No. 6 of 20 ·Service Virtualization Software

mountebank

Linux · Self-hosted · API

Freedom report

Two barsScore 6.4

Free tierA free tier is on its own pricing page
Open codeNo open-source code on record
Runs widely1 of 6 device platforms
DocumentedPlans, terms and facts published

mountebank is ranked #6 of 20 in service virtualization software on Freedom251. It runs on API, Linux, Self-hosted. There is a free plan.

mountebank plans and pricing

All plans

Free Free Open source service virtualization · No platform constraints stated mbtest.dev · 4 Oct 2026

Compared on service virtualization software

Free plan: Yes
Deployment model: self_hosted
Stateful simulation: Yes
Fault injection: Yes
Record and replay: Yes

Best mountebank alternatives

See all 19

Two bars Microcks Free tier No. 1Free6.7 Two bars LocalStack Free tier No. 2$2.42/mo6.6 Two bars MockServer Free tier No. 3Free6.6 Two bars Azurite Free tier No. 4Free6.5 One bar Amazon RDS Free tier No. 5Free6.4 One bar Wilma Free tier No. 7Free6.4

The record

Purpose: mountebank provides cross-platform, multi-protocol test doubles over the wire for testing applications in place of real dependencies.
Testing workflow: Tests use its HTTP API to set up stubs, record and replay proxies, and verify mock expectations.
Built-in protocols: The site lists HTTP, HTTPS, TCP, and SMTP as built-in protocols.
Community protocols: The site lists LDAP, WebSockets, GraphQL, SNMP, Telnet, SSH, and NETCONF as community plugins.
Installation: The getting started guide documents installation through npm or running a Docker image.
Client libraries: The community extensions page lists client libraries for languages including C#, Clojure, Go, Java, JavaScript, Python, Ruby, TypeScript, and Swift.
Build integrations: Listed build tool plugins include Grunt, Gradle, and Maven.
Persistence limit: By default, mountebank stores everything in memory; the page says this can become a performance bottleneck at scale.
Security: The security page warns that enabling JavaScript injection can allow attackers to run code on the machine and recommends protections such as localhost-only access or an IP whitelist.
CORS: CORS is disabled by default to prevent CSRF attacks, and safe origins can be explicitly enabled with a command-line flag.
API key option: The command-line documentation describes an optional API key that requires a matching x-api-key header for API requests.
Support: The support page directs users to a Google group for help.
Audience: The site describes mountebank as a platform for developers to test applications against on-demand test doubles instead of real dependencies.
Price from: Free

Where it ranks on Freedom251

Best Service Virtualization Software in 2026#6 of 20

Is mountebank yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote mountebank

Sources

mbtest.dev· checked 4 Oct 2026
mbtest.dev/docs/gettingStarted· checked 4 Oct 2026
mbtest.dev/docs/communityExtensions· checked 4 Oct 2026
mbtest.dev/docs/security· checked 4 Oct 2026
mbtest.dev/docs/commandLine· checked 4 Oct 2026
mbtest.dev/support· checked 4 Oct 2026