Design the request before you send it.
Build precise HTTP requests, resolve local variables, catch security and portability problems, inspect the exact wire shape, and generate client code. Live execution belongs in the REST API Tester (#410); this tool stays focused on building a reproducible request correctly.
🔒 Local-first · marked secrets masked by default · no request is sent
Request
Ready to build
32 chars
Query parameters
Duplicates are allowed for array-style APIs.
KeyValueDescription
Headers
Managed, duplicate and injection-prone headers are audited automatically.
NameValueDescription
No authorization will be added. Manual Authorization headers are still audited.
Secrets entered through Auth or marked Secret variables are redacted by default. Sensitive-looking structured body fields are also masked where safely detectable.
No request body. This is the safest default for GET, HEAD and many DELETE requests.
Valid JSON
Encoded exactly like URL query parameters.
KeyValueDescription
Text parts plus local file references. File bytes never leave this page.
NameValue / filenameType
Exports reference filenames; they do not embed file contents.
Binary source
No binary file selected. The browser stores only a local reference for code generation; file bytes are never uploaded by this tool.
Local variables
Reference with
{{name}}. Secret values are masked in previews and exports.NameValueSecret?