Beeceptor vs Mockttp

Beeceptor is a developer-focused API simulation platform for mocking services, virtualizing them, testing contracts, and simulating failures. It supports HTTP, HTTPS, HTTP/2, mTLS, REST/OpenAPI, SOAP, GraphQL, and gRPC. Users can build no-code mocks with request-matching rules and set response status codes, headers, and bodies. Uploading an OpenAPI specification can create a populated mock server with AI-generated data. Beeceptor can proxy requests to live backends, record traffic, and switch to mock behavior when a backend is unavailable. Latency, timeouts, and errors can be simulated to check client resilience. Its CLI exposes a localhost service through a public HTTPS URL and runs on Windows, macOS, and Linux. Management APIs support mock-server configuration, while MCP connectivity supports AI agents including Claude and Cursor. API Connections store OAuth credentials and generate tokens for outbound requests. Beeceptor says it is SOC 2 Type II audited, adheres to ISO 27001, and complies with GDPR; it also says data is encrypted in transit and at rest. The free plan has public endpoints, a 1 MB request payload limit, and cleanup rules for unclaimed endpoints.

Mockttp is a free, open-source JavaScript library for intercepting, transforming, or testing HTTP requests and responses. It supports integration tests in Node.js and browsers, including transparent proxying and HTTPS. Its tools can stub responses, verify requests, generate self-signed certificates for HTTPS mocking, and mock traffic inside or outside the process. It can also serve as the basis for custom proxies that capture, inspect, or rewrite traffic. For parallel tests, Mockttp can automatically configure ports, mock URLs, and proxy settings. It works with promise-capable testing tools and HTTP clients; Mocha, Chai, and Superagent appear in an example but are optional. Browser tests require an admin server running outside the browser. The setup guide warns against trusting a test certificate authority system-wide or sharing its private key, because either could allow an attacker to impersonate secure connections. Mockttp supports Linux, macOS, Windows, web, and self-hosted use.