone binary & tar.gz with desktop launcher integration.

Windows (x64)

Download for Windows

Native .exe with WebView2 runtime and PowerShell installer.

⚡ 1-Line Quick Install — Automated Terminal Installers

macOS • Linux • Windows

● macOS (Terminal)

curl -fsSL https://raw.githubusercontent.com/h3ma209/Blitz/master/install.sh | bash

● Linux (Terminal)

curl -fsSL https://raw.githubusercontent.com/h3ma209/Blitz/master/install.sh | bash

● Windows (PowerShell / Command Prompt)

irm https://raw.githubusercontent.com/h3ma209/Blitz/master/install.ps1 | iex

Build from Source Universal

# 1. Clone repository
git clone https://github.com/h3ma209/Blitz.git
cd Blitz

# 2. Build & install user app
make install

# 3. Or launch development build
make run

Default Install Locations Per-User

macOS

~/Applications/Blitz.app

Linux

~/.local/bin/blitz

Windows

%LOCALAPPDATA%\Blitz\

🛡️ First-Launch Security Verification Notice Open-Source

Because Blitz is an independent open-source project distributed without paid Apple Developer ($99/yr) or Windows EV enterprise certificates, your OS may display an unverified app prompt on first manual launch.

🍎 macOS: "Apple cannot verify malware"

Clear browser download quarantine in Terminal:

xattr -cr /Applications/Blitz.app

Or: Right-click Blitz.app in Applications → select Open.

🪟 Windows: SmartScreen "Protected your PC"

Click More info → Run anyway, or run in PowerShell:

Unblock-File "$env:LOCALAPPDATA\Blitz\blitz.exe"

1-line installer automatically unblocks SmartScreen.