Version 0.11.0 · October 10, 2026
Portable workspaces and encrypted local backups
Unfour v0.11.0 lets you move your project configuration together instead of rebuilding each tool by hand. Share Workspace definitions or keep a password-encrypted local backup with optional saved credentials, then preview an independent copy before using it.
Added
- Whole-Workspace exchange — export and import API definitions, SSH/Database connection settings, environments and variables, Saved SQL, SSH Tasks, and Flow definitions together. Preview before creating a new Workspace; existing workspaces stay intact and resource references follow the new copy.
- Encrypted local backups — choose a sharing export that removes recognized secrets and omits local paths by default, or a password-encrypted backup with optional saved connection passwords, key passphrases, secret variables, and supported API authentication values. Review and replace local paths during import.
Fixed
- API editing and authentication — preserve edits made while Send or save is pending. Resolve variables before Basic/Bearer/API Key authentication and respect explicit header/query overrides.
- History and OpenAPI export — improve credential redaction in history and diagnostics. Handle invalid authentication per request and omit response examples when historical credential redaction cannot establish safe provenance, including after credential rotation.
- Credential editing — keep revealing a saved credential separate from replacing or clearing it, protect shared connection credentials, and recover interrupted saves.
- Database browsing — restore Design Table from the sidebar and browse table pages without waiting for a full row count, with clearer page and row ranges.
- MCP permissions — imported workspaces default to Disabled. Choose a policy during import or change it later in Workspace security settings; permissions in the file are never trusted. Environment type and MCP permissions are saved independently.
- MCP, Flow, and startup stability — improve cancellation stability for MCP/Flow sessions and finish interrupted history-repair rollback before later startup writes.
Pro · Fixed
- Cloud Sync secret exclusion — keep sensitive variable values out of Cloud Sync even when their Secret flag is unset. Unsafe older retries remain isolated while safe local changes can be repaired. This does not add Secret Cloud Sync or Flow sync.
Known limitations
- Backups contain definitions and supported credentials, not files, histories, layouts, SSH host trust, or Cloud Sync bindings. They are not database backups or complete device migrations. Imported MCP access defaults to disabled unless you explicitly choose another policy.
- Passwords cannot be recovered. Encrypting an export does not encrypt local SQLite storage or provide end-to-end encrypted cloud sync. Flow definitions and run history remain local-only.
- Literal secrets in bodies, scripts, SQL, and Flow defaults remain subject to redaction. Inspect arbitrary free text for hardcoded secrets before sharing; complete erasure of all legacy history echoes is not claimed.
Workspace exchange and local backups belong to the Free core. Pro continues to unlock optional Cloud Sync for supported data in the same Unfour application. Use the Stable package for your platform; Pro has no separate public download.
Version 0.10.0 · September 30, 2026
Local Flow runbooks and easier resource exchange
Unfour v0.10.0 adds Flow as the fourth core module for repeatable backend checks and operational tasks, alongside easier API resource exchange and database exports.
Added
- Local Flow runbooks — combine saved API requests, SSH Tasks, and Database queries with Condition branches and Wait Until checks. Use Canvas, typed inputs, earlier step results, and run history to repeat the checks you define.
- Flow through MCP — Codex and Cursor can manage and execute the same local runbooks, cancel runs, and inspect paginated history. Flow execution requires confirmation even with full access; read-only policy blocks it.
- Collection and Environment import/export — exchange collections in Unfour, Postman, and OpenAPI formats, and environments in Unfour or Postman formats. Preview imports before applying them and keep imported names distinct. Exported environment secret values are empty; review scripts and free text before sharing.
- Database table export — export one table’s structure, data, or both. Structure uses SQL; data supports SQL, CSV, or JSON. MCP export also supports selected columns, filters, and row limits; exporting data without a limit requires confirmation.
Fixed
- openGauss compatibility — improve detection, catalog and table browsing, auto-increment columns, indexes, native table DDL, and exports through PostgreSQL-protocol connections.
- SQL and Saved SQL context — preserve the selected database and schema when opening queries, running scripts, reopening history, and saving or restoring SQL. Saved queries appear under the appropriate database.
- Flow run feedback — validate resource and variable references before running, execute the definition revision that was confirmed, and show clearer validation, failure, cancellation, and history results.
Known limitations
- Flow V1 definitions and history stay local and are excluded from Cloud Sync, including with Pro. Flow is a user-defined runbook, not a general workflow or autonomous root-cause platform; it has no scheduler, webhook triggers, parallel steps, sub-flows, or LLM/Agent nodes.
- Flow API steps do not support saved request scripts or multipart bodies. Wait Until uses GET/HEAD API checks or read-only Database queries. Cancelling a run does not roll back completed operations.
Flow and the API, SSH, Database, and MCP tools belong to the free, open-source core in the same Unfour application. Pro continues to add Cloud Sync for supported data; Flow is excluded. Stable installers use the existing platform download links. Windows and macOS packages remain unsigned, and Linux x64 AppImage remains Experimental.
Version 0.9.6 · September 14, 2026
More responsive MCP calls and safer editor actions
Unfour v0.9.6 improves long-running MCP diagnostics and protects unsaved SQL, API save work, and SSH sessions.
Added
- MCP diagnostics — inspect workspace-scoped database query history, update or delete connection metadata, test SSH connections, and read stored host fingerprints. Destructive deletes remain guarded by confirmation.
Fixed
- MCP cancellation and deadlines — long-running tools keep control messages responsive and accept client cancellation where supported. MCP calls have a 120-second safety deadline, including API requests configured without an HTTP timeout.
- SQL drafts and confirmation — closing an unsaved Query tab asks before discarding it. Run buttons and shortcuts no longer approve a pending dangerous query; use the dedicated Confirm run action.
- Saved SQL — opening a saved query does not replace the current editor. Successful saves update the saved baseline, failures preserve the dirty draft, and deletion asks for confirmation.
- API save and history — failures appear in place, entered names survive failed saves, repeated pending submits are ignored, and history has loading, error, and retry states.
- SSH batch close — Close All, Close Others, and close-to-left/right ask once before disconnecting the selected sessions.
Version 0.9.5 · September 12, 2026
Explicit SQL run actions and preserved workbench drafts
Unfour v0.9.5 makes SQL script execution and confirmation more predictable, preserves drafts when switching tools, and improves Pro Cloud Sync defaults for new accounts.
Changed
- Run All and Run Selected — Run All executes the entire editor script even with a selection; Run Selected executes only highlighted SQL and is disabled without a selection. Ctrl+Enter / Cmd+Enter runs All; Ctrl+Shift+Enter / Cmd+Shift+Enter runs the selection.
- SQL scripts — check the entire script before running it on one connection, stop at the first error, and retain each statement’s result. Stop prevents later statements and waits for the current statement; SQL is no longer silently rewritten with LIMIT.
- Workbench drafts — keep unsaved editor work when switching modules or layout.
Fixed
- SQL confirmation — approval stays bound to the reviewed script after the view remounts or schemas are discovered; it does not switch run modes or show a confirmation request as an execution failure.
- Database credentials — saving a connection after credential rotation retains its current credential reference.
Pro · Fixed
- Cloud Sync for new accounts — the first account activation on a device turns Global Sync on. Existing preferences, including a deliberately disabled setting, stay unchanged.
Version 0.9.4 · September 7, 2026
Multipart API requests and safer Cloud Sync
Unfour v0.9.4 lets you send multipart form-data API requests with ordered text and file fields, and makes Pro Cloud Sync apply remote changes more safely.
Added
- Multipart form-data requests — add ordered text and file fields, including duplicate keys, empty values, and disabled rows. Pick files for streamed uploads. Request history keeps the actual body type. Chosen file paths are temporary bindings: they are not saved with the request and are not included in Cloud Sync.
Pro · Changed
- Safer Cloud Sync reconciliation — Cloud Sync tracks remote workspace data more carefully so incomplete remote updates are not applied.
Pro · Fixed
- Cloud Sync apply safety — if remote changes cannot be applied completely, Unfour stops instead of leaving a partial update, keeps local unsynced work so it can be retried, and resolves workspace deletions that already match local state.
Version 0.9.3 · September 4, 2026
API request timeouts and more reliable Cloud Sync
Unfour v0.9.3 lets you control how long API requests wait, cancels an in-flight request with Stop, and makes Pro Cloud Sync recover more clearly after sign-in or plan changes.
Added
- API request timeouts — set a global desktop timeout, override it on a saved request, or use 0 for no timeout. Stop cancels the in-flight request and shows a cancelled state without writing history. Saved timeouts are included in collection import and export, and in Cloud Sync when Pro is active.
Changed
- MCP request timeouts — if a client omits a timeout, Unfour uses a 60-second safety default; 0 means no timeout; a positive value is used as given instead of being silently capped at 60 seconds.
- Settings layout — Account and Cloud Sync are grouped under Account & Sync, Privacy stays with General, and Updates plus the Stable/Test channel appear on About.
Fixed
- API request naming and history — rename a request from the editor, keep a clear name on tabs, and show the saved name or a readable path in history.
Pro · Fixed
- Cloud Sync after sign-in — an expired session no longer permanently blocks pending changes. Sign in again to resume; the UI shows Sign-in required when the session expired, or Cloud Sync plan required when the account no longer includes Cloud Sync, and keeps local work.
- Cloud Sync ownership and pending changes — each local workspace keeps one cloud owner, pending changes survive sign-out or paused access, older workspaces can upload previously unsynced API requests, and retrying a blocked request sends the current local request.
- Cloud Sync errors and diagnostics — temporary server, protocol, and rejected-request failures are easier to tell apart. Diagnostics show last push/pull, retry time, and server request details, and due work retries without waiting for the next periodic cycle.
Version 0.9.2 · September 2, 2026
Independent sidebars, safer MCP, and anonymous usage statistics
Unfour v0.9.2 keeps API, SSH, and Database sidebar widths independent, tightens MCP safety, and lets Stable desktop builds send one anonymous active-install signal per day.
Added
- Anonymous usage statistics — Stable desktop builds can send one privacy-preserving active-install event per installation per UTC day. A first-run notice explains this, Settings → Privacy can turn it off, and the installation ID stays in the OS keychain. The event does not include account, workspace, or feature-usage data. Test and development builds do not send it.
- MCP environment variable tools — compatible MCP clients can set or delete environment variables, including empty values, with sensitive values masked and confirmation for guarded deletes.
Changed
- MCP environment selection — a client can choose an environment for a request, including its scripts, without changing the desktop active environment. Replaying a saved request runs its scripts, and that replay is treated as a write when a client is in read-only mode.
- Safer MCP defaults — unknown or unclassified tools are denied. Destructive deletes of API requests, collections, environments, and variables are classified explicitly.
- Independent sidebars — API, SSH, and Database each keep their own width, with compatibility for the previous shared-width layout.
Fixed
- Cursor MCP on Windows — one-click Cursor setup now handles sidecar paths that contain spaces, such as D:\Program Files\Unfour\unfour-mcp.exe.
Version 0.9.1 · August 31, 2026
Packaging and desktop reliability
A maintenance release after 0.9.0, focused on desktop reliability and the Linux AppImage baseline.
Changed
- Linux x64 AppImage now uses Ubuntu 22.04 as its baseline.
Fixed
- Account, Cloud Sync, update, API, Database, and SSH screens handle close and refresh more reliably.
Version 0.9.0 · August 29, 2026
GitHub sign-in and optional Pro Cloud Sync
Unfour v0.9.0 adds GitHub sign-in, optional Pro Cloud Sync, guided MCP client setup, and in-app Stable update checks to the same desktop application.
Added
- GitHub account sign-in — sign in through the browser and return to Unfour to access your account in the desktop app.
- MCP client setup — configure Codex or Cursor from Settings with a guided one-click flow that preserves existing configuration.
- In-app update checks — Unfour can check for new Stable releases from within the app.
Pro · Added
- Plan and Pro access — Settings shows the signed-in account’s Free or Pro plan and current Pro access status. Users can open hosted Pro checkout or the billing portal, then return to Unfour and refresh Pro access after checkout.
- Optional Cloud Sync — active Pro access enables Cloud Sync for supported workspace data: workspaces; API collections, folders, and saved requests; environments and variables; SSH tasks; and SSH or Database connection definitions.
- Cloud Sync reliability — retry, conflict handling, and recovery mechanisms help keep supported workspace data consistent.
Security
- Account sessions are stored in the operating system keychain.
- Cloud Sync excludes credentials and credential references. SSH private-key paths and local database paths remain on the current device, and runtime or SSH history is not synced.
Version 0.8.0 · August 26, 2026
Faster startup and broader database compatibility
Unfour starts faster and improves PostgreSQL, MySQL, and MariaDB query compatibility.
Changed
- Faster desktop startup — feature modules load on demand, while inactive SSH and Database queries pause without discarding previously opened work.
Fixed
- Database query compatibility — PostgreSQL and MySQL/MariaDB now handle selected catalogs and commands that require the simple query protocol more reliably, including session, transaction, DDL, and SHOW statements.
Version 0.7.0 · August 23, 2026
Safer connection data
Unfour makes SSH and database connection changes safer while keeping credentials and device-specific settings local.
Added
- Revision-aware connection data — SSH and database connection definitions now track revisions to reduce stale or conflicting updates.
Changed
- Connection details and device-specific settings are handled separately, making connection updates more reliable without moving local configuration.
- Updating a connection definition preserves compatible local credentials instead of replacing them.
Security
- Connection changes are rejected when they cross workspace boundaries.
- Credential references, SSH private-key paths, and SQLite database paths remain on the current device.
Version 0.6.0 · August 21, 2026
Safer SSH tasks and MCP workflows
This release makes SSH task data and MCP workflows more reliable, with clearer local recovery behavior.
Added
- SSH tasks keep their steps and relationships consistent when tasks are edited or removed.
- Connection-aware SSH tasks — show which SSH connection owns each task.
- MCP workflows can use temporary registries for container and short-lived sessions.
Changed
- MCP results now follow their declared format, making them easier for compatible AI clients to use.
- Workspace deletion now cleans up related API, workspace, and SSH task data consistently.
- SSH task transfers preserve task order and device-local file paths; terminal suggestions and history are more stable.
Fixed
- Linux MCP builds now include the required support for unfour-mcp.
Security
- Database credentials stay scoped to the current workspace.
Version 0.5.0 · August 18, 2026
SSH history and safer API data
Unfour adds persistent SSH command history and safer API data handling while improving MCP-assisted workflows.
Added
- SSH command history and suggestions — save workspace- and connection-scoped commands after remote echo and offer prefix-based suggestions at detected shell prompts.
- MCP SSH history inspection — use the read-only unfour.ssh.list_history tool to filter recent commands by workspace, connection, text, time range, and result limit.
- API data reliability — collections, folders, and saved requests use revision-aware updates while preserving redacted values stored locally.
Changed
- Terminal history suggestions now use an explicit popup: Up and Down select, Tab or click inserts, Escape dismisses, and Enter submits the current line.
Fixed
- API collection recovery is more resilient when parent items are missing, an update needs to roll back, or data is imported from OpenAPI; locally preserved redacted values remain intact.
Security
- SSH history excludes password-prompt input and conservatively redacts sensitive commands. API snapshots redact credentials in auth, headers, query parameters, URLs, JSON bodies, and form bodies.
Version 0.4.0 · August 11, 2026
Workspace variables and SSH tasks
Unfour adds workspace-aware MCP tools and a more capable SSH task workflow.
Added
- MCP workspace variables and SSH tasks — MCP-compatible clients can manage workspace-level variables and create, run, inspect, cancel, and clean up SSH tasks with confirmation safeguards.
Changed
- SSH task workflow — reorder tasks manually or by drag and drop, use workspace and environment variable defaults, and review more stable live events and cached run transcripts.
Security
- SSH task inputs marked as secret are masked in task output, errors, saved logs, and MCP responses.
Version 0.3.0 · July 30, 2026
Request scripting and safer workspace workflows
A Unfour release for automating API checks, keeping workspace data isolated, and making SSH and database workflows more reliable.
Added
- API request scripts — run JavaScript before a request and after its response to prepare dynamic requests, inspect results, record tests, and review output in a dedicated Console. Scripts stay with saved requests and OpenAPI imports/exports.
- Workspace data safety — workspace, variable, and environment changes now have revisions, snapshots, and rollback-aware records for more dependable local updates. Local preferences and credentials remain on the device.
- Isolated storage profiles — keep stable, development, and test data roots separate, or choose an explicit absolute data directory, while existing stable installations continue using the ~/.unfour layout.
- SSH terminal clipboard menu — use right-click Copy, Paste, Paste Selected Text, and Select All actions with platform-appropriate shortcuts.
Changed
- Workspace, variable, and environment edits are applied consistently in the desktop app and MCP workflows. Active selections, last-opened time, and the default workspace remain device-local preferences.
Fixed
- Windows install and uninstall now detect and stop a running unfour-mcp sidecar, avoiding stalled file replacement when an MCP client is still connected.
- The database row delete action remains visible when table editing becomes available after the initial grid layout.
Version 0.2.0 · July 22, 2026
SSH file transfer and task automation
A minor Unfour release focused on SSH file transfer and automation, shared workspace variables, and multi-statement database execution.
Added
- SSH SFTP remote files — browse remote directories, transfer files, and manage remote paths from a dedicated Files panel with context menus, multi-select, and drag-and-drop upload. The SSH sidebar now includes Connections, Files, and Tasks modes.
- SSH task automation — create and run multi-step command, upload, and download tasks with workspace-scoped templates, local path bindings, run history, streamed transcripts, and Save / Run editor flows.
- Shared workspace variables — manage workspace-scoped environments, switch the active environment from the title bar, and resolve API requests over workspace defaults.
- Database multi-statement Run — execute the current statement or all semicolon-separated statements sequentially and inspect result sets in sub-tabs.
Fixed
- Database table preview loading is more stable and no longer flashes placeholder rows with incorrect grid content.
Changed
- API environment ownership moved into shared workspace variables; API Client now consumes the workspace active environment.
Version 0.1.2 · July 20, 2026
API interoperability and database editing
A feature and reliability release focused on API interoperability, database row editing, and MCP and SSH stability.
Added
- OpenAPI 3.1 collection export from the API Client collection toolbar, shared dialog, and tree actions.
- OpenAPI YAML import through the shared HTTP-engine import path.
- Database table row editing with confirmation gating, optimistic concurrency checks, and bind-parameter SQL updates.
- MCP tools for managing API environments over the command bus.
- Named secret read and write helpers for credential-reference workflows.
- Column resizing and improved JSON previews in shared data tables and Database grids.
Fixed
- Failed SSH session tabs and connection errors are preserved instead of being discarded silently.
- MCP idle shutdown is disabled by default so long-lived clients are not interrupted unexpectedly.
Changed
- Database query and schema flows remain available more consistently while troubleshooting.
Version 0.1.1 · July 13, 2026
Maintenance and polish
A maintenance release following the 0.1.0 public launch, focused on packaging and polish.
Added
- Generic deep-link runtime support.
- Improved settings-window sizing and MCP tab stability.
Changed
- Windows distribution now ships only the NSIS installer (MSI dropped).
Fixed
- The settings window no longer flashes at the MCP tab height when opened.
Version 0.1.0 · July 9, 2026
First public release
The first Unfour release introduced the local-first developer workspace.
Added
- API Client — compose, send, save, and inspect HTTP requests with workspace environments and redacted history.
- SSH Terminal — manage SSH connections and terminal sessions with split panes, host-key trust, and redacted log export.
- Database — manage connections, browse schemas, run SQL with confirmation guardrails, and preview query results.
- Workspace — scope requests, environments, connections, activity, tabs, and layout to a local workspace with unique names and per-workspace persistence.
- Local MCP server — expose safe local diagnostic tools (API replay, SSH connection) to MCP clients over the command bus.
- App shell & platform — single-instance app, settings window, structured local logs, centralized design tokens, and shared i18n.
Security
- Credentials stored as references only; sensitive headers redacted in history, activity, and logs; keychain purged on connection delete; MCP tools reject forbidden write/control operations.
