# HTTP Request Tester

Send an HTTP request from the browser and inspect responses.

## URL

https://ilham.dev/tools/http-request-tester/

## What It Does

A request builder that sends the request from your browser with fetch, straight to the address you type, and shows the status, headers and body that come back. Nothing is relayed through this site and no server of ours sees the request. Because the request is made by the browser, the browser's own rules apply — most visibly the same-origin policy, which is the one thing this page cannot work around.

## Features

- Runs in the browser
- No login required

## Input

text input.

## Output

text output.

## Privacy

This tool sends the necessary request data to a third-party API or to the endpoint you provide so it can complete the lookup or test.

Provider: User-provided URL.


- Requires login: false
- Requires API key: false
- Stores user data: false


## Examples

- Why did a request fail with a CORS error instead of returning a response?
- Can I paste a curl command here?
- Why was the body left off my GET request?
- Can I send cookies to another site?




## Questions

### Why did a request fail with a CORS error instead of returning a response?

Because a page cannot ignore the same-origin policy. The target has to allow cross-origin reads by answering with Access-Control-Allow-Origin, and if it does not, the browser blocks the reply before any script can read it. This is a rule of the browser, not a bug in the tool, and a static site has no server to proxy the request through — a proxy would also mean your headers, cookies and body passing through somebody else's machine. The page says this in the error rather than pretending the server is down.

### Can I paste a curl command here?

No — the form is the only way in on this page. To paste, explain and rebuild a curl command, use the [curl Tester](/tools/curl-tester/), which parses one into method, URL, headers and body and reports the flags it cannot honour instead of dropping them silently. Keeping the two tools separate means the request builder does exactly one thing.

### Why was the body left off my GET request?

Because a GET or HEAD is defined not to carry one. If you selected a body type and typed a body while the method was GET or HEAD, the page refuses to send and tells you the body was left off, rather than sending a request that no server would interpret the way you expect. Switch to POST, PUT or PATCH for a request with a body.

### Can I send cookies to another site?

Only if the request is same-origin or the target explicitly allows credentials. Cross-origin fetch with credentials requires the server to answer with Access-Control-Allow-Credentials as well as a specific origin, and never a wildcard. The Send cookies checkbox lets you ask; the browser decides.