Are pasted headers uploaded?

No. Header parsing runs locally in your browser.

Can I paste Authorization headers?

The parser can identify them, but you should remove or redact credentials before copying or sharing the output.

HTTP debugging utility

Turn raw request or response headers into a structured, searchable-friendly view without sending them anywhere.

Request or response headers

Before sharing output: remove Authorization, Cookie, Set-Cookie and API-key values. Parsing stays in your browser.

Content-TypePayload format

application/json; charset=utf-8

Cache-ControlCaching

private, max-age=0

Access-Control-Allow-OriginCORS

https://example.com