getmockd/mockd

MCP Developer Tools

A single‑binary mock server supporting HTTP, gRPC, GraphQL, WebSocket, MQTT, SSE and SOAP with built‑in stateful CRUD and chaos features

Track releases GitHub Website

Go Latest v0.6.5 · 1mo ago Security brief →

Features

Mocks multiple protocols (HTTP, gRPC, GraphQL, WebSocket, MQTT, SSE, SOAP) from one CLI binary
Stateful CRUD API creation with in‑memory persistence
Chaos testing via fault injection, circuit breakers and profile‑based behavior

Recent releases

View all 25 releases →

v0.6.4 Feature 2mo

Notable features

AllowLocalhost defaults to true
Dashboard assets are now exempt from auth checks

Full changelog

Changelog

8b90881aa7e1ab077afac64c2c4b06c18da8cda5 feat: AllowLocalhost default true, exempt dashboard assets from auth

View release on GitHub

v0.6.3 Bugfix 2mo

Reverted the workspace normalization middleware; the fix is now applied in the dashboard.

Full changelog

Changelog

ef8fe9951517818330e13a7c14a0fe4c36363429 fix: revert workspace normalization middleware — fixed in dashboard instead

View release on GitHub

v0.6.1 Bug fix 2mo

Notable features

Added workspaces section to JSON schema

Full changelog

Changelog

d4d29a4e1d61200320d831fbff186779dd911dee feat(schema): add workspaces section to JSON schema
204f4629fd62d4f6118de518bf30dff08e9d6c67 fix(ci): update smoke test for tables+extend CRUD flow
eedb00b34361a611860eb51e28b5fb420d32426a fix(cli): --stateful flag now generates CRUD mocks when --path is provided
64a7727c3b118626f7cef7612a6f120d4ee66251 fix: resolve all CI lint failures — race, bodyclose, dupl, gocritic, perfsprint
0221973338b2adf2778567cbaa806c9ba502dc37 fix: resolve final CI lint issues — bodyclose, unused code, package docs
552e735a8d6073113ef572a207447873d9c04189 fix: resolve remaining CI lint issues across 10 files

View release on GitHub

v0.6.0 New feature 2mo

Notable features

Workspace-scoped request logs across the entire stack
Workspace-scoped stateful resources across the entire stack

Full changelog

Changelog

989b4aca2ab50468f24b50bfbf5f979bd1bc701b feat(cli): wire --workspace persistent flag through all commands
15a13e0ea4367e153be8a7c62933bb1340ac9cab feat(mcp): add daemon health monitor with auto-restart
82fcd1b8fac6d4002dfa009f375522a24f15915f feat(mcp): add file path support to import_mocks tool
1ac8736a85b288e16f70d9c3a1223be3aa1f0868 feat(mcp): add workspace create action, chaos profile listing, remove dead path arg
d5704471a22630c36917334cc5df66987b943cf6 feat(mcp): expose statefulBinding in manage_mock tool schema
c45da499df6b3f57bbf1fe96a3b9f96e0cb6c81f feat(stateful): add response transform layer for protocol-agnostic API shaping
726cf2da7db598ecc188415f58a69233e6d6c769 feat(stateful): cursor pagination, form encoding, error transforms, computed has_more
6611bdaf422ba9f638c94b789194e3778aac8585 feat(stateful): expand relationships, list filtering, wrapAsList, preserve delete, admin reset
db29b8ca7f46244af704b696f11fb996303905a2 feat(stateful): path param suffix matching, deep test coverage, Twilio digital twin
6bdea22e8e80956bb8ffb00f87a3116e8ee48962 feat(stateful): tables + extend architecture with custom operations
5092d63160dc3afe75aa3a6d5953eb78f7b2aa2e feat: add delete_resource action for stateful resource cleanup
2330a570ba7cf7883e0687dfe5b732d22f23d7bb feat: add workspace filtering to MCP, CLI client, and admin export
56e3cd28d325d871dda5d6dcba8238d15ba8e9c1 feat: complete workspace scoping — CLI gaps, validator fix, update command, and docs
aafe14bb671de738192ce5fde7eea0cdb1c4e3e0 feat: expose stateful bindings as extend across CLI, MCP, and API
4673e5cddd20468160899b491367e94e45725e73 feat: full table config via API — CreateStatefulResource accepts full config
4cde3a4faa7bb89012c16469bd7f61068c13c5fb feat: plumb workspace through admin layer and engineclient
fac43765d2f85a7f8630c54b4af3a5508b7f411c feat: readiness endpoint, form coercion tests, custom op error propagation
ffdb7ee409e151b2003aedcb6bdb19b9527a7a87 feat: surface workspace base path in CLI, MCP, and import responses
18e0be5a51a0f6e243cf3db13cb9e5e4e2e4c87c feat: workspace-scoped request logs across entire stack
59cd28cd9dfd97ff1b1eb4f6de13ccd989f175c3 feat: workspace-scoped stateful resources across entire stack
aeb06a57b39912f8faefee136d96e7b6c3cbc89c fix(admin): use temp dirs in tests to avoid loading 132MB data.json
09bde72588c949ce75bead566edf4c71ac8e1f1c fix(template): add 6 fakers, random.Element, fix nested resolution and Content-Type matching
fb3f9646c12f0ad345520842c9675bde0a4f8a98 fix(template): make template expressions case-insensitive
a998ba9cd733040c08b7e69f88742daed8b727cf fix(test): remove Response from mocks with StatefulBinding, update default workspace ID
d58f1541107c5fc526fb4b0a2308e01d1518b9ab fix(test): update engineclient tests for workspace parameter
aed811d2ceb187550fe64bfdee26e9e1775ee6ac fix: imported mocks now default to enabled in merge mode
35abc5f337bed9aa39c6f42fc2e403a44eb5d9b6 fix: merge protocol patch fields instead of replacing entire spec
2ab1491910a9f585a65216fc16fa67101866279d fix: race condition in exporter, bodyclose in WS tests, dupl nolint
9bae9e900d7501b7e81e85994a9fa537beb8a534 fix: request logs now show correct status codes and mock IDs
3d7a05a6de639f3cf4e4ad25cc91d3ee139e87a1 fix: resolve DefaultWorkspaceID mismatch and add custom operation persistence
66b31cad09f2644ee99947fec7a983f9d82e9482 fix: resolve state disagreement between admin file store and engine
e33f37a37a4ed9a285c95c704593dd10f317756d refactor(stateful): DRY/KISS cleanup — fix critical conversion bug, extract constants, deduplicate
9b33efac76033df19698bea48128730b0d3ac33a refactor(stateful): complete Bridge as shared protocol gateway
69e1da408b69f9cc1b35446a4fcd0fcd0f4d512f refactor: align SOAP to shared StatefulBinding type

View release on GitHub

v0.5.1 Security relevant 2mo

Security fixes

Go runtime updated from 1.25.7 → 1.26.1 — fixes remaining crypto/x509 vulnerabilities (CVE‑2024‑xxxxx implied).
svgo dependency overridden to 4.0.1 — fixes Billion Laughs DoS (GO-2026-4603).

Full changelog

Changelog

82d54ef6d30f1521b0f8ef4c52b0a37b5de88ab4 fix(ci): bump golangci-lint v2.8.0 → v2.11.2 — fixes Go 1.26 compatibility
bf2b47e3032b49ba88a8ba066d0507830d8aedda fix(lint): resolve 10 gosec findings from golangci-lint v2.11.2
cdf820d105c00043cf76ee1ba8b86155c0ee935d fix(lint): resolve all gosec/staticcheck findings from golangci-lint v2.11.2
66a0b351c3a00df0f062c2dc0250cf7b6be4d4be fix(security): bump Go 1.25.7 → 1.25.8 — fixes 3 stdlib vulnerabilities
ed9c4c50278b7a1ed38249caf540201d9f21fead fix(security): bump Go 1.25.8 → 1.26.1 — fixes remaining crypto/x509 vulnerabilities
74385ce958ed7621be3d43e3b9b038404e69b1f5 fix(security): override svgo to 4.0.1 — fixes Billion Laughs DoS (GO-2026-4603)
8014e683cd42ba6201987682d475c68cfe54d862 fix(seo): add robots.txt for docs site, remove global meta description override

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.