HTTP request tester
Send GET, POST, PUT, DELETE and other requests from the server with your own headers and body over HTTP/1.1 or HTTP/2, and see the response status, headers and body, free of browser CORS limits.
Loading…
The URL, headers and body you enter are sent to this site’s server, which sends the request for you; do not use real passwords or keys. Only public addresses can be reached; requests and responses are not stored.
About this tool
Send an HTTP request from this site’s server and see the full response: status, headers and body. Use it to test a REST API or a webhook endpoint, to call a URL that a browser would block because of CORS, to see exactly which headers a server returns, or to compare HTTP/2 with HTTP/1.1.
Choose GET, POST, PUT, PATCH, DELETE, HEAD or OPTIONS, write your own headers and a JSON, form, text or XML body, and decide whether to follow redirects. Only public addresses on ports 80, 443, 8000, 8008, 8080, 8081, 8443 and 8888 can be reached. Bodies up to 64 KB are sent and responses are read up to 1 MB. The URL, headers and body go to this site’s server, so do not use real passwords or keys; requests and responses are not stored.
How to use it
- Pick the “Method” and enter the “URL”. An address without http:// or https:// is sent over HTTPS.
- Write “Headers, one per line”, such as “Accept: */*”, which is filled in. For methods other than GET and HEAD, add a “Body” and pick its “Body type” if you have not written a Content-Type header.
- Choose the “HTTP version” and tick “Follow redirects” if you want them followed; it is off by default. Open “Raw request” to check what will be sent.
- Select “Send”. POST, PUT, PATCH, DELETE and requests with a body ask you to sign in first.
- Check the status, final URL, time and “Response headers”. For JSON, HTML or XML, switch the body between “As received” and “Formatted”, then “Copy” or “Download” it.
Common questions
Why do POST and other methods need an account?
Anyone can send GET, HEAD and OPTIONS requests without a body. Other methods, and any request with a body, need you to sign in, so the tool cannot be used to send anonymous writes to other sites from this server.
Which addresses can it reach?
Only public internet addresses, over http or https, on ports 80, 443, 8000, 8008, 8080, 8081, 8443 and 8888. Localhost, private networks such as 192.168.x.x, other ports and URLs with a user name and password are refused, and every redirect is checked the same way. The connection must open within 5 seconds and the whole exchange finish within 30 seconds.
Which headers can I not set?
Host, Content-Length, Transfer-Encoding, Connection, Keep-Alive, Upgrade, TE, Trailer, Expect, HTTP2-Settings and any Proxy- header are set for you and refused if you add them; up to 30 headers and 16 KB of headers are allowed. Without your own User-Agent, requests identify as Mozilla/5.0 (compatible; your-tools-probe/1.0).
How are redirects handled?
By default the redirect response itself is shown. With “Follow redirects” on, up to 10 redirects are followed and listed; as in browsers, a 303, or a 301 or 302 after POST, continues as a GET without the body, and Authorization and Cookie headers are dropped when a redirect leads to another host, scheme or port.
Is it safe to put tokens or passwords in a request?
Use test credentials only. Everything you enter is sent to this site’s server, which makes the request. Requests and responses are not stored; to handle abuse reports, the method, target host and port are logged with your account and IP address, but paths, headers and bodies are not.
Related tools
HTTP status checker
Check the HTTP status code, redirect chain, response time and server of up to 20 URLs or domains at once.
DNS lookup
Look up a domain’s A, AAAA, CNAME, MX, NS, TXT, SOA, CAA and other records through public DNS servers, or the PTR name of an IP address.
IP address lookup
See your public IP address, or the country, region and city of any IPv4 or IPv6 address or domain.
Meta tag extractor
Extract the title, keywords, description, canonical link and Open Graph tags of up to 20 pages, and export them as CSV.
Web page source viewer
Fetch a page as a desktop or mobile browser or a search-engine crawler, then view its response headers and HTML source, formatted or as received, and download it.
Open port checker
Check whether up to 10 TCP ports of a public server accept connections, with common service ports one click away.