HTTP is the foundation protocol of the web. Test REST API endpoints live, parse and inspect raw response headers, generate CORS policy headers, look up all HTTP status codes (1xx–5xx), convert cURL commands to fetch/axios/Python code, generate production security headers (HSTS, CSP, Permissions-Policy) and create .htpasswd auth files.
Generate Apache/Nginx .htpasswd password file entries using Bcrypt, SHA-1 or plain text — entirely in your browser.
Browse schemas from an OpenAPI / Swagger spec and view UML class diagrams
Test HTTP endpoints with custom headers and body
Parse and inspect HTTP headers from raw text
Generate CORS response headers for your API — configure origins, methods, headers and credentials
Generate production-ready HTTP security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy, Permissions-Policy and CORP/COOP. Output for Nginx, Apache and raw headers.
HTTP is the foundation protocol of the web. Test REST API endpoints live, parse and inspect raw response headers, generate CORS policy headers, look up all HTTP status codes (1xx–5xx), convert cURL commands to fetch/axios/Python code, generate production security headers (HSTS, CSP, Permissions-Policy) and create .htpasswd auth files.
QAre these HTTP tools free?
Yes — all 6 HTTP tools are completely free with no account, no subscription and no paywalls. All processing runs entirely in your browser.
QDoes my data get sent to a server?
No. Every HTTP tool processes data entirely in your browser using JavaScript and WebAssembly. Nothing you paste, type or import is transmitted to any server.
QHow many HTTP tools are available?
There are currently 6 HTTP tools available. Browse them all on this page or use the search bar to find a specific tool.
QDo the tools work offline?
Most tools work offline once the page has loaded, since all processing is client-side. A small number of tools that fetch external assets may require an initial network connection.