Folder Inheritance, and More Template Functions

It’s been just a week since 2025.2 release with encrypted text and sharable environments, so be sure to peep that if you missed it 👀

It’s only been a week since the last major release, but this one contains such a highly requested feature that I thought I’d ship it early: Request Inheritance.

Before we dig in, though, I’d like to give an update on Yaak’s sustainability.

💰 10% sustainability achieved!

I want to start by sharing my gratitude for those who have purchased a license for Yaak. Thank you so much! 🤗

I quit my job last May to take a second crack at building an API client. It was a huge risk, but it looks like it’s going to pay off. Yaak has been growing steadily over the past year and just hit $500 MRR, which is 10% of the way to a sustainable income.

That’s over 100 customers and almost 50k total downloads!

We still need to 10x to reach this goal, so if you’re interested in helping out, the best things you can do are:

• Share Yaak in posts, blogs, streams, or IRL
• Purchase a license
• Submit feedback

And with that, let’s dig into the changelog.

🫃🏼 Workspace and folder auth / headers

While going over feedback last week, I noticed a few people mention that not being able to set authentication for an entire folder was a dealbreaker—especially from those using Yaak as a Postman alternative. Reading this broke my heart, so I worked my butt off for a few days and implemented it! 🍑

Here’s a quick breakdown of how request inheritance works:

• Configure on either workspace or folder
• Set authentication or headers
• View the inherited values within the request view
• Override inherited values on individual requests

And if you need a bit more info, check out the docs on Request Inheritance

See also: feedback

📐 Functions for HMAC, cookies, UUIDs, and more

Template functions are an extremely powerful way to customize requests. You can even write your own Plugins with a few lines of TypeScript.

I’ve been wanting to fill out the list of built-in functions for a while, so I finally got around to it.

Here are function namespaces added in this release:

• cookie.* for accessing the cookie jar (eg. for CSRF)
• hmac.* for creating secure signatures
• url.* for encoding or decoding URLs
• uuid.* for generating UUIDs
• hash.* for hashing strings
• base64.* for encoding or decoding base64
• regex.* for extracting arbitrary strings
• xml.* for querying XPath
• json.* for querying JsonPath and escaping

As always, let me know if there are any missing functions you’d like to see!

See also: feedback