What's new in Retriever.

0.5.0: ask why it failed

19 September 2026

A 401 tells you that something is wrong with auth. It doesn't tell you whether the token expired, the environment points at the wrong server, or you pasted a token from yesterday. 0.5.0 adds optional AI help for that part of the job. It is off until you turn it on, and it runs on your own API key.

Why a request failed

Click the status of a 4xx or 5xx response. Next to the usual guide, Retriever now shows the likely cause, read from the request you sent and the response you got back, and the fix it can apply for you:

• Expired or invalid token: Get New Token & Resend for OAuth 2, or Open Auth
• Wrong environment or host: Switch Environment & Resend
• Rejected body, or a missing header or parameter: straight to the Body, Headers or Params tab
• Rate limited: how long the server asked you to wait, and Resend

When it isn't sure, it says so and leaves you with the regular checklist.

Chain suggestions

Paste the token from Login's response into another request's Authorization header, and Retriever notices that it matches Login › body.accessToken. A bar offers to replace it with {{@Login.body.accessToken}}, so the request keeps working after the token changes. The same works for ids in a path, query values and JSON body fields.

Finding the matches happens on your Mac. The AI only decides whether a match is meant or a coincidence, like a 1 that happens to equal someone's user id. One click applies the suggestion, ⌘Z undoes it, and × keeps the value you typed.

⌘K by description

Search with three words or more, like “the one that adds an item to a cart”, and ⌘K adds the requests that match the description above the usual name matches. Short searches work exactly as before.

Your key, your data

The AI features use TypeSafe with your own API key, which you add in Settings → AI. That keeps Retriever a one-time purchase: there's no AI bill of mine for a subscription to pay for. Each feature has its own switch.

• Without a key, nothing is sent. Retriever works exactly as it did in 0.4.0.
• Before a question is sent, Authorization and cookie headers, fields named like token, secret, password or key, and anything that looks like a credential are replaced with «masked». Bodies are cut to a few thousand characters.
• The key lives in typesafe.json next to your workspace, readable only by you, and never in workspace.json or exports.

The details are in the privacy notes.

Also

• The MCP server reports version 0.5.0. Its tools haven't changed and it doesn't use the AI features.

These features are brand new. If an explanation is wrong or a suggestion makes no sense, email me the request and response with the secrets taken out, and I'll tune it.

0.4.0: Retriever is paid

18 September 2026

Retriever now costs $19, once, as an early adopter price (it goes up to $39 later). You buy it through Polar and paste the license key on first launch. The key is checked once a day when you're online, and Retriever keeps working offline for 30 days after the last check. The MCP server unlocks with the same key.

0.3.0: undo and history

18 September 2026

• ⌘Z and ⇧⌘Z undo and redo deletes, moves, imports and edits, up to 100 steps.
• File → Version History keeps copies of the whole workspace, taken before every delete, import and restore and while you edit. Restore a single request, folder, collection or environment, or everything.
• Every request has its own History with earlier revisions and a line-by-line diff.

0.2.0: OAuth 2.0

18 September 2026

Authorization code with PKCE, client credentials, device code, password and refresh-token grants. Tokens are fetched when you send, refreshed before they expire and once more on a 401. Presets for GitHub, Google, Microsoft Entra ID, Auth0, Okta and Spotify. Also a new app icon.

0.1.1

18 September 2026

New app icon, and ⌘K now always puts the cursor in its search field instead of the sidebar filter.

0.1.0: first release

18 September 2026

The first signed and notarized build: requests, collections, environments, response chaining, the JSON tree viewer, code generation, Postman and OpenAPI import, and the MCP server for AI agents.