Download
Get MimiQ360.
Tell us a little about where you work and we’ll email you a download link. One JAR, Java 25, and it runs on your own hardware.
The first tagged release of MimiQ360. One JAR, Java 25, and a mock server that speaks HTTP, WebSocket, SSE, gRPC and GraphQL.
- Mock over five protocols with templated responses, match rules, response variants, latency and fault injection
- Import from OpenAPI 3, HAR, Postman, cURL, WSDL/SOAP and CSV/JSON, or record against a live service and promote the traffic
- Stateful flows in MFL, a virtual database, and proxy/record for the endpoints that are not written yet
- Runs with no database to provision: first start brings up an embedded PostgreSQL and persists to ./data
- File
- mimiq360-0.1.0.jar
- Size
- 277 MB
- Requires
- Java 25
- Licence
- Free for non-commercial use
- SHA-256
Verify what you downloaded
Every release is published with its SHA-256. Check the file you received against it before running it.
shasum -a 256 mimiq360-0.1.0.jarOn Windows: certutil -hashfile mimiq360-0.1.0.jar SHA256
Then run it
java -jar mimiq360-0.1.0.jar serve mocks.yamlJava 25 is the only prerequisite. First run with no configuration starts an embedded database and persists to ./data.
Request your download link
We’ll email a single-use link. It works once and expires after 72 hours.
Releases
Version history
Every published release, newest first.
The first tagged release of MimiQ360. One JAR, Java 25, and a mock server that speaks HTTP, WebSocket, SSE, gRPC and GraphQL.
Mocking
- Mock runtime over HTTP, WebSocket, SSE, gRPC and GraphQL, with templated responses, match rules, response variants, latency and fault injection.
- Stateful flows written in MFL (the Mimiq Flow Language), backed by a virtual database.
- Proxy and record against a live service, then promote recorded traffic to endpoints.
- Per-API rate limiting that answers 429 with Retry-After and the X-RateLimit-* headers.
- RFC 7807 problem responses across every endpoint.
Getting your APIs in
- Import from OpenAPI 3, either a file or a live URL, with re-sync.
- Import from HAR, Postman collections, cURL, WSDL/SOAP and CSV/JSON.
Command line and CI
- CLI verbs: serve, push, pull, validate and reset.
- Local dev mode with hot reload and no database to provision.
- A GitHub composite action, a GitLab template, and @mimiq360/test-helpers for Jest, Vitest and Playwright.
Teams
- Projects and RBAC, review and approval, change history and rollback.
- Activity feed, in-app notifications, presence, and comments with @mentions.
- Enterprise auth: OIDC, SAML 2.0 and SCIM 2.0, built against a real Keycloak.
Running it
- Prometheus metrics, health probes, graceful shutdown and OpenTelemetry.
- Structured JSON logging with correlation IDs; request-log retention and rollup.
- Backup and restore guides.
Security
- Secrets are encrypted at rest, with a test asserting the plaintext is absent from the stored column rather than assuming it.
- SSRF protection on remote spec fetching: scheme allowlist, per-hop redirect revalidation, and every resolved address checked against loopback, private, link-local, CGNAT and reserved ranges.
- Import endpoints now check permissions before resolving a project by slug.
- /mock/** is unauthenticated only under `mimiq360 serve`. The JAR, the container image and the Helm chart all keep authentication on.
Before you run it
- Java 25 is the only prerequisite.
- First run with no configuration starts an embedded PostgreSQL and persists to ./data. Set MIMIQ360_DB_URL for production.
- `mimiq360 serve` is local development mode: unauthenticated by design, and not for shared use.
- Config format version 1 · MFL 1.0.
mimiq360-0.1.0.jar · 277 MB
SHA-256 77e78db54824c2874507b444aa67795bfb20ee32e704bfbc805cc3a1b6381d21