Up Next

In Progress

Released to Beta

Released

Main Roadmap

Currently these are the only options for window management. On MacOS many rely on keyboard shortcuts to manage their windows (and the “native” way is by creating shortcuts that map to window actions supported by the app.Yaak:<img src="https://fb-usercontent.fra1.cdn.digitaloceanspaces.com/0194fedf-1188-76a6-864c-6a302be9e6bc.png" data-width="100%" data-align="left">Other app: (Zed for example): <img src="https://fb-usercontent.fra1.cdn.digitaloceanspaces.com/0194fee0-b05a-720a-8bae-c58a975a0e64.png" data-width="100%" data-align="left">

Feature

Improvement

MacOS - Window app management

Mihael Berčič

When I use Yaak to POST a request to AWS Beckrock Claude model with a modelId “us.anthropic.claude-haiku-4-5-20251001-v1:0“, it gives a error “"message": "The request signature we calculated does not match the signature you provided. Check your AWS Secret Access Key and signing method. Consult the service documentation for details.\n\nThe Canonical String for this request should have been\n'POST\n/model/us.anthropic.claude-haiku-4-5-20251001-v1%3A0/invoke\n\ncontent-type:application/json\nhost:bedrock-runtime.us-east-2.amazonaws.com\nx-amz-content-sha256:UNSIGNED-PAYLOAD\nx-amz-date:20251127T164007Z\n\ncontent-type;host;x-amz-content-sha256;x-amz-date\nc738119b0763a280b66595797a8841a150de06c92412d06c18c5b56c1d29d6b8'\n\nThe String-to-Sign should have been\n'AWS4-HMAC-SHA256\n20251127T164007Z\n20251127/us-east-2/bedrock/aws4_request\n86c91c01e62ae09c21c13a4b64cb26c640133f1514a43202345c27815f2e1056'\n"“Seems the colon in the modelId was not correctly encoded. <img data-width="100%" data-align="left" alt="" data-featurebase-content-key="66d7e6a0faf4138b84c38452/post/69288df8a83fae61d6fb4d42/019ac666-c15f-7a1d-8f73-13c60ef8d84f/b64u-eWFhay1jbGF1ZGUuanBn.jpeg" data-featurebase-content-filename="yaak-claude.jpg" src="https://66d7e6a0faf4138b84c38452.featurebase-attachments.com/c/post/69288df8a83fae61d6fb4d42/019ac666-c15f-7a1d-8f73-13c60ef8d84f/b64u-eWFhay1jbGF1ZGUuanBn.jpeg?X-Amz-Expires=3600&amp;X-Amz-Date=20260129T210000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260129%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=a689d6264654632efc2a698199a059371269f869d72c719e175da2a41cb912ea">

AWS Sign V4 calculation error

jiejiecn

Add support for bi-directional Websocket APIs

Добавьте поддержку двунаправленных API Websocket

Поддержка Websocket

Websocket Support

Greg Schier

Add support for OAuth 2.0, which will guide the user through the login flow in a web view.

Додайте підтримку OAuth 2.0, яка допоможе користувачеві пройти процедуру входу у веб-перегляді.

Підтримка OAuth 2.0

OAuth 2.0 support

Add the ability to sync a workspace to a local directory, for use with local Git and other tools like Dropbox.

Local Directory Sync

It should be possible to configure auth and header defaults at the folder/workspace level.

Folder / Workspace Inheritance

Would be great if Yaak supported mTLS client certificate authentication. For my use-case it would make sense to have this configurable either globally linking each cert to a specific host (similar to how postman does it) or maybe per-environment.

Было бы здорово, если бы Yaak поддерживал аутентификацию по клиентскому сертификату mTLS. Для моего случая имело бы смысл настраивать это либо глобально, привязывая каждый сертификат к определенному хосту (подобно тому, как это делает postman), либо, возможно, для каждого окружения.

Поддержка аутентификации сертификата клиента mTLS

Support mTLS Client Certificate Authentication

KF-AK

Microsoft has made it very difficult to sign code these days, requiring HSM (hardware security module) to do so. The major clouds are currently working on providing easy-to-use tools for this, so hopefully it will be easier soon.I'm holding off on this for now, unless it becomes a priority for many users.

Sign Windows Release

I like the convenience of having env groups but I find myself changing them all the time as I work in different projects. I would love to have my env group change whenever I change folder or directly pin the env groups to each folder.

Folder Environments/Variables

Tony Jara

Nice app, really like the clean and responsive GUI and (of course) local-only. I'm alot for the low-level though, one huge improvement (IMHO) would be the possibility to have the entire request/response flow in the results-tab in plain-text, as opposed to only seeing the response. Maybe it is already possible to show the request (?) but I could not find a setting for it.Ideally, I would have loved if it was possible to show request(headers+body), followed by response(headers+body), as plain-text similar to how 'curl -v' does it.Keep up the good work!

View entire request response flow

Cole Render

Since Environments seem to be at the collection level, it would be nice to import Postman Environments so they can be imported independently from the collection.

Import Postman Environments

Ashley Englisch-Spinney

Auto-generate visual docs for any GraphQL endpoint

GraphQL Documentation Explorer

All data is currently stored unencrypted in a SQLite database. Since users often store sensitive information, we should have a way to encrypt this on disk using something like <a href="https://github.com/iotaledger/stronghold.rs" rel="noopener noreferrer" target="_blank">https://github.com/iotaledger/stronghold.rs</a> or <a href="https://github.com/hwchen/keyring-rs" rel="noopener noreferrer" target="_blank">https://github.com/hwchen/keyring-rs</a>

Secrets Encryption

Something like this actually. <a href="https://insomnia.rest/plugins/insomnia-plugin-quicky-fake-data-generation" rel="noopener noreferrer" target="_blank">https://insomnia.rest/plugins/insomnia-plugin-quicky-fake-data-generation</a>

Fake data generator

Oscar Ruiz

Just a suggestion if it would be possible to allow a custom font to be configured for the editor alongside the existing Editor Font Size setting?

Custom editor font

Mike Bowering

Migrating a collection from Postman to kick the tires here at Yaak. With Bearer Tokens, how do I map the following values from Postman to their equivalent in Yaak:<ul><li>Algorithm</li><li>Secret</li><li>Payload</li></ul>See screenshot<img src="https://fb-usercontent.fra1.cdn.digitaloceanspaces.com/0191e6d4-8a8c-76b5-932e-c82f751a5a0c.png" data-width="100%" data-align="left">Thanks in advance

JWT Authentication

SJordan

You should be able to pull values from a response's headers/body in order to use in other requests (like variables)

Reference Response Values in other requests (chaining)

Add the ability to extend Yaak with plugins.Easy things to support out of the box:<ul><li>Themes</li><li>Request/Response hooks</li><li>Importers</li></ul>Things to come later<ul><li>Authentication handlers</li><li>UI menu items</li><li>etc</li></ul>

3rd-party Plugins

It would be nice to have the option in environments to clone an existing environment.At the moment you can't clone environments but often you're going to want the same keys in different envs so adding two options Clone, and Clone without values would be very useful.Clone; would create a new env with the same keys and valuesClone without values; would create a env with the same keys but default the values to empty read to be populated<img src="https://fb-usercontent.fra1.cdn.digitaloceanspaces.com/1725641119145-2c78dff8de5a9bb5.png">

Add clone/duplicate option to env

Timothy Cole

We are using Yaak to successfully work with a public API. One end point redirects to Amazon s3 after auth to return a file and this now fails. It did work in 2026.1.1 I do not know if it is related to another issue we have with Yaak and authentication on this API. It authenticates on Basic auth with the api key going in the username field and a blank password field (eg ‘apikey:’). When creating a new request in Yaak it will never work first time until you have either entered and removed text in the password field for Basic auth or set an env in there such as PASSWORD and left the value blank in Environment variables. Curl requests copied out from these broken Yaak requests match identically those that work and if imported also require manipulation of the password field/textbox. Duplicated requests within Yaak work first time.

Strange basic auth behaviour in 2026.1.2

Adam Munton

The response timeline view (both visual and raw format) don’t show request URL query parameters. This applies to manually added parameters, as well as through the Params tab.<img data-width="100%" data-align="left" alt="" data-featurebase-content-key="66d7e6a0faf4138b84c38452/post/69727715702522d1f7070fcb/019be720-969f-7882-ba7d-36b8b83d4feb/b64u-MjAyNi0wMS0yMl8yMC0xMS0xMl95YWFrLWFwcC5wbmc.png" data-featurebase-content-filename="2026-01-22_20-11-12_yaak-app.png" src="https://66d7e6a0faf4138b84c38452.featurebase-attachments.com/c/post/69727715702522d1f7070fcb/019be720-969f-7882-ba7d-36b8b83d4feb/b64u-MjAyNi0wMS0yMl8yMC0xMS0xMl95YWFrLWFwcC5wbmc.png?X-Amz-Expires=3600&amp;X-Amz-Date=20260129T210000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260129%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=f3aaeb150d115e57a1019a067e5ee2eadc2484a458f953cec44f89072b3f78d4">

Timeline (debug) view doesn't show URL query parameters

Kuba Szczodrzyński

(thanks for all your work on this app!) First of all, I love that Yaak keeps a response history - this was one of my gripes with HTTPie. I am wondering if its intentional that the response history does not store the request data in sync with the response data. Like if I select an older response from the history, there’s no telling what the actual request was that lead to that response - it doesn’t necessarily have to be what is currently on the request editor pane. I think that disconnect is a bit confusing. But I don’t know if thats intentional - perhaps the way most people use this is to store histories of the exact same request, and if they wanted to modify even one value, they make a fresh copy of the request?The other thing is I think it would be super useful to show some kind of timestamp type information about when that response in the history was made. Either in the drop-down, or in the header text above the response where it says the status, query time, response size. Could be one of those present-relative strings to keep it as short as possible if thats a concern - like 3m ago, or 2h30m ago, etc

Question

Save Request Data for Response History

Anirudh Thommandram

When importing non-Yaak files, it should be possible to import the same spec again and have it update the workspace, instead of always creating a new one.

Update current workspace during import

Viktor Kojouharov

In the request history <a target="_blank" rel="noopener noreferrer nofollow" class="link" href="https://share.zight.com/Apud4WZ7">https://share.zight.com/Apud4WZ7</a> - add a timestamp, something similar to Insomnia: <a target="_blank" rel="noopener noreferrer nofollow" class="link" href="https://share.zight.com/bLuLEL1G">https://share.zight.com/bLuLEL1G</a> It would be nice to see a small time/date next to each request.

Request history, time stamp

Steve

In the menu of import, would be useful if that Cmd+V worked

Import OpenAPI without file - paste json from clipboard

Max Katz

I usually have more than one query in one request. It would be nice to have an option to define what query should be executed.I can add <code>operation name</code> to request, when I switch to <code>other</code> type of request. So it's just the UI problem.

Allow to define operation name in GraphQL

jonasnobile

Current Issue: Currently, Yaak only supports Ctrl+. (Ctrl + period) for inserting environment variables, and this shortcut cannot be customized. The keyboard shortcuts are also not well documented within the app itself (only available on the website).Requested Features:<ol><li>Customizable keyboard shortcuts - Allow users to modify existing shortcuts, especially the environment variable insertion shortcut (Ctrl+.)</li><li>In-app shortcut documentation - Display available shortcuts within the app settings or help section, not just on the website</li><li>Shortcut preferences panel - Add a dedicated settings section where users can:<ul><li>View all current shortcuts</li><li>Modify existing shortcuts</li><li>Set custom shortcuts for frequently used actions</li></ul></li></ol>Use Case: Different users have different workflow preferences and may have conflicts with existing shortcuts in their system or other applications. Being able to customize shortcuts would greatly improve the user experience and productivity.Priority: Medium-High This would significantly improve accessibility and user workflow customization.

Feature Request: Customizable Keyboard Shortcuts

H2RO

Allow support for importing requests in the HAR format.

import HAR format

ulisses-cruz

I would like to be able to use params or variables scoped to a single request. Maybe this is already possible, but I can’t seem to work it out. I like to use request variables as I find it easier to quickly change a variable, rather than directly changing the json body. A use case might be that I have a <code>resource-id</code> defined in a environment, and defined as a request variable (can be enabled / disabled). In this case, priority should be 1 - request variable, 2 - environment. A work around is using environments, but i often have use cases where it wouldn’t make sense to define all my variables in a environment as it would get long and unwieldy. <img data-width="100%" data-align="left" data-featurebase-content-key="66d7e6a0faf4138b84c38452/post/68801ecc2edac8f0bd24ae75/01983470-f19d-7f89-ab6f-1235a17aad28/b64u-aW1hZ2UucG5n.png" src="https://66d7e6a0faf4138b84c38452.featurebase-attachments.com/c/post/68801ecc2edac8f0bd24ae75/01983470-f19d-7f89-ab6f-1235a17aad28/b64u-aW1hZ2UucG5n.png?X-Amz-Expires=3600&amp;X-Amz-Date=20260129T210000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260129%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=4aaa887bba574fe2b1c94f90a8fd3459ee4634d2535285d31c13645b2c501176" data-featurebase-content-filename="image.png"><img data-width="100%" data-align="left" data-featurebase-content-key="66d7e6a0faf4138b84c38452/post/68801ecc2edac8f0bd24ae75/01983471-1461-7560-a1a1-5d5d8b59610b/b64u-aW1hZ2UucG5n.png" src="https://66d7e6a0faf4138b84c38452.featurebase-attachments.com/c/post/68801ecc2edac8f0bd24ae75/01983471-1461-7560-a1a1-5d5d8b59610b/b64u-aW1hZ2UucG5n.png?X-Amz-Expires=3600&amp;X-Amz-Date=20260129T210000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260129%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=17377b425226cd1f791a16ef7e1f6588006fa7892757f7c0116b1161937d659c" data-featurebase-content-filename="image.png">See this implementation in hopscotch as an example.<img data-width="100%" data-align="left" data-featurebase-content-key="66d7e6a0faf4138b84c38452/post/68801ecc2edac8f0bd24ae75/01983477-6d3b-70f8-bca2-bb3922a258eb/b64u-aW1hZ2UucG5n.png" src="https://66d7e6a0faf4138b84c38452.featurebase-attachments.com/c/post/68801ecc2edac8f0bd24ae75/01983477-6d3b-70f8-bca2-bb3922a258eb/b64u-aW1hZ2UucG5n.png?X-Amz-Expires=3600&amp;X-Amz-Date=20260129T210000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260129%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=f5cbea3b4f32767266e5b9b9561e54a80f77098ac455ebd4d9db0c6ddadf250e" data-featurebase-content-filename="image.png"><img data-width="100%" data-align="left" data-featurebase-content-key="66d7e6a0faf4138b84c38452/post/68801ecc2edac8f0bd24ae75/01983477-89b2-701b-bdbd-2ec8674474af/b64u-aW1hZ2UucG5n.png" src="https://66d7e6a0faf4138b84c38452.featurebase-attachments.com/c/post/68801ecc2edac8f0bd24ae75/01983477-89b2-701b-bdbd-2ec8674474af/b64u-aW1hZ2UucG5n.png?X-Amz-Expires=3600&amp;X-Amz-Date=20260129T210000Z&amp;X-Amz-Algorithm=AWS4-HMAC-SHA256&amp;X-Amz-Credential=DO801TYC4FCVNNEKURKM%2F20260129%2Ffra1%2Fs3%2Faws4_request&amp;X-Amz-SignedHeaders=host&amp;X-Amz-Signature=14d0cebb1072136372bf19da2dc38d7b7be86629fa600b83e5e5afa29d1f5ed1" data-featurebase-content-filename="image.png">

Allow params / variables to be scoped per request

Jack McQuinn

For the 1Password integration, it would be good to have a global config to configure the Service Account token. Plugins should be able to define config args, which would show up in the main app settings somewhere.

Add global config for plugins (1Password)

When creating request inside closed folder, the folder will not open making some confusion on where is the created request.

Open parent folder on create request

Pannawich Lohanimit

Help Center

Improved

Fixed

Website

yaakapp

Needs Triage

Under Consideration

Backlog

Needs Reproduction

Pending Release

Closed

Won't Fix

Stale

Resolved

Troubleshooting

Accounts

Please include details such as OS, app version, reproduction steps, etc, when relevant