Stay on Insomnia if
- You're deep in Kong's API gateway ecosystem.
- Insomnia's plugin ecosystem is load-bearing for your workflow.
- You've already accepted the Cloud account direction.
- Mock servers or
insoCLI in CI are non-negotiable.
ShellYard vs Insomnia
Insomnia's UI is clean. Insomnia's recent direction — mandatory Cloud login, telemetry-by-default, account-gated features — is less clean. ShellYard is a native desktop with the same kinds of clean flows, no account required on Free, and an integrated SSH client, database inspector, 40+ network tools, and AI assistant alongside the API client.
Free forever · No account on Free · No telemetry-by-default
Sign in to Insomnia
Required to access most features
Local-only mode is available but requires opting out post-sign-in.
Door before the desk.
{
"status": "ok",
"auth_required": false
} Desk before the door.
Same kind of clean UI. Different stance on what you have to log in to.
Pick the one that matches your trust line
Stay on Insomnia if
inso CLI in CI are non-negotiable.Switch to ShellYard if
The API-client surface you expect, plus the workspace layer Insomnia doesn't ship — and the places Insomnia still does it better.
| Feature | Insomnia | ShellYard |
|---|---|---|
| REST (GET/POST/PUT/PATCH/DELETE/…) | ||
| GraphQL client + schema introspection | ||
| WebSocket | ||
| Server-Sent Events (SSE) | ||
| Request collections + folders | ||
| Environments + {{variable}} substitution | ||
| OAuth2 / Bearer / Basic / API-key auth | ||
| Postman v2.1 collection import | ||
| Pre-request + test scripts | ||
| Response viewer (JSON pretty-print, timing) | ||
| No-account local mode | — Cloud-first by default | ✓ Free runs without an account |
| SSH-tunnel routing per request | ✓ Tunnel-via on the request, env, or collection | |
| SSH / RDP / VNC / Serial / SSM in-app | ||
| 6-engine database inspector | ✓ Postgres, MySQL, SQL Server, Redis, Mongo, SQLite | |
| 40+ network diagnostic tools | ✓ MTR, packet capture, TLS, SNMP, DNS, syslog… | |
| AI on responses (BYO key) | — AI features are Kong-hosted | ✓ Magellan — Anthropic / OpenAI / Gemini / Ollama |
| Local credential vault | ✓ AES-256-GCM (Free), KMS-wrapped DynamoDB (Pro+) | |
| Shared Spaces with RBAC | ✓ Cloud-only | ✓ Shared Spaces (Team+) |
| Plugin ecosystem | ✓ Community plugins | |
| OAuth flow depth (implicit, PKCE, refresh, etc.) | ✓ Mature | ✓ Standard presets |
| Kong API gateway integration | ✓ Native | |
| inso CLI for CI/CD | ||
| Built-in mock servers | ||
| gRPC client | ||
| Code generation (20+ languages) | ||
| Pricing | Free / Pro / Enterprise (Cloud) | Free / $24 / $49 / $99 — annual prices, locked |
Reflects publicly documented Insomnia capability at time of comparison.
Where Insomnia still wins
Plugin ecosystem
Community-built plugins for everything from JWT decoding to custom OAuth flows. We don't ship a plugin runtime.
OAuth flow polish
Implicit grant, code with PKCE, client credentials, password, refresh — all dialled in. Insomnia is the gold standard here.
Kong API gateway integration
If you run Kong, Insomnia is the natural pairing. Native publishing flow into the gateway.
inso CLI for CI/CD
Headless test runs in GitHub Actions / GitLab CI. ShellYard is desktop-only — no equivalent today.
Built-in mock servers
Stand up a fake endpoint in seconds. We don't host mocks — keep Insomnia if this is in your loop.
gRPC support
Insomnia ships a real gRPC client with reflection and streaming. We don't ship gRPC yet.
Code generation in 20+ languages
Copy a request out as cURL, Python requests, Go net/http, JS fetch, and the long tail. ShellYard does cURL today; the rest is on the list.
Plenty of teams run both — Insomnia for the plugin-driven flows, mocks, and CI; ShellYard for the no-account desktop work and the SSH / DB / network side of the stack.
Migration in one Insomnia export
Insomnia → Export your workspace.
Application Menu → Import/Export → Export Data → choose Insomnia v4 JSON or Postman v2.1. Save the file.
ShellYard → Collections → Import → Postman v2.1.
Use Insomnia's Postman v2.1 export as the bridge format. Folders, requests, auth presets, and {{variables}} all land intact.
Open a request. Pick Tunnel-via if internal. Fire. No account required.
For public APIs, you're already done. For internal ones, click the Tunnel-via pill and pick the SSH session you already use to reach the network. The URL keeps the real internal hostname; DNS, TLS, and body resolve from the bastion's side.
Before you install
Install. Open it. Send a request. If the rest of the toolkit — SSH, the DB inspector, the network tools, the AI assistant on responses — earns its place, stay. If it doesn't, uninstall. No sign-in screen between you and the decision.
Free forever · No account on Free · No telemetry-by-default
Want the workflow story instead of the head-to-head? Test internal APIs through SSH →