HTTP Request Builder

Method

URL

http or https only. javascript:, data:, and file: are rejected.

Headers

The request stops after 15 seconds.

Response

Send a request to see the response.

How to send a request

Set method and URL

Choose a method. Enter a public http or https URL.
Add headers and body

Optional. Set Content-Type yourself if the server needs it.
Send

Send the request. After 15 seconds it stops.
Read the result

The panel shows status, headers, and body.

Common Use Cases

Public API Checks

Send a request to a public HTTP or HTTPS endpoint and inspect its status, headers, and body.

Header Experiments

Add content, authorization, or custom headers and compare the server response.

Webhook Delivery Tests

Send a sample payload to a public receive URL before you connect an application.

Error Response Review

Check the response from an endpoint that is difficult to call from a browser because of CORS.

Why use this builder

Send an HTTP request and read status, headers, and body. Only public http and https hosts are allowed. Private and local addresses are rejected. The abort timeout is 15 seconds.

FindUtils HTTP Request Builder sends GET, POST, PUT, PATCH, DELETE, HEAD, or OPTIONS requests to public HTTP and HTTPS URLs. You can add allowed headers and a request body, then inspect the returned status, headers, body, and duration.

The request passes through the FindUtils request service so public endpoints can be tested without destination browser CORS permission. The service follows redirects, stops after 15 seconds, and rejects local, private, metadata, and single-label hosts.

The builder limits request and response sizes and rate limits repeated use. Use the Webhook Tester for a temporary receive URL, or convert a reviewed command with cURL to Code.

How it compares

A browser fetch is limited by the destination's CORS policy. This builder uses a controlled request service for public hosts, but it does not provide local network access, collections, history, or automated assertions.

A desktop API client can store collections and test scripts. FindUtils is better for a short public-endpoint check. Use HAR to cURL when the source request comes from a browser archive.

HTTP Request Tips

Use HTTPS when a request contains credentials or other sensitive data.
Set Content-Type yourself when the destination expects JSON or another specific format.
Keep the request body below 64,000 characters and the URL below 2,048 characters.
Review the response ending because bodies longer than 200,000 characters are truncated.
Do not use this tool for localhost, private networks, metadata services, or single-label internal hosts.

Frequently Asked Questions

Which URLs are allowed?

FindUtils allows public HTTP and HTTPS hosts. Localhost, private ranges, metadata addresses, and single-label internal hosts are rejected.

Why can a normal browser fetch fail with CORS?

A destination can reject a direct browser request through its CORS policy. FindUtils uses a controlled request service for permitted public hosts.

Can I hit localhost?

No. Localhost, private ranges, metadata addresses, and single-label internal hosts are rejected. The tool is for public endpoints only.

Is there a timeout?

Yes. The browser stops waiting after 15 seconds. A slow or unavailable destination can therefore return a timeout result.

Are findutils.com cookies sent?

No. The browser call to FindUtils omits browser credentials. The service forwards only allowed request headers that you enter.

Does the request pass through FindUtils?

Yes. A FindUtils request service sends the request to the public destination. It returns a limited response to the browser page.

Does it follow redirects?

Yes. The request service follows redirects. Every destination in the redirect path must still meet the public-host rules.

What are the body limits?

The request body limit is 64,000 characters. A response body is limited to 200,000 characters and receives an ellipsis when truncated.

Can I add any HTTP header?

You can add normal request headers. The service ignores restricted or connection-specific names, including Host, Content-Length, Connection, and Set-Cookie.

Is there a rate limit?

Yes. The service allows 30 requests per minute for one client IP. Wait before another request when the limit returns an error.