NoobHeaders by BioSs

NoobHeaders adds, overrides or removes HTTP request and response headers in a few clicks. Simple enough for beginners, quick for developers, and everything stays on your device.

WHAT YOU CAN DO
• Add, override or remove request and response headers: Authorization, User-Agent, Cookie, CORS headers or your own X- headers. Leave the value empty to remove a header.
• Organize your headers in profiles: one per environment, project or test.
• Switch several profiles on at the same time. When two of them set the same header, the selected profile wins, then the lowest one in the list.
• Reorder profiles by drag and drop, with the arrow buttons or with Alt + ↑/↓.
• Apply a profile only on some sites with filters:
– a domain: example.com also covers its subdomains;
– a URL pattern, with * as the wildcard: ://localhost:3000/api/
• See at a glance which profiles apply to the current tab. The icon badge shows the number of active headers.
• Switch all modifications on or off with Alt+Shift+H, without opening the popup.
• Get suggestions for common header names, switch each header or filter on or off, duplicate, delete and undo.
• Search your profiles, export one or all of them to JSON and import them back (add them or replace yours).

FOR WHOM
• Web developers testing an API, a CORS setup or a feature flag
• QA testers switching between environments
• Anyone who needs to send a specific header without writing code

PRIVATE BY DESIGN
• No account, no ads, no analytics, no tracking.
• Your profiles are stored locally in your browser and never sent anywhere.
• Headers are changed locally by your browser: NoobHeaders does not read or store the content of the pages you visit.

OPEN SOURCE
NoobHeaders is free and open source (MIT license). Code, issues and suggestions: https://github.com/BioSs54/noobheaders

Available in English, French, German, Spanish, Italian, Brazilian Portuguese, Russian, Simplified Chinese, Japanese and Korean. Also available for Firefox.

GOOD TO KNOW
Filters are not regular expressions: write ://example.com/api/ rather than .://example.com/api/. (the popup warns you if a filter looks like a regular expression).