Is Mokku safe?

Mokku exposes saved mock responses and header rules to any website through its page message bridge.

Mokku's content script runs on every site and accepts page messages that ask it to check saved mock and header configurations without checking the page origin. A website can request data for chosen URLs and receive saved mock bodies, statuses, configured headers, and header rules through postMessage.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.