Bandura
bandura.dev
What it is
Bandura is a desktop workspace for building local AI workflows and testing APIs with a visual canvas and editable YAML workflows. Each workflow is stored as a plain-text.aether file that can be shared or committed through Git. API checks can chain HTTP requests, pass values between steps, and assert results; imports include Postman, Insomnia, OpenAPI, Bruno, HAR, and curl. AI features connect to Anthropic, Google Gemini, OpenAI-compatible endpoints, Groq, OpenRouter, Together, Ollama, and LM Studio. Ollama or LM Studio can run those features locally without an API key or traffic leaving the machine. A native CLI runs the same workflows in terminals and CI, and the local MCP server lets compatible assistants manage flows. Bandura says it collects no telemetry, analytics, crash reports, or account data. The Free plan is free; a commercial licence is $59 as a one-time purchase per seat and includes 12 months of updates. Built-in scheduling and hosted execution are unavailable.
Spec sheet
- Product
- Bandura is a local AI workflow builder and API test workspace with a visual canvas and editable YAML workflows.Read 1 Oct 2026 · bandura.dev
- Compliance
- Bandura states that it has no SOC 2 report, ISO 27001 certificate, HIPAA or PCI attestation, or third-party penetration test.Read 1 Oct 2026 · bandura.dev
- Support
- Support is answered by the engineer who wrote the code.Read 1 Oct 2026 · bandura.dev
- AI providers
- AI features support Anthropic, Google Gemini, OpenAI-compatible endpoints, Groq, OpenRouter, Together, Ollama, and LM Studio.Read 1 Oct 2026 · bandura.dev
- API testing
- Bandura can chain HTTP requests, pass values between steps, and assert results.Read 1 Oct 2026 · bandura.dev
- CLI and CI
- A native @bandura/cli binary runs the same .aether workflows in terminals and CI and supports JUnit and GitHub annotations.Read 1 Oct 2026 · bandura.dev
- Credential storage
- API keys are stored through the operating system secret store: Keychain on macOS, DPAPI on Windows, and Secret Service or libsecret on Linux.Read 1 Oct 2026 · bandura.dev
- Execution
- The desktop app runs workflows locally on the user's machine and stores workflows and run history locally.Read 1 Oct 2026 · bandura.dev
- Imports
- Bandura imports Postman, Insomnia, OpenAPI, Bruno, HAR, and curl requests.Read 1 Oct 2026 · bandura.dev
- Local models
- Ollama or LM Studio can run the AI features locally without an API key or traffic leaving the machine.Read 1 Oct 2026 · bandura.dev
- Maker status
- Bandura is a trading name and the licence agreement is governed by the law of Ukraine.Read 1 Oct 2026 · bandura.dev
- MCP
- Bandura includes a local MCP server that lets compatible AI assistants list, read, run, import, create, and edit flows.Read 1 Oct 2026 · bandura.dev
- Scheduling and hosting
- Built-in scheduling and hosted execution are unavailable; users can invoke the CLI from their own scheduler or CI environment.Read 1 Oct 2026 · bandura.dev
- Telemetry
- Bandura states that it collects no telemetry, analytics, crash reports, or account data.Read 1 Oct 2026 · bandura.dev
- Workflow format
- Each workflow is kept in a plain-text .aether file that can be committed and shared through Git.Read 1 Oct 2026 · bandura.dev
Plans and prices
Strong points and limits
Strong points
- Free for personal and commercial use.
- Workflows are plain-text files that can be committed to Git.
- CLI runs workflows in terminals and CI.
- Local models can operate without an API key.
- Credentials use the operating system secret store.
Limits
- Built-in scheduling is unavailable.
- Hosted execution is unavailable.
- No SOC 2, ISO 27001, HIPAA, or PCI attestation is listed.
- Commercial licence costs $59 per seat once.
Who it suits
Bandura suits developers who want local API testing and AI workflows, with files that can be versioned in Git and run through CI. It also fits users who prefer local AI models and local workflow storage.
Verdict
Bandura keeps workflow files, run history, and supported local-model use on the user's machine, while also providing CLI and CI execution. Consider the lack of built-in scheduling and hosted execution, and note that the maker lists no named compliance attestations.
Where Specifiction places it
- gRPC Tools#1 of 248.8