APIRequest
Test any API endpoint directly from your browser. APIRequest is a fast, free, browser-based HTTP client that lets you send GET, POST, PUT, PATCH, DELETE, HEAD, and OPTIONS requests with custom headers, authentication, and request bodies — no installs and no sign-ups. An optional server proxy is available for targets that block cross-origin (CORS) requests.
APIRequest provides a clean, developer-focused interface for crafting and sending HTTP requests. Set your method, URL, query parameters, headers, and body. Choose from multiple auth modes including Bearer token, Basic auth, and custom headers. View the full response with status code, timing, size, and parsed headers.
By default, requests are sent directly from your browser using the Fetch API and never pass through our servers. If you enable the optional "Bypass CORS via server proxy" toggle (useful when a target blocks cross-origin requests), that request is relayed through our server instead. Request history is always stored locally in your browser's localStorage.
Select your HTTP method, enter the target URL, and click Send. Use the Params tab to add query parameters — they'll sync with your URL automatically. Add custom headers, configure authentication, and set a request body (JSON, plain text, form-urlencoded, or multipart form data).
After sending, inspect the response body (with JSON pretty-printing), headers, status code, response time, and payload size. Copy the response, generate a cURL command equivalent, or save it to your local history for quick replay.
Yes, completely free. There are no paid plans, no feature gates, and no account required. Open the page and start testing.
By default, no — requests are made directly from your browser using the Fetch API. The only exception is when you turn on the "Bypass CORS via server proxy" toggle: those requests are relayed through our server so they can reach targets that block cross-origin requests. Proxied traffic is forwarded in real time and not stored or logged.
CORS (Cross-Origin Resource Sharing) is a browser security mechanism. If the target API doesn't include the appropriate Access-Control-Allow-Origin headers, the browser will block the response. To work around this, enable the "Bypass CORS via server proxy" toggle above the request tabs — the request is then relayed through our server, which isn't subject to the browser's cross-origin restrictions. APIRequest also retries through the proxy automatically when a direct request is blocked.
History is stored in your browser's localStorage. It never leaves your device. You can clear it anytime using the History panel. Be mindful of storing sensitive tokens or credentials in requests, as localStorage is accessible to any script on the same origin.
The multipart form-data mode currently supports key-value text fields only. File upload support is not available in this version.
APIRequest works in all modern browsers — Chrome, Firefox, Safari, Edge — that support the Fetch API and ES6. It is not designed for Internet Explorer.