Tech riderRev. 4 Oct 2026

mountebank

Ch 136.7of 20 Service Virtualization Software

1Runs onAPI, Linux, self-hosted
2CostsFree plan
3Deployment modelself hosted
4Stateful simulationYes
5Fault injectionYes
6Record and replayYes

6 lines stated Written from the maker's own pages: mbtest.dev

Visit site Alternatives

Overview

mountebank is ranked #13 of 20 in service virtualization software on Specifiction. It runs on API, Linux, Self-hosted. There is a free plan.

mountebank plans and pricing

All plans

Free Free Open source service virtualization · No platform constraints stated mbtest.dev · 4 Oct 2026

Compared on service virtualization software

Free plan: Yesmbtest.dev
Deployment model: self_hostedmbtest.dev
Stateful simulation: Yesmbtest.dev
Fault injection: Yesmbtest.dev
Record and replay: Yesmbtest.dev

Facts

Purpose: mountebank provides cross-platform, multi-protocol test doubles over the wire for testing applications in place of real dependencies.mbtest.dev · 4 Oct 2026
Testing workflow: Tests use its HTTP API to set up stubs, record and replay proxies, and verify mock expectations.mbtest.dev · 4 Oct 2026
Built-in protocols: The site lists HTTP, HTTPS, TCP, and SMTP as built-in protocols.mbtest.dev · 4 Oct 2026
Community protocols: The site lists LDAP, WebSockets, GraphQL, SNMP, Telnet, SSH, and NETCONF as community plugins.mbtest.dev · 4 Oct 2026
Installation: The getting started guide documents installation through npm or running a Docker image.mbtest.dev · 4 Oct 2026
Client libraries: The community extensions page lists client libraries for languages including C#, Clojure, Go, Java, JavaScript, Python, Ruby, TypeScript, and Swift.mbtest.dev · 4 Oct 2026
Build integrations: Listed build tool plugins include Grunt, Gradle, and Maven.mbtest.dev · 4 Oct 2026
Persistence limit: By default, mountebank stores everything in memory; the page says this can become a performance bottleneck at scale.mbtest.dev · 4 Oct 2026
Security: The security page warns that enabling JavaScript injection can allow attackers to run code on the machine and recommends protections such as localhost-only access or an IP whitelist.mbtest.dev · 4 Oct 2026
CORS: CORS is disabled by default to prevent CSRF attacks, and safe origins can be explicitly enabled with a command-line flag.mbtest.dev · 4 Oct 2026
API key option: The command-line documentation describes an optional API key that requires a matching x-api-key header for API requests.mbtest.dev · 4 Oct 2026
Support: The support page directs users to a Google group for help.mbtest.dev · 4 Oct 2026
Audience: The site describes mountebank as a platform for developers to test applications against on-demand test doubles instead of real dependencies.mbtest.dev · 4 Oct 2026