Changelogs

​

🚀 New

• You can now set a Content-Type on individual form-data fields, letting you mix JSON metadata and file parts in a single request - Postman collections that use per-field types also import without data loss.
• Right-clicking a selection in the response body gives you a Set as variable option, so you can save a response value directly to a variable without opening the script editor.
• The GraphQL editor now has a Schema tab where you can load a schema from introspection, a URL, or a local file to power query autocompletion.
• The Collection Runner now has a Performance tab for starting and reviewing BrowserStack load tests against your collection’s requests.

​

✨ Improvements

• App Settings gains an About section with version and system info, a toggle to automatically attach a no-cache header to HTTP and GraphQL requests, and now remembers which settings section you last visited within the session.
• The Scripts tab now shows Safe, Developer, and Default execution mode options per collection and per request on all current desktop builds, with no extra setup required.
• Script execution in Developer mode is now 4.4 times faster, bringing it to parity with Postman’s script runner on the same test workload.
• Attempting to import a collection that exceeds the size limit now shows the actual converted size and the limit, instead of a generic error - retrying the same file will not help, and the message says so.
• Pasting a malformed cURL command now shows a specific reason, such as an unclosed quote or a missing line-continuation backslash, rather than a generic parse error.

​

🐛 Fixes

• Cookies scoped to a parent domain are now correctly sent when making requests to subdomains, fixing sessions that were captured but then silently dropped on every request.
• Alert banners that have no dismiss action no longer show a close button that does nothing when clicked.
• On a local file-system project, saving or renaming a request with characters not allowed by your file system now shows the exact reason instead of silently failing, and the rename input blocks invalid names before you can confirm.
• Sending requests from a local file-system project on desktop no longer fails silently due to a file-system bridge error that occurred since the bulk-read compatibility feature became available.

​

🐛 Fixes

• System proxy support now correctly uses the proxy’s own scheme (HTTPS proxies connect over TLS instead of plaintext), raises an explicit error for SOCKS proxies rather than silently bypassing them, and logs a reason when the system proxy resolves to nothing.
• Importing a Postman collection that contains a folder or request with no name no longer fails - those records are given a default name and the import completes.
• Clicking ’+ Add More’ in the request headers or query parameters table no longer marks your request as unsaved until you actually type something into the new row.
• The project-switching overlay now correctly shows the name of the project you are switching to, not the project you are leaving.
• The AI assistant no longer hangs permanently when a single response requires reading multiple things at once - all parallel lookups are now resolved together before the reply continues.

​

🐛 Fixes

• Requests whose body uses a variable immediately followed by a closing brace (such as { "id": {{userId}}}) no longer fail with a template parse error before sending.
• Intentionally blank auth credential values (API key, Bearer token, or Basic auth) are now forwarded to the server instead of being blocked with a client-side error, so you can test how your server responds to missing credentials.
• Responses with a Content-Encoding header but no body (such as a 204) no longer produce a false “Failed to decompress response body” error and now display correctly.
• When a configured proxy hostname cannot be resolved, the error now identifies the proxy as the source of the failure instead of showing an unfamiliar hostname you did not type in the URL bar.
• The Certificates and Proxy settings pages are now always accessible regardless of your chosen execution target, and requests that require a client certificate now show a clear explanation when run via Cloud Agent instead of failing with a generic handshake error.

​

🚀 New

• You can now check for updates on demand from the app menu on macOS or the Help menu on Windows and Linux, and see a confirmation when your app is already on the latest version.
• Each mock in Mock Server now has a Logs tab showing every incoming request, with filters for status, match result, and time range, plus request and response details on expand.
• A new Resources page under Organization in Settings lets admins view and manage policies for their organization.
• Admins can now set an allow or deny policy for external packages from the Organization Resources settings page, controlling which npm packages members can install and use in scripts.
• When your organization restricts scripts to Safe mode, the mode control now shows the restriction with an explanation rather than appearing available and failing silently when you try to switch.

​

✨ Improvements

• The desktop app now detects and downloads new releases while it is running, so a version published while you are working appears as a restart prompt without requiring you to relaunch first.
• Your organization’s package policy is now enforced at install time and when scripts run, with a message that names the blocked package and attributes the restriction to your organization.
• Running a collection with the CLI in Developer mode now requires you to be signed in, so your organization’s script execution policy applies in CI and other automated contexts.

​

🐛 Fixes

• The cloud connection icon in the agent picker now accurately reflects whether your cloud connection is healthy rather than always appearing as unchecked.
• The AI assistant no longer retries indefinitely when asked to send a GraphQL request that has no query, and now offers to save your work rather than directing you to a keyboard shortcut.
• Custom packages that use ES module import syntax for external libraries now prepare correctly and respect the organization package policy, instead of silently bundling the library or failing to build.

​

🚀 New

• The chat assistant can now send a request on your behalf and read its response, so you can ask it to run a request and explain what came back.

​

✨ Improvements

• Console log entries now show whether they came from your pre-request or post-response script, making it easy to tell which script produced a given line when both phases log to the same panel.

​

🐛 Fixes

• setTimeout and setInterval in pre-request and post-response scripts now work correctly in all scripting modes - previously they resolved immediately or did nothing in Safe script mode.
• Fixed multiple controls in the web app that appeared interactive but silently discarded your input, including the Developer script mode toggle, multipart file attachment picker, and per-protocol settings; rq.cookies access in web scripts is also restored.
• The Scheduled Runs list now shows a Retry button when it fails to load, so you no longer need to close and reopen the collection tab to recover.
• Importing a collection no longer fails in environments where corporate security tools block background browser workers - the app now falls back to parsing automatically so imports complete as expected.

​

🚀 New

• You can now route requests through a cloud-hosted static IP, making it possible to test APIs that restrict access by IP address without changing your local network or firewall configuration.
• OAuth 2.0 works in the web app across all grant types, including authorization code, PKCE, client credentials, password, and implicit flow.
• You can now run a full collection in the web app, with support for iterations, delays, data files, and error-handling modes.
• Digest authentication is now supported when sending requests through the cloud path.

​

✨ Improvements

• Cloud requests now follow redirects and respect per-request settings such as timeout and SSL verification, matching the behavior you get on local requests.
• App settings are now editable in the web app, letting you configure script timeouts, SSL verification, and protocol defaults without the desktop app.
• Desktop app updates now download only the portions of the package that changed, reducing typical update download sizes by around 60-70%.

​

🐛 Fixes

• Creating or importing requests that contain null characters in their content no longer fails with a validation error.
• The to.have.header(name, value) assertion in test scripts now correctly validates the header value in all scripting environments, not just the header’s presence.
• Disabled variables no longer appear inside scripts, so toggling a variable off now takes effect consistently regardless of which scripting mode is active.
• Scripts attached to incoming gRPC messages now execute correctly, fixing a bug where they appeared to do nothing after any live data update.
• The app now starts correctly when it finds saved data in an unexpected format from a previous version, rather than showing an error screen on the first launch after upgrading.

​

🚀 New

• The AI chat assistant can now write test scripts for your requests and save the changes directly, without leaving the chat.

​

🐛 Fixes

• Renaming a collection variable’s key no longer causes a server error.
• Several gRPC fixes: pasting a grpcurl command now imports correctly, timeout errors show the configured duration, and setting a timeout to 0 resets to the transport default instead of failing immediately.
• Importing cURL commands copied from Windows Command Prompt, PowerShell, and other tools now works correctly, including commands with curly quotes that previously imported a broken URL without warning.
• Request failures now show the correct error message and are properly recorded in History and DevTools, instead of showing a misleading ‘Check the URL’ prompt.

​

🐛 Fixes

• Setting Request Timeout to No limit now truly removes the timeout cap, so long-running requests no longer fail unexpectedly after 5 minutes.
• Variable names containing special characters such as parentheses, dots, or spaces now resolve correctly in request templates, and errors caused by a bad variable name no longer appear as pre-request script failures.

​

🚀 New

• The DevConsole now includes log-level filters (Log, Info, Warning, Error), a timestamps toggle, copy-all and per-entry copy buttons for both the Console and Network panels, and a per-entry toggle to switch between the formatted view and the raw HTTP wire log.
• You can now mark a cloud mock as Private, which generates a secret token that callers must include in requests to access it - the mock URL stays the same, but requests without the token receive a 404.

​

🐛 Fixes

• Connection errors such as DNS lookup failures or TLS handshake issues now appear in the DevConsole by default, so you no longer need to manually enable network sources to find out why a request failed.
• Collection runs using OAuth 2.0 now correctly carry variable values set by pre-request scripts from one request to the next, so you no longer need to run a collection multiple times for earlier script outputs to reach later requests.
• Typing in the middle of a variable name field no longer jumps the cursor to the end on every keystroke, making existing variable names editable as expected.
• The ‘Use system proxy’ setting now correctly routes requests through your OS-configured proxy when ‘Use environment variables’ is also enabled, fixing an issue that caused requests to bypass corporate proxies silently.

​

🚀 New

• You can now use xml2Json as a bare global in request scripts to parse XML responses, matching the scripting environment you may know from Postman.
• You can now write an On Message script for gRPC server-streaming and bidirectional calls - the script runs once per received message and its assertions appear individually in the collection runner.
• You can now import a gRPC request by pasting a grpcurl command, the same way HTTP requests can be imported from a cURL command.

​

🐛 Fixes

• gRPC server reflection now uses the authentication credentials you have configured on the request, so reflection works correctly against servers that require auth.

​

🚀 New

• Your pre- and post-request scripts now have access to CryptoJS (crypto-js) as a built-in global, with no require call needed.
• Lodash is now available as _ in your pre- and post-request scripts without requiring it first.
• Importing an OpenAPI spec now lets you create both a collection and a mock server in one step.
• When you save a request example, its endpoint is now automatically added as a route in your mock server.

​

✨ Improvements

• You can now reach App Settings from a dedicated button that is always visible in the header, without needing to open a menu.
• When importing a Postman collection that contains some malformed entries, Requestly now imports everything it can parse and shows you a list of items that were skipped, instead of rejecting the whole file.
• cURL imports now correctly handle digest and NTLM auth, multipart form data, and no longer include curl’s automatic Accept and User-Agent headers in your imported request.
• Duplicating a request now copies its advanced settings alongside it, and WebSocket and Socket.IO handshake header values now support variable and vault references.
• The Visualize button now shows a highlighted state when the visualization panel is open, so you can tell at a glance whether it is active.
• The desktop app now keeps its theme in sync with your OS color scheme, so system dark and light mode preferences are reflected consistently across the app.

​

🐛 Fixes

• Importing a large local project no longer fails silently with no error or progress shown.
• gRPC requests on desktop now respect your OS certificate store, and disabling TLS verification correctly skips the full certificate chain check.
• Calling rq.visualizer.clear() in a post-response script now correctly clears any visualization that a pre-request script set.
• The desktop app now recovers automatically if the main window fails to load at startup, instead of appearing stuck.
• Visualizations now render with the correct colors for your current light or dark theme.
• Saving a request on Windows with OneDrive-synchronized project folders no longer fails with a directory error.
• The AI assistant no longer repeats the same lookup in a loop when you ask a question from a collection tab.

​

🚀 New

• You can now generate a cloud mock server from any collection in one click - every request becomes a route and each saved example becomes a served response.
• Scripts can now use rq.visualizer.set() in pre-request scripts, and rq.response.stream gives you the raw response body as a Buffer for reading binary data, both matching Postman behavior.
• When you upload a file using the wrong importer, the app now detects the actual format and lets you switch to the correct importer in one click without re-uploading the file.

​

✨ Improvements

• Import warnings are now shown only on the result step and grouped by type, so each kind of issue appears once instead of repeating across multiple steps.
• The scheduled run creation form no longer shows a pre-flight run count estimate, keeping the configuration focused on just the schedule settings.

​

🐛 Fixes

• Fixed an issue where scripts using rq.sendRequest or fetch would silently drop query strings, ignore your proxy and SSL settings, and return corrupted binary response bodies.
• Fixed three issues: exporting an environment with secret values now prompts for confirmation before downloading, a single over-long name no longer causes an entire Postman collection import to fail, and saving collection-scoped variables from example tabs now works correctly.
• When an import fails to save, you now see the actual HTTP status code and server response details instead of a generic ‘Unknown error’ message.
• The AI assistant now shows a specific error message based on what went wrong, instead of a single generic failure notice.
• Fixed the AI assistant’s chat input so that Enter sends your message and Mod+Enter inserts a new line.
• The AI assistant now shows a loading indicator when you switch to a conversation thread that is still loading its messages.
• Fixed an issue where the AI assistant could get stuck if a tool action was interrupted mid-session.

​

✨ Improvements

• The desktop app now installs custom script packages through a safer channel, closing a potential security gap without changing how packages work.
• The AI chat assistant now limits messages to 10,000 characters and shows a clear message when you send requests too quickly.
• When a project search finds no results, the message now names which team and local projects were searched, so you know exactly where to look.

​

🐛 Fixes

• Single-team accounts now appear correctly in the team switcher, and team memberships are cleaned up when a user is removed from a team.

​

🐛 Fixes

• Fixed a bug where the embedded terminal could show ghost tabs or connection errors on recently released desktop versions.
• Fixed an issue where importing certain valid OpenAPI specifications would fail; the importer now succeeds on any spec that passes initial parsing, extracting what it recognizes rather than rejecting the whole file.

​

🚀 New

• You can now render a custom HTML visualization of response data by calling rq.visualizer.set(template, data) in a post-response script, then selecting Visualize in the response panel. Use Mod+Shift+Enter to send and visualize in one step.

​

✨ Improvements

• The Sharing tab now displays a note clarifying exactly what your documentation share links include (read-only docs) and exclude (scripts and auth), so you know what recipients will see before you share.

​

🐛 Fixes

• The desktop app now blocks secondary listeners from attaching to the background bridge, closing a gap where injected scripts could silently read all background service traffic, including stored secrets and credentials.
• Deleting all requests from a collection while the runner is open now correctly shows the empty state and disables the Run button instead of displaying stale entries from the deleted requests.

​

🐛 Fixes

• Importing a collection exported from the old Requestly app no longer rejects the entire file when individual requests are missing header or auth fields - valid requests are imported and any unrecoverable ones are reported by name.
• Script rq.sendRequest calls on desktop now honor your system certificate store, custom CA certificates, SSL verification toggle, and proxy settings, fixing silent failures on corporate or TLS-intercepting networks.
• Starting to rename a chat history thread and then dismissing the popover without saving no longer leaves that thread stuck in its rename input the next time you open chat history.
• Pressing the save shortcut immediately after editing a request body, query parameters, or script field now reliably saves your latest content instead of silently reverting to the previous value.
• Changing a query parameter’s type annotation (for example from “string” to “integer”) is now saved correctly and no longer reverts to the original type on reload.
• Running the Requestly CLI on Windows no longer fails with a JSON parse error caused by an incorrectly formatted internal build file.

​

🐛 Fixes

• The desktop terminal now supports multiple tabs again, restoring the ability to run separate terminal sessions side by side.

​

🐛 Fixes

• When you restore a tab for a request, collection, or environment that was deleted on another device or by a teammate, you now see a clear not-found message with a Close tab button instead of an infinite loading spinner.

​

🐛 Fixes

• Scripts using rq.sendRequest with a callback now correctly wait for the callback to complete, so environment variables set inside the callback are applied and test assertions run as expected.

​

🐛 Fixes

• You can now import OpenAPI specs that previously failed due to non-standard but commonly produced field formats, such as boolean required fields or shorthand type strings generated by real conversion tools.
• The desktop app no longer freezes or becomes unresponsive when you open or create a local project with a large amount of saved data.
• The CLI no longer crashes on startup when running under Node 18, restoring all commands including collection run.
• The scheduled run form no longer shows requests from a previously viewed collection when you open it in a different collection.
• Sending a request immediately after editing the body now correctly uses your latest edits instead of the version saved a moment before.

​

🚀 New

• The AI Assistant now has an auto mode that skips individual approval prompts for tool actions; you can toggle it with Shift+Tab or by clicking the status indicator in the chat panel.
• You can now open the AI Assistant directly from the app footer.
• A read-only keyboard shortcuts reference overlay is back, showing all your shortcuts at a glance.

​

✨ Improvements

• Scheduled Runs now shows an Active/Paused badge on each schedule in the list, lets you search run history by run ID, and opens the Tests tab first when a run finishes with failures.
• The request Settings tab now shows an indicator dot when you have active overrides, offers an inline retry button when a request fails due to an SSL or parsing error, and displays a settings summary in the collection runner before you start a run.
• Your desktop login session is now encrypted when stored on disk, so it cannot be read if someone accesses your local files.
• For teams using TestHub, member and access management is now under Project Settings in a Members and access section and opens in your system browser.

​

🐛 Fixes

• The auto-generated Content-Type header is no longer added when you have already set one explicitly on the request.
• Saving a request as new now carries over the description and clears leftover data from body tabs you are not actively using; requests skipped by a pre-request script now show a dedicated skipped panel instead of a blank response.
• Variable names are now trimmed of surrounding whitespace when you save them.
• Editing the URL bar no longer duplicates existing query parameters; matching parameters are now updated in place.
• MQTT connections now work when the broker URL is a single variable placeholder such as .
• Message editors in WebSocket and Socket.IO requests now scroll correctly when working with large payloads.
• The AI Assistant panel no longer flickers or reloads your conversation when you close and reopen it.
• The duplicate variable name warning now correctly treats names that differ only by letter case as distinct.
• Cmd/Ctrl+0 (Reset Zoom) is now correctly treated as a reserved shortcut and cannot be rebound in keyboard settings.
• The Git panel now shows the correct branch name on empty repositories, auto-fetches in the background to keep the behind counter accurate, and hides the Push button until the repository has at least one commit.
• Importing an OpenAPI collection no longer fails on long example names, and validation errors now include the field names needed to identify the problem.

​

✨ Improvements

• The desktop app’s initial load is now up to 76% smaller on the wire, making startup noticeably faster.
• Scheduled run results now show the actual headers that were sent, including values resolved by pre-request scripts and auth, instead of unresolved template placeholders.

​

🐛 Fixes

• Collapsing and re-expanding the sidebar no longer resets your open editors, response panels, or tab state.
• In scripts, setting a variable to null or undefined now clears it instead of storing the literal string, matching Postman’s behavior.
• The light, dark, and system theme options now work correctly on the sign-in screen.
• Pressing Cmd+F (or Ctrl+F) while editing in the request body or a scripts editor no longer steals focus to the sidebar search.

​

🚀 New

• The AI assistant can now read and edit your requests, collections, and environments - when it suggests a change, you see an inline diff to accept or reject before anything is saved.

​

🐛 Fixes

• Fixed several WebSocket and Socket.IO reliability issues, including a freeze when receiving large payloads, query params no longer syncing with the URL bar, vague connection failure messages, and a missing Cancel button during connection.

​

🚀 New

• Signing up is now required to use the app, and the onboarding experience has been redesigned to guide you through initial setup more clearly.
• You can now switch between your teams directly from within the app using the new in-product team switcher.
• A new Scheduled Runs tab in the Collection Runner lets you discover and manage scheduled runs per collection alongside a Manual run sub-tab.
• You can now create and configure scheduled runs directly from the app, with settings for schedule frequency, retry policy, and request selection.
• Scheduled runs now include a history list showing past executions and a drill-down view with per-request results.
• You can pause, resume, delete, or immediately trigger a scheduled run directly from the run list.
• A re-run button lets you re-execute a previous scheduled run, and an inline config pane lets you adjust settings without navigating away.
• Scheduled runs can now automatically retry failed requests based on a configurable retry policy and attempt limit.
• The scheduled run detail view now shows per-request results in a two-pane layout with headers, payload, response, and test tabs, and the create form has been reorganized with clearer sections.
• Scheduled run results are automatically uploaded to BrowserStack Test Hub for centralized test tracking.
• Each rq.test assertion in a scheduled collection run now appears as its own result in BrowserStack Test Hub instead of being grouped under a single request.
• You can now export and import scheduled run configurations using the REST API or the CLI.
• You can now manage scheduled runs from the command line using the new rq scheduled-run subcommands.
• When publishing a release in API Design, the version is now automatically derived from the info.version field in your OpenAPI spec.

​

✨ Improvements

• The team-switching overlay has been polished and is now hidden when you are working in a local project.
• Vault access from scripts is now disabled by default and can be re-enabled from the Vault settings page.
• Import warnings are now cleaner, with redundant low-value notices removed and the remaining ones made more actionable.
• In-progress scheduled runs now appear in the run history, and runs are ordered by when they actually ran rather than when they were created.
• Realtime and gRPC requests are now excluded from scheduled run request selection, preventing unsupported configurations from being saved.

​

🐛 Fixes

• A tooltip was covering the create-project button in the project switcher settings area, making it impossible to click.
• Switching the body type in an HTTP request no longer leaves behind stale values from the previous type.
• OpenAPI collections with XML request bodies now import correctly with the proper content type applied.
• The collection runner now correctly records and displays results from WebSocket, Socket.IO, and gRPC requests.
• Clicking ‘Try it’ on an example multiple times in quick succession no longer opens duplicate draft tabs.
• Adding a request to a scheduled run and saving it now works correctly, and the run detail view no longer renders broken components.

​

🐛 Fixes

• The sidebar toggle button now correctly reports its open or closed state to screen readers and other assistive technologies.
• The array variable type now only appears in the type picker when your installed desktop version supports it, preventing silent data corruption when scripts read or write array variables on older builds.

​

🚀 New

• You can now choose how a response body is displayed using the new format selector in the response toolbar, with options for JSON, XML, HTML, YAML, JavaScript, Markdown, Raw, Hex, and Base64.
• Variables now support an array data type, so scripts can store and retrieve real arrays with .first() and .last() instead of having them flattened to comma-joined strings.

​

✨ Improvements

• The API Docs publishing flow now shows Copy link and View actions in the success toast, the empty-state primary button highlights the most useful next step, and the Components Library in the API Design sidebar is collapsed by default.

​

🐛 Fixes

• Secret vault references in OAuth 2.0 and JWT Bearer auth fields now resolve correctly when sending requests, instead of being passed as literal template strings to the token endpoint.
• The Run via CLI command generated by the collection runner now uses the environment name instead of its internal ID for local projects, so the copied command works when you run it.
• Keyboard shortcuts rebound to punctuation keys such as semicolons, periods, slashes, and brackets now fire correctly after being configured in the desktop app’s shortcut settings.
• A security vulnerability in the desktop app’s git integration has been patched, and remote URLs are now validated to allow only standard schemes such as https, http, and ssh.

​

🚀 New

• You can now collapse the Collections sidebar to give your request editor more room, and restore it with a click or Cmd/Ctrl+B.
• A new Keyboard Shortcuts page in Settings on desktop lets you view all available shortcuts, reassign any of them directly in the list, and reset everything to defaults.

​

✨ Improvements

• Script errors in pre- and post-request scripts now show line numbers and column positions in the Response panel, DevTools console, and Collection Runner, so you can pinpoint mistakes faster.

​

🐛 Fixes

• Changing a team member’s role no longer fails with an error when the member has been invited but has not yet logged in.

​

🚀 New

• You can now delete all variables at once from the Environment, Global, and Collection variable tables using the new Delete All button, which asks for confirmation before clearing.
• Users who are not signed in now see a notification banner with a Sign in option, giving advance notice that a free account will soon be required.

​

✨ Improvements

• When a mandatory update is detected while the desktop app is running, the download now starts automatically so you can install it without any extra steps.

​

🐛 Fixes

• Fixed a bug where the Clone repository modal immediately closed after clicking Clone from the project switcher.
• The collection runner now executes requests in the same order they appear in the sidebar, including reorders made by dragging.
• Fixed a regression on desktop where the sign-in notification banner remained visible after logging in.
• Fixed the embedded terminal on desktop appearing as a blank panel, so it now correctly renders text using the app’s current light or dark theme.
• Fixed Quick Share links returning errors for visitors - shared links now load reliably.
• Fixed three Postman scripting issues: skipped tests no longer silently discard their function body, response body assertions now require an exact match instead of a substring match, and false warnings about unsupported Postman APIs have been removed.
• Fixed the desktop auto-update getting stuck on an error state after a download completed, by adding a verification step between download and success.

​

🐛 Fixes

• Requests with an empty body no longer send a spurious Content-Type header, preventing failures on servers that reject unexpected content types.

​

🐛 Fixes

• Deleted specs, components, and linked specs in API Design no longer reappear in the sidebar after a page reload.
• Using ‘Save as new’ on an HTTP or GraphQL request now carries all Settings overrides, including SSL verification, redirect policy, and timeout, over to the duplicate.
• Pre-request scripts that call rq.collectionVariables.set(), unset(), or clear() on a standalone request no longer abort the send with an error - the call is silently skipped and the request proceeds normally.
• Collection variables defined on a parent or ancestor folder are now visible to pre-request and post-response scripts, matching what you already see in the URL and header preview.
• Importing Postman collections now correctly infers the raw body content type from the Content-Type header when Postman’s format hint is missing, and the Body tab shows a warning when your selected body language and Content-Type header disagree.

​

🚀 New

• You can now sign in to your Git provider with an OAuth device-code flow, in addition to a personal access token.

​

✨ Improvements

• The API Client sidebar now shows a Git status indicator for Git-backed projects.
• Improved keyboard navigation across the app.
• Extended the scripting API with rq.response.headers accessors, and brought Safe-mode scripts to parity for rq.response.to.have.jsonSchema and the JSON body helpers.

​

🐛 Fixes

• Example “Try it” now resolves collection-level variables.
• Collection variable default values are now applied when exporting a collection to OpenAPI.
• Older Requestly exports that omitted query parameters, headers, or enabled flags now import correctly.
• Fixed an error when using “Go to source” after the source specification had been deleted.
• AI requests are now rate-limited per user to keep the service responsive.

​

🚀 New

• You can now create private, scoped share links for a single endpoint or folder in your published API docs, with optional password protection and an expiry, and revoke them at any time.
• You can now connect a GitLab account with a personal access token for Git-backed projects.

​

✨ Improvements

• Large collection trees that span multiple projects now scroll smoothly.

​

🐛 Fixes

• Fixed a freeze in single-line fields when a value containing line breaks was entered.
• Fixed Requestly-format imports that could fail to save, and the app now shows the actual reason when an import fails.
• Generated code snippets now render multipart file fields as file uploads.
• Fixed local projects occasionally reporting data as corrupted after a transient read failure; these reads are now retried.
• AI features now redact request and response bodies before any data leaves your machine for quality evaluation.

​

🚀 New

• You can now right-click items in the sidebar tree and open tabs to rename, duplicate, delete, and run other actions from a context menu.
• You can now copy, cut, and paste requests and folders, within a collection or across collections, using the right-click menu and the usual keyboard shortcuts.
• You can now add descriptions to requests and examples across every protocol, and they render in your published API docs.

​

✨ Improvements

• The request history list now loads and scrolls smoothly even with thousands of entries, and history search no longer stutters as you type.
• The Collection Runner and large request lists feel more responsive thanks to reduced re-rendering.

​

🐛 Fixes

• The desktop app now opens external links only over secure HTTPS connections and restricts in-app navigation to trusted origins, protecting you against malicious links.
• Desktop vault files are now readable only by their owner, so your stored secrets stay private on shared machines.
• Fixed a freeze in the API specification editor caused by an infinite render loop in the governance flow.
• The desktop terminal now closes its sessions when you delete a project, and new terminal sessions are limited to local projects.
• Fixed a server-side issue where saving role or permission changes at the same time could fail.
• Added safeguards that limit the number of concurrent import tasks per user and project, keeping imports reliable under load.

​

🚀 New

• When importing an OpenAPI file, you can now choose to create a collection, an API specification, or both together in a single step.

​

🐛 Fixes

• On Windows, the sign-in dialog now stays open and offers a “Copy the URL” option when your default browser fails to launch, so you can complete the login without getting stuck.
• Pasting a cURL command whose URL contains unencoded spaces now imports correctly instead of being rejected.
• Importing a Postman collection now correctly preserves query parameters defined in request examples.
• Signing up with an email and password now requires at least 8 characters, preventing accounts with weak credentials from being created.
• Adding a new route in the Mock Server now automatically selects it so you can start editing immediately, and the rule row controls are visually aligned.

​

🚀 New

• If your organization is subject to data-residency restrictions, you now see a clear compliance notice on sign-in with a sign-out option, instead of hitting an unexpected error.

​

🐛 Fixes

• Importing a Postman data-export ZIP no longer shows a false error for the archive metadata file bundled by Postman, and imports that finish with warnings now display a ‘What needs attention’ summary instead of a generic success message.
• Fixed a server-side issue that caused login failures and widespread errors when multiple users signed in at the same time.

​

🚀 New

• You can now click ‘View changelog’ in the desktop update notification to read what changed before restarting to install the update.

​

🐛 Fixes

• Fixed security issues in the desktop vault where a crash during startup could erase your stored secrets, vault folders were readable by other users on shared machines, and crafted symbolic links could affect files outside the vault.
• When adding a team member or resending an invitation fails, you now see the specific reason from the server instead of a generic error message.
• Fixed a bug in the desktop terminal where commands installed via login-profile tools (such as Homebrew, nvm, or Volta) were not found, and fixed a separate issue where the cursor would jump unexpectedly when resizing the terminal panel.
• Fixed an error that prevented ‘Update Collections’ from applying content changes when syncing a collection from an API specification.

​

🚀 New

• You can now open an embedded terminal in the Dev Tools panel of the desktop app, with support for multiple concurrent sessions in tabs.
• Each operation in the published API docs reader now has its own shareable URL, so you can link teammates directly to a specific endpoint.

​

✨ Improvements

• Press Mod+K while viewing published API docs to jump straight to the outline search field.
• Published API docs now render oneOf and anyOf schema compositions with clearly labeled sections, making complex request and response shapes easier to read.
• Schema property descriptions in published API docs now render markdown formatting, so code snippets, bold text, and links display as intended instead of as raw markup.
• Published API docs now correctly display response headers and link sections, and resolve schemas that are defined at the top level of your spec.

​

🐛 Fixes

• Proxy settings now show a clear validation error for out-of-range port numbers, automatically remove any http:// or https:// prefix you type in the host field, and require both username and password when authentication is turned on.
• Fixed an issue where triggering a scheduled run returned a permissions error immediately after signing in.

​

✨ Improvements

• Collection imports now show a real progress bar with live status instead of a bare spinner.
• Invalid project names are now flagged with a clear message before you create or rename a project, instead of failing afterward.
• Legacy Postman scripts that use deprecated variables now keep working in the default safe sandbox, with a deprecation warning instead of a silent error.
• In published API docs, the outline now highlights and follows the section you are reading as you scroll.

​

🐛 Fixes

• Markdown editing is now readable in light mode, with syntax markers that match your theme.

​

✨ Improvements

• Published docs render OpenAPI schemas more faithfully.

​

🐛 Fixes

• You can now unstage files in a brand-new repository that has no commits yet.

​

🚀 New

• View specs from multiple projects together in the Specs sidebar.

​

✨ Improvements

• Published docs now group endpoints by tag for easier navigation.

​

🐛 Fixes

• Viewer-role users no longer see create and edit actions they cannot perform.
• GraphQL request variables now keep their typed values intact when saved.

​

🚀 New

• Scripts gain a full request-execution namespace with setNextRequest, skipRequest, runRequest, and location.
• Scripts can now clear request headers for Postman parity.
• Scripts can now clear environment, global, and collection variables for Postman parity.
• Bulk-delete mock routes by path prefix.

​

✨ Improvements

• The API Design versions pane now shows documentation status and has a collapsible header.
• The Specs and Components sidebar is now collapsible and resizable.

​

🚀 New

• Configure proxy settings in the desktop app.
• Run a collection from the command line with a new Run via CLI option on the Collection Runner.
• Copy a request’s ID with a new Copy Request ID button in every protocol editor.

​

🐛 Fixes

• Fixed the URL field freezing when you switch tabs quickly.
• Fixed collection variables being incorrectly read-only in safe mode.

​

🚀 New

• Request capture now follows redirect hops and handles Digest/NTLM challenges and GraphQL introspection.
• Create multiple mock routes at once, including their nested responses and rules.
• Stash your Git changes from a new stash view, with indicators shown across the app.

​

✨ Improvements

• Scripts can now modify request headers in both scripting engines.
• The Git sidebar panel is tidier with collapsible sections, a change-count badge, and clearer error messages.

​

🐛 Fixes

• Importing a partial Requestly export now re-parents orphaned items so nothing goes missing.

​

🚀 New

• Cloning a repository now discovers and sets up any Requestly project it contains automatically.
• Resolve merge conflicts with a new two-way conflict resolution view.

​

✨ Improvements

• Scripts now run on a faster, more reliable safe-mode engine, including full support on Windows.

​

🐛 Fixes

• Fixed duplicate key-value row identifiers that could appear when loading a request.
• Fixed a false Body-tab indicator dot and corrected the skipped-request count in Run History.

​

🚀 New

• DevTools now captures OAuth token fetches that the app makes on your behalf.
• A new Git Providers settings page lets you connect accounts, and you can enter or update a personal access token mid-operation when authentication is needed.
• Create, switch, and pick Git branches directly from a branch picker.
• Browse and select GitHub repositories from a built-in repo picker.

​

✨ Improvements

• Search your projects and see them sorted alphabetically.

​

🚀 New

• You can now publish collection documentation and share it via a public reader page with public, internal, or password access.

​

✨ Improvements

• Scripts now show a deprecation warning when using old Postman-style identifiers.

​

🐛 Fixes

• Fixed four API client bugs across request and collection workflows.
• Fixed JSONPath navigation for bracketed keys and a missing duplicate-example notification.
• Local file moves now report all naming conflicts instead of failing silently.

​

🚀 New

• You can now download a response body directly to a file.
• Added Postman-like JSONPath filtering to the response Pretty view.
• Added a line-wrap toggle to the JSON Pretty view in the response viewer.

​

🐛 Fixes

• JWT auth now shows the signed preview token in auto-generated headers and query params.
• Long lists such as projects, mocks, and specifications now load every page instead of stopping short.
• Fixed key-value rows that could share an id and behave incorrectly.

​

🚀 New

• Binary response bodies are now preserved losslessly, with image previews in the response viewer.
• Added a Commits view with a commit-graph rail for Git-backed projects.

​

🐛 Fixes

• OAuth2 now shows the fetched token in the panel and the auto-generated Authorization header.
• Fixed several MQTT issues including auth on connect, a tab-close leak, and publishing with embedded variables.

​

🚀 New

• Added App Settings rows to configure eight default behaviors for HTTP and GraphQL requests.
• Added rq.sendRequest in scripts for parity with Postman’s pm.sendRequest.
• Added several quality-of-life improvements to the WebSocket and Socket.IO editors.

​

✨ Improvements

• Importers now show clearer, more accurate reasons when an import fails.

​

🐛 Fixes

• Imports no longer fail on partial legacy auth objects, placeholder cookies, or null key names.
• Fixed drag-and-drop reordering of collections reverting when items had tied ranks.

​

✨ Improvements

• Hardened sign-in and mock server handling against abuse.

​

🐛 Fixes

• Duplicate request headers that differ only in letter case are now collapsed correctly.

​

🚀 New

• The Tests tab now shows how many tests passed out of the total, with pass and fail color coding.

​

✨ Improvements

• Projects now open faster by deferring background data loading until it is actually needed.

​

🐛 Fixes

• Fixed several desktop app crashes during startup, shell loading, and when a config file was corrupt.
• Re-imported global variables now correctly merge instead of losing their global scope.
• Searching collections now shows a clear empty state when no results match.

​

✨ Improvements

• You now get a success toast when switching environments.
• The active history entry is now highlighted and its font matches collections.
• Template variables are now highlighted in HTTP and GraphQL examples.
• MQTT expanded timeline messages now show the retain flag.

​

🐛 Fixes

• GraphQL variables editor now accepts template tokens.
• Switching an MQTT request from v5 to v3 now correctly removes the Properties tab from the URL.

​

🚀 New

• HTTP and GraphQL requests now have a per-request Settings tab with values that can inherit from parent levels.
• Manage reusable message-body templates in a dedicated Message Templates library.

​

🐛 Fixes

• Fixed sending GET requests with a body over HTTP/2.
• Switching authorization type now correctly drops stale fields from the previous type.
• The Vault now surfaces the real reason when an operation fails.
• The WSDL import button now enables only when the URL matches a valid pattern as you type.

​

🚀 New

• Save and reuse WebSocket and Socket.IO examples.
• gRPC proto file content now persists across sessions and syncs to the cloud.

​

🐛 Fixes

• Fixed gRPC stream panel preview, trailer overflow, and reflection method reset issues.
• Saving an HTTP, GraphQL, or gRPC request as new now keeps it in the right collection.
• GraphQL Send is now blocked when the query body is empty.
• URL-bar encoding is preserved when you toggle a query parameter on or off.

​

🚀 New

• Reuse saved message templates, beautify XML, and get clearer connection-state feedback in realtime clients.

​

✨ Improvements

• Added a Skip link to onboarding.

​

🐛 Fixes

• Discarding or saving variable edits no longer leaves phantom rows behind.
• The authorization info banner now shows the correct text when an API key is placed in query params.
• URL fragments are now stripped from query-parameter parsing so they no longer pollute your params.
• Validation errors are now shown verbatim when saving, so you know exactly what went wrong.

​

🚀 New

• Build and send Socket.IO requests with a dedicated editor.
• Import environment variables directly from a .env file.
• Save and reuse MQTT examples on both cloud and local projects.
• Import and export WebSocket and Socket.IO requests in Requestly’s native format.

​

🐛 Fixes

• XML responses now keep leaf elements inline for easier reading.
• Scripts now preserve boolean and number types when reading values instead of converting them to strings.

​

🚀 New

• Connect a local project to Git directly inside the desktop app.
• MQTT requests can now be imported and exported in Requestly’s native format.

​

✨ Improvements

• MQTT message timelines now display byte-probed formats and MQTT v5 properties more clearly.

​

🐛 Fixes

• MQTT topic subscriptions stay stable and reconcile correctly when you reconnect.
• The JSON editor no longer flags placeholders as syntax errors.
• You can now select multiple files at once in the import drop zone.

​

🚀 New

• Added the WebSocket request editor with a live message timeline and connect/disconnect controls.
• MQTT requests can now be saved to cloud and local projects.

​

🐛 Fixes

• Collections now warn when you try to save an empty name in the overview editor.
• Renaming an item now blocks saving and shows an error when the name is left empty.
• gRPC error responses now preserve trailers and report the correct status.

​

🚀 New

• Added the MQTT request editor with message, topics, authorization, properties, and last will tabs.
• Added a keyboard shortcuts modal you can open from the Help menu or with Cmd+/.

​

✨ Improvements

• gRPC service discovery now supports importing a proto file.
• gRPC requests now support pre and post scripts and per-protocol editor autocompletion.

​

🐛 Fixes

• The collection runner now clamps out-of-range iteration and delay values and warns you.
• Fixed Mock Server showing blank responses and rule errors after editing.

​

🚀 New

• Added the Mock Server with a sidebar, editor, and drag-to-reorder for routes.
• You can now drag to reorder environment variables.

​

✨ Improvements

• Expanded the gRPC client with a config panel, authentication, custom metadata, and message template generation.
• Added grpcurl code generation for gRPC requests.
• Response header details now collapse progressively to fit narrower panels.

​

🚀 New

• Added an MQTT client for connecting to brokers and publishing messages.

​

✨ Improvements

• Exports to Postman and OpenAPI now carry over five additional authentication types.
• gRPC requests now support saved examples, variable interpolation, and persistence.

​

🐛 Fixes

• Inherited OAuth 2.0 authentication now resolves correctly and renders its config variables.
• Fixed a Windows issue where renaming files in a local project produced broken paths.
• Generated client code no longer percent-encodes your template variables incorrectly.

​

🚀 New

• Added AWS Signature v4 authentication with both live and presigned URL modes.
• Added NTLM authentication support on the desktop app.

​

✨ Improvements

• Added a report-issue entry to make it easier to send us feedback.

​

🐛 Fixes

• Importing older Requestly exports now restores environment variables that were missing an identifier.
• Empty or corrupt local project files no longer break loading.

​

🚀 New

• Added app-wide back and forward navigation buttons so you can move through screens you’ve visited.
• Introduced the gRPC client with support for streaming requests.

​

✨ Improvements

• Opening a specification tab for the first time is now faster.

​

🐛 Fixes

• Creating a custom package with a duplicate name now shows a clear conflict message instead of a server error.
• GraphQL responses that return HTML no longer crash response parsing.

​

🚀 New

• Send and inspect gRPC requests with the new gRPC support.

​

✨ Improvements

• Environments are now sorted alphabetically in the selector.
• Clearer drag-and-drop indicators when reordering collections.
• Bottom panel dock preferences now persist across sessions.

​

🐛 Fixes

• The app now reloads automatically instead of erroring after a new version is deployed.

​

🚀 New

• Added SSL certificate support, including client certificates and custom CA certificates.
• Authenticate requests using HTTP Digest authentication.
• Design and edit OpenAPI specifications with a dedicated editor, issues panel, and governance checks.

​

🚀 New

• The Requestly CLI now supports running cloud collections.
• Added five new authentication types for securing your requests.
• Authenticate requests using JWT Bearer tokens with configurable payload directives.

​

✨ Improvements

• Collection trees now remember expansion state per project and added a collapse-all button.

​

🐛 Fixes

• The desktop window can now be dragged while the app is loading.
• Pasting a cURL command that is not a valid request no longer fails silently.

​

🚀 New

• The desktop app now downloads updates in the background with a progress bar.
• Configure OAuth 2.0 and view the resulting token directly in the Authorization tab.

​

🐛 Fixes

• Requests and environments now appear correctly when viewing multiple projects.
• Variable values are now preserved when migrating local projects from the previous app.
• Aligned the sidebar default sort order with the previous app.

​

🚀 New

• Migrate your local projects from the previous desktop app into Requestly.
• Complete interactive OAuth flows through a hosted callback so login redirects work on desktop.

​

🐛 Fixes

• Fixed imports of older collections and environments that previously failed to load.
• Importing now merges into your existing global environment instead of failing with a conflict.

​

🚀 New

• Run your collections from the command line with the new Requestly CLI.
• Authenticate requests with OAuth 2.0, including a token service and orchestration.
• Use non-interactive OAuth 2.0 grants with automatic token refresh.
• Sign requests with OAuth 1.0 directly from the Authorization tab.

​

✨ Improvements

• Added contextual help hints across the API client.

​

🐛 Fixes

• Older imported records without an explicit type now correctly default to HTTP requests.

​

🚀 New

• An app-wide cookie jar lets you manage cookies with a Postman-style experience.
• Import much larger files, with the limit raised from 30 MB to 100 MB.
• Import API definitions from SoapUI projects.
• Import an exported Requestly project archive directly.

​

✨ Improvements

• Add a description column to the request headers editor.
• Clear the script package cache with a new button to reclaim disk space.

​

🚀 New

• Use npm packages directly in your scripts, with search and one-click install.

​

✨ Improvements

• Postman imports now translate npm and jsr package requires in scripts.
• The package library now always shows its split layout for a steadier view.

​

🐛 Fixes

• The package library Save button now matches the size of other editors.

​

🚀 New

• Run GraphQL subscriptions on the desktop app.
• Create and reuse custom script packages across your requests with a new package library.
• An SSL verification indicator now appears in the footer.

​

🐛 Fixes

• Postman export now preserves template-prefixed URLs.
• Scripts that use a top-level return now have their Postman-style calls transformed correctly.

​

🚀 New

• Import HAR files directly, with captured requests turned into examples.
• Local filesystem projects now detect and sync changes made outside the app.

​

🐛 Fixes

• The Debug tab stays accessible even when a response returns an error.
• HTTP/2 pseudo-headers are now filtered out of requests imported from HAR.
• Postman export no longer wraps the collection in a duplicate root entry.

​

🚀 New

• Inspect outgoing requests with new DevTools Console and Network panels.
• Toggle SSL certificate verification on or off per request.

​

✨ Improvements

• Empty projects now show helpful call-to-action prompts, and project creation is simpler.

​

🐛 Fixes

• Template variables in the URL bar are now preserved, and dynamic variables resolve in code snippets.
• Postman imports with array-based form-data file sources now parse correctly.
• Root collection descriptions now import from Postman, and the overview scrollbar is hidden.

​

🚀 New

• Run bulk operations on examples and import them from supported formats.
• Create examples instantly from the sidebar and save them from a new dropdown.

​

✨ Improvements

• Persisted example tabs now show a “Try it” button in place of Send.
• Redesigned confirmation dialogs for clearer, more readable prompts.

​

🐛 Fixes

• Variables now resolve correctly in generated code snippets, and request body content type is set properly.
• Invalid GraphQL variables now show an inline validation error instead of failing silently.
• Importing from cURL no longer carries over a stale Content-Length header.