Hacker ApprovedDepartments

curl

Hacker Approved

The most recommended of 5 HTTP clients

A mature, well-tested command-line tool for HTTP and many other protocols that composes well in scripts and with agents; critics find it has too many options.

A mature, well-tested command-line tool for HTTP and many other protocols that composes well in scripts and with agents; critics find it has too many options.

126 people gave an opinion

recommend it
100
criticize it
26
approval share
79%
Each figure is one person. RecommendsCriticizes

Recommended in 12 of 13 months

  1. November 2025: recommended
  2. December 2025: recommended
  3. January 2026: recommended
  4. February 2026: recommended
  5. March 2026: recommended
  6. April 2026: recommended
  7. May 2026: recommended
  8. June 2026: recommended
  9. July 2026: recommended
  10. August 2026: recommended
  11. September 2026: recommended
  12. October 2026: recommended
  13. November 2026: not recommended (month in progress)

Why it carries the badge

  • 100 people recommend itNeeds 10 or more, met.
  • 3.8 recommenders for every criticNeeds 2 to 1 or better, met.
  • Recommended in 12 of 13 monthsNeeds 4 or more, met.

The same three rules apply to every product, and the badge can’t be bought. How the badge works

What people say about it

The reasons people give, with the number of comments that give each one. Open a reason to read what they said.

Why people recommend it

Each mark is one comment

  • Well-engineered, rigorously tested and reliable

    “curl is certainly a much more difficult problem to solve well, and does so without 30 million issues”

    Comment from 21 Sep 2026 in “I am often wrong”

    “curl may just happen to be a well-hardened tool that doesn't have too many security vulnerabilities”

    Comment from 11 May 2026 in “Mythos Finds a Curl Vulnerability”

    “Curl and SQLite are my favourite examples of properly engineered, rigourously tested _anything_.”

    Comment from 11 May 2026 in “Mythos Finds a Curl Vulnerability”
  • Composable in scripts with jq

    “a simple script (curl calling steam API and sending a notification if the price is set) + cron handle the job perfectly”

    Comment from 22 Apr 2026 in “OpenClaw isn't fooling me. I remember MS-DOS”

    “providing a few curl + jq oneliners to interact with a REST API works great in my experience”

    Comment from 10 Apr 2026 in “I Still Prefer MCP over Skills”

    “The ones that survive decades (Make, grep, curl) do one thing and compose well”

    Comment from 5 Mar 2026 in “Good software knows when to stop”
  • Works well with AI agents

    “Complex agent-system integration problems are usually better solved with just AI agent + curl + SKILL.md.”

    Comment from 21 Sep 2026 in “MCP was always a bad idea?”

    “curl is an excellent, very popular command on which all major coding models are well trained on.”

    Comment from 28 Jul 2026 in “MCP 2026-07-28 Specification: transport going stateless”

    “Agents love standing on the shoulders of good crystalized cognition (grep, curl etc)”

    Comment from 25 Sep 2026 in “What About Rails?”
  • Supports many protocols and features

    “I find myself using curl telnet://server:port too often these days because telnet and nc don’t get installed.”

    Comment from 11 Feb 2026 in “The Day the Telnet Died”

    “it's an enormously complex and capable tool. Support for tons of protocols, certs, and much more.”

    Comment from 26 May 2026 in “The Pressure”

    “curl can do very detailed timing [1] for what it's worth and it can also do this using a proxy”

    Comment from 16 Jun 2026 in “TIL: You can make HTTP requests without curl using Bash /dev/TCP”

What people warn about

Each mark is one comment

  • Vulnerability report pause criticized

    “With more advance notice, someone could have found resources to fork curl with different vulnerability management expectations”

    Comment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

    “No, that is the point, they are not going to accept your vuln report. They are taking a holiday.”

    Comment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

    “Why would you imagine they have any clue about the area of effect if they ignore the report?”

    Comment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”
  • Too many options, still limited

    “curl is more limited than the programs I use to generate HTTP, it's slower”

    Comment from 18 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers”

    “There are some things curl cannot do, even though it has too many options”

    Comment from 17 Jun 2026 in “TIL: You can make HTTP requests without curl using Bash /dev/TCP”

Other HTTP clients people recommend

The four most recommended other HTTP clients, with the same counts for each, so you can compare like for like. The tick on each bar marks the 2 to 1 line the badge needs.

curl compared with 4 alternatives
ProductRecommendCriticizeApprovalMonthsOwnedBadge
curlThis page1002679%12—Approved
wget19195%10—Approved
HTTPie7188%6——
curl-impersonate5183%4——
lgogdownloader50100%2——
See all 5 HTTP clients, ranked

What people said

40 of the 132 comments that mention it, newest first. Each links to the original comment.

“CLI tools included with macOS 27.2 and Xcode use still contains the compromised eMudhra certificates (curl, git, etc.)”

MixedComment from 27 Oct 2026 in “Apple releases iOS and macOS 27.2 with new Siri AI features, new Music logo”

“their superficial overlap in ability to download a single file from an HTTP server does not make them "trivially replaceable" with each other”

RecommendsComment from 5 Oct 2026 in “Several vulnerabilities have been discovered in the Linux kernel”

“At least with curl you know that you're getting the supply chain put together by the software author”

RecommendsComment from 4 Oct 2026 in “Run Qwen 3.8 Flash Next (125B) on consumer hardware (RTX 4090) at 100T/s”

“Agents love standing on the shoulders of good crystalized cognition (grep, curl etc)”

RecommendsComment from 25 Sep 2026 in “What About Rails?”

“Complex agent-system integration problems are usually better solved with just AI agent + curl + SKILL.md.”

RecommendsComment from 21 Sep 2026 in “MCP was always a bad idea?”

“It would seem that curl + jq represents most of the solution these days.”

RecommendsComment from 21 Sep 2026 in “MCP was always a bad idea?”

“curl is certainly a much more difficult problem to solve well, and does so without 30 million issues”

RecommendsComment from 21 Sep 2026 in “I am often wrong”

“curl is more limited than the programs I use to generate HTTP, it's slower”

CriticizesComment from 18 Aug 2026 in “Tell HN: Cloudflare silently injects its analytics when you switch nameservers”

“Curl is the ideal tool since you don't have to share logs and neither prove your application behaviour.”

RecommendsComment from 4 Aug 2026 in “Curlese, Five Years Later”

“curl is an excellent, very popular command on which all major coding models are well trained on.”

RecommendsComment from 28 Jul 2026 in “MCP 2026-07-28 Specification: transport going stateless”

“I use this in all the various little bash scripts I have running via timers.”

RecommendsComment from 19 Jul 2026 in “curl can be used to send emails with SMTP”

“There are some things curl cannot do, even though it has too many options”

CriticizesComment from 17 Jun 2026 in “TIL: You can make HTTP requests without curl using Bash /dev/TCP”

“curl can do very detailed timing [1] for what it's worth and it can also do this using a proxy”

RecommendsComment from 16 Jun 2026 in “TIL: You can make HTTP requests without curl using Bash /dev/TCP”

“Curl takes care of that (and a host of other annoying stuff) for you.”

RecommendsComment from 16 Jun 2026 in “TIL: You can make HTTP requests without curl using Bash /dev/TCP”

“With more advance notice, someone could have found resources to fork curl with different vulnerability management expectations”

CriticizesComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“It exchanges packets with the internet and then outputs a safely sanitized byte stream.”

RecommendsComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“I'm not sure it's be reasonable to leave an actively exploited critical bug until August.”

CriticizesComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“Why would you imagine they have any clue about the area of effect if they ignore the report?”

CriticizesComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“No, that is the point, they are not going to accept your vuln report. They are taking a holiday.”

CriticizesComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“curl is mature enough that the chance of an impactful bug is basically zero”

RecommendsComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“cURL also offers paid support and also paid access to the rock-solid (LTS) version, with guaranteed response times”

RecommendsComment from 15 Jun 2026 in “Curl will not accept vulnerability reports during July 2026”

“Two of the most reliable software ever to exist, curl and SQLite, are C/C++”

RecommendsComment from 6 Jun 2026 in “Did Claude Increase Bugs in Rsync?”

“it's an enormously complex and capable tool. Support for tons of protocols, certs, and much more.”

RecommendsComment from 26 May 2026 in “The Pressure”

“curl may just happen to be a well-hardened tool that doesn't have too many security vulnerabilities”

RecommendsComment from 11 May 2026 in “Mythos Finds a Curl Vulnerability”

“curl HAS had security, protocol and language experts poking at it for years”

RecommendsComment from 11 May 2026 in “Mythos Finds a Curl Vulnerability”

“it shows what is achievable if there is a high bar for quality in every single line of code”

RecommendsComment from 11 May 2026 in “Mythos Finds a Curl Vulnerability”

“Curl and SQLite are my favourite examples of properly engineered, rigourously tested _anything_.”

RecommendsComment from 11 May 2026 in “Mythos Finds a Curl Vulnerability”

“a simple script (curl calling steam API and sending a notification if the price is set) + cron handle the job perfectly”

RecommendsComment from 22 Apr 2026 in “OpenClaw isn't fooling me. I remember MS-DOS”

“the curl project receives tonnes of issues and support requests from people who run `curl` in PowerShell”

MixedComment from 20 Apr 2026 in “Sudo for Windows”

“the curl project receives tonnes of issues and support requests from people who run curl in PowerShell”

MixedComment from 20 Apr 2026 in “Sudo for Windows”

“providing a few curl + jq oneliners to interact with a REST API works great in my experience”

RecommendsComment from 10 Apr 2026 in “I Still Prefer MCP over Skills”

“Ended up just wrapping curl with the right User-Agent and it worked without needing a full browser.”

RecommendsComment from 9 Apr 2026 in “Show HN: I pipe free sports streams into Jellyfin – no ads, just HLS”

“But this is no different to using an API key with access controls and curl and you get the same thing.”

MixedComment from 9 Mar 2026 in “Show HN: Mcp2cli – One CLI for every API, 96-99% fewer tokens than native MCP”

“The ones that survive decades (Make, grep, curl) do one thing and compose well”

RecommendsComment from 5 Mar 2026 in “Good software knows when to stop”

“I find myself using curl telnet://server:port too often these days because telnet and nc don’t get installed.”

RecommendsComment from 11 Feb 2026 in “The Day the Telnet Died”

“CLIs, cURL, and other shell tools are composable and discoverable.”

RecommendsComment from 23 Jan 2026 in “Composing APIs and CLIs in the LLM Era”

“for a project that has a quite good reputation, I think the burden of proof is on you”

RecommendsComment from 22 Jan 2026 in “We will ban you and ridicule you in public if you waste our time on crap reports”

“if any program has been the standard for doing this kind of thing for a long time it's curl”

RecommendsComment from 7 Dec 2025 in “Copy-Item is slower than File Explorer”

“Given curl, jq, and awk, you can create a quick MVP client for almost any api”

RecommendsComment from 6 Dec 2025 in “Perl's decline was cultural”

“What does software look like when it's developed out of passion purely for the improvement to the world? Curl, linux, git.”

RecommendsComment from 5 Dec 2025 in “The long wait is over, Ganymede has arrived”

Counts come from 1,795,640 Hacker News comments, November 2025 to November 2026. How we count. Report a mistake.