HTTP Toolkit

Beautiful open-source tools to debug, test & develop with HTTP.

👨‍🔧 Built by @pimterry

🦣

[HTTP Toolkit @HttpToolkit]

HTTP Toolkit can now automatically detect, parse & expose the EXIF metadata within intercepted images.

Quickly inspect the secret metadata in images to understand when, where, and how they were captured, and plenty more; EXIF can hide a surprising amount! https://t.co/TKkReKwIio

[HTTP Toolkit @HttpToolkit]

Need a second opinion understanding your HTTP, or a quick first pass to find the good bits?

HTTP Toolkit now has MCP support!

Copy-paste setup for Claude Code and plenty more, so it just takes seconds to get your LLMs intercepting & inspecting HTTP all by themselves ✨

[HTTP Toolkit @HttpToolkit]

What's perfect mirroring? Before, WebSockets were negotiated separately up & down stream. The data was the same but some handshake params could differ. We now take full low-level control of negotiation and link the two directly instead, to perfectly clone the full socket 👯

[HTTP Toolkit @HttpToolkit]

The proxy inside HTTP Toolkit (https://t.co/GrZ15h5XHN) was just updated: 30%+ more throughput, lower latency, and perfect mirroring for WebSockets too.

Live now in Mockttp for custom proxies, coming to an HTTP Toolkit near you later this week!

[HTTP Toolkit @HttpToolkit]

Wouldn't it be nice if HTTP compression suddenly got 90% better for a whole bunch of common web scenarios?

Dictionary Compression is here to save the day: https://t.co/dC0Psfu02M
https://t.co/dC0Psfu02M

[HTTP Toolkit @HttpToolkit]

Vitor Daniel reverse engineered & probed his university's mobile app API with HTTP Toolkit, found a vulnerable endpoint leaking private data, and successfully worked with them to patch the issue. Great write-up!

https://t.co/v8NLHbwyOm
https://t.co/v8NLHbwyOm

[HTTP Toolkit @HttpToolkit]

@Rokkozz_ Global search is supported - in addition to the targeted filters (hostname=, header[x]*=y), you can use contains(x) to search every single field & the body for any string you like. Is that what you're looking for?

Filtering docs are here: https://t.co/vvkKwxLYvp

[HTTP Toolkit @HttpToolkit]

It's hard to find the needle in the haystack sometimes...

You can now right-click any request in HTTP Toolkit to use its hostname as a filter, to quickly hide any host or show it exclusively, in one click right from the traffic itself 🪡

[HTTP Toolkit @HttpToolkit]

It'd be easy to add more one-click filters to this menu - any suggestions for what you'd like to be able to quickly add?

[HTTP Toolkit @HttpToolkit]

Interested in how rate limiting can work to throttle HTTP clients effectively? Tony Finch has written some fascinating thoughts about the (relatively) new HTTP standard Rate Limit Header: https://t.co/Yq18NXrLAA
https://t.co/Yq18NXrLAA

[Satyansh Chand @SatyanshChand]

𝗛𝗧𝗧𝗣 𝗧𝗼𝗼𝗹𝗸𝗶𝘁 – API debugging on steroids

• Inspect real HTTP traffic
• Debug auth, headers, TLS
• Better than Postman for deep issues

🔗 https://t.co/H2Uz9hBElS

[Iñigo Garcia Olaizola @igolaizola]

The second feature I use the most in @HttpToolkit is exporting a filtered list of requests to a .har file.

This way I can use an Android app while intercepting requests, generate the .har and then feed it to an LLM to generate code from its contents.

[HTTP Toolkit @HttpToolkit]

Interested in debugging terminal & Docker network traffic with HTTP Toolkit?

Take a skim through this quick intro from Learn Code Camp to get started: https://t.co/MVHO2Bo3pZ
https://t.co/FuNBf7r2Cc

[HTTP Toolkit @HttpToolkit]

As if this weren't exciting enough already, I've also just sent this out to the mailing list and written up a whole summary of what's new in HTTP Toolkit recently, and what could be coming up next!

Take a look: https://t.co/tdXOFIKw4C

[HTTP Toolkit @HttpToolkit]

It's that time of year again, and so as the prophecy foretold, there must be a new HTTP Toolkit Black Friday deal 💸

This year it's **50% off forever** on all HTTP Toolkit Pro annual subscriptions, from now till Tuesday, with code BLACKFRIDAY25. Happy Thanksgiving/shopping week!

[HTTP Toolkit @HttpToolkit]

Big milestone: HTTP Toolkit just crossed one million downloads! 🚀

Honestly I didn't think it'd ever get this far, I'm blown away. A huge thanks to all the users, contributors & supporters over the years ❤️. Onwards!

[HTTP Toolkit @HttpToolkit]

If you like turning HTTP into code, you'll be excited to hear that HTTP Toolkit can now export requests as ready-to-use code for:

- Rust's Reqwest library
- Ruby's Faraday library
- Crystal's built-in APIs
- Spring RestClient on the JVM

Plus plenty of other fixes & tweaks too!

[HTTP Toolkit @HttpToolkit]

And as ever, this is all #opensource - if you want to do the same elsewhere there's a new standalone JS library just for this: https://t.co/XsVKI2wq4S

[HTTP Toolkit @HttpToolkit]

Want to quickly get a curl request into HTTP Toolkit's Send tool, to start tweaking & testing parameters?

If you paste curl commands directly into the Send page URL bar, it'll now automatically parse it and fill out all the fields for you ✨

[HTTP Toolkit @HttpToolkit]

The best feature requests are the ones where the feature is already live 😀 https://t.co/8eClBIO9vc

Did you know you can breakpoint requests & responses in live traffic with HTTP Toolkit, to modify them, inject a response or simulate errors?
https://t.co/8eClBIO9vc