Yaak is a browser-accessible desktop API client distributed in a LinuxServer.io container image. It supports organizing and executing REST, GraphQL, and gRPC requests.

Features

REST, GraphQL, and gRPC request workflows
Browser-accessible desktop interface
Basic Auth protection for the web entry point

Usage

Open the HTTP port configured by PANEL_APP_PORT_HTTP after installation.
Use CUSTOM_USER and PASSWORD for Basic Auth.
Configuration is persisted under CONFIG_PATH; back up this directory before upgrades or migration.
Keep the management port on a trusted network and use an HTTPS reverse proxy for external access.

Security notice

The reviewed linuxserver/yaak:2026.8.0 image contains four linux-libc-dev Critical findings (CVE-2026-64535, CVE-2026-64564, CVE-2026-72287, and CVE-2026-74394) for which the current Trivy report provides no fixed version. This package is delivered under an authorized risk-acceptance review; the findings are not claimed to be fixed. Update when the upstream image provides a remediation.