Hoppscotch review: Open source API development tool for building, testing and debugging requests

What Hoppscotch does

Lets you build REST API requests, add scripts and authorization, run tests on responses and organize them in collections.

Hoppscotch describes itself as an open source API development ecosystem. Its REST section lets you define an endpoint, pick an HTTP method such as GET, POST or PUT, and add headers, parameters, a request body and authorization. You can also write JavaScript scripts that run before a request is sent or after the response arrives, and run tests against the responses you get back. Responses can be downloaded or copied for further use.

To keep work organized, the tool includes collections, environments and history. Authorization can be configured with Basic Auth, Bearer tokens, API keys, OAuth 2.0, Digest, AWS Signature and JWT, and it can be set once on a collection or subfolder so that nested requests inherit it. The documentation mentions both Hoppscotch Cloud and self-hosted editions, plus a Desktop application and an Agent interceptor.

The pages provided do not include a pricing page, so Pricing not published on the official site in the material we reviewed. We cannot state whether there is a free plan, a trial, paid tiers or any limits on usage. The homepage shows a Login option and a Save My Workspace button, which suggests an account is used to keep workspaces. Stated limits in the docs are narrow: OAuth 2.0 flows are not fully supported in the Desktop application yet, Digest Auth needs the Agent interceptor, and expired bearer tokens must be refreshed by hand.

• REST requests with HTTP methods, headers, parameters and body
• JavaScript pre-request and post-request scripts
• Tests on API responses
• Collections, environments and history
• Many authorization types
• Collection-level inherited authorization
• Download and copy responses

Our take

Hoppscotch fits developers who want a request-builder for REST APIs with scripting, tests, collections and a wide set of authorization types, and who value that the product describes itself as open source and offers self-hosted editions. It is less clear for buyers who need firm pricing information, because no pricing page was available and we cannot say what any plan costs or includes. The documentation also notes that OAuth 2.0 is still a work in progress in the Desktop app, so teams relying on that combination should check first. We have not used the product; this view comes only from the official pages.