Requestly review

Requestly is a desktop API client, not an API server or hosted API runtime. It sends requests to APIs your team operates, organizes them into collections, and provides response inspection, environment variables and assertions. Desktop apps are available for macOS, Windows and Linux.

Its Local Projects model stores collections as files on a developer's machine; teams can sync those projects with Git. Requestly also offers shared team workspaces, and its Enterprise plan includes self-hosting and data residency. That puts it in the development and testing layer alongside API clients, rather than in the application runtime or API gateway layer.

A typical workflow is to maintain request collections and environment values alongside code, run requests during development, then execute collections through Requestly CLI in CI. Requestly's homepage also lists an HTTP Interceptor, File Server and API Explorer, but the core fit is API request authoring and testing.

Requestly's integration surface is its desktop client, JavaScript scripting sandbox, file-based Local Projects and CLI for running collections in CI. Pre-request and post-response scripts can read and set environment variables, chain authentication and assert response data. The homepage also advertises client-code generation in any language.

The client supports REST, GraphQL, SOAP, gRPC, WebSocket, Socket.IO and MQTT. GraphQL features include queries, mutations, introspection and autocomplete; SOAP and gRPC features include WSDL, reflection and streaming. The Team plan lists imports from Postman, OpenAPI, HAR, cURL, WSDL, SoapUI and Bruno.

Requestly provides documentation, but teams building an integration around Requestly itself should confirm SDK support and any public API contract in the vendor's docs. The homepage does not describe a webhook or plugin integration surface. For CI, the named option is Requestly CLI; collection runs are also available through the desktop collection runner.

Requestly has no free plan; the vendor lists a 30-day free trial. With annual billing, Team costs $10 per user/month and Team Pro costs $15 per user/month. Both prices are marked 17% off. Monthly-billing prices are not published.

Team includes unlimited manual and scheduled collection runs, API protocol support, Local Projects with GitHub/GitLab sync, basic API docs with shareable links and imports from several API tools and formats. Team Pro adds unlimited AI credits, AI-generated tests and assertions, advanced reporting and analytics, a secret scanner and external vault integrations. Enterprise is custom annual pricing and adds SAML SSO, SCIM provisioning, attribute-based RBAC, audit logs with SIEM export, data residency, self-hosting and priority support.

The listed plans are priced per user, so the bill grows with seats. The pricing page lists no add-ons, and Team includes unlimited collection runs; it does not publish request-rate or other usage overages. Ask about monthly billing and any CI or service limits before committing.

Requestly's vendor pages do not publish an open-source licence or describe the source code as available. Local Projects let teams keep collections as files on disk and sync them with GitHub or GitLab, which gives those API definitions a path outside a hosted workspace.

Self-hosting is an Enterprise feature, alongside data residency; it is not listed as a self-serve deployment option. The vendor does not publish a self-hosting price or deployment requirements, so ask about both before treating it as a way to reduce hosting costs.

Git-backed collections can make migration easier, but they do not establish how to export workspace membership, run history, secrets or reports. Confirm what can be exported and in what format. Keep secrets separate from committed project files: Requestly says environment secrets stay local and are never synced.

Requestly can run collections in CI through its CLI, and Team lists unlimited manual and scheduled collection runs. The vendor does not publish request-rate limits, collection-size limits or runner concurrency in the published pricing details. Check those limits, failure behavior and any service-level commitment with the vendor before making CI results a release gate.

Requestly's homepage states SOC 2 compliance, encryption in transit and at rest, SSO, role-based access control and audit logs. The plan breakdown places SAML SSO, SCIM, audit-log SIEM export and self-hosting in Enterprise; confirm which controls apply to the deployment you plan to use. The homepage says environment secrets stay local and are never synced, while Vault secrets are encrypted and never exported. A separate r/firefox thread discusses the browser extension, not the API client.