Test Webhooks Online with a Temporary HTTP Request Bin
Create a temporary receive URL and inspect webhook requests on one page. Learn the storage limits, header redaction, bin access model, and safe test-data rules.
http or https only. javascript:, data:, and file: are rejected.
The request stops after 15 seconds.
Response
Send a request to see the response.
How to send a request
-
Set method and URL
Choose a method. Enter a public http or https URL. -
Add headers and body
Optional. Set Content-Type yourself if the server needs it. -
Send
Send the request. After 15 seconds it stops. -
Read the result
The panel shows status, headers, and body.
Guides and articles
Read instructions and examples for this tool.
HAR Viewer: Inspect DevTools Logs in Your Browser
Open a HAR export, read each network entry, and copy one request as cURL. Parse runs in your browser. FindUtils does not receive the file.
HTTP Request Builder: Send Public HTTP Calls Safely
Set method, URL, headers, and body, then send to a public http or https host. Localhost and private ranges are blocked. Body limit is 64 KB.
How to Debug a Failed HTTP Request From a HAR File
A practical debug path: save a HAR, inspect the table, copy one cURL, and send the public request again. Parse stays in the browser.
Common Use Cases
Public API Checks
Send a request to a public HTTP or HTTPS endpoint and inspect its status, headers, and body.
Header Experiments
Add content, authorization, or custom headers and compare the server response.
Webhook Delivery Tests
Send a sample payload to a public receive URL before you connect an application.
Error Response Review
Check the response from an endpoint that is difficult to call from a browser because of CORS.
Why use this builder
Send an HTTP request and read status, headers, and body. Only public http and https hosts are allowed. Private and local addresses are rejected. The abort timeout is 15 seconds.
FindUtils HTTP Request Builder sends GET, POST, PUT, PATCH, DELETE, HEAD, or OPTIONS requests to public HTTP and HTTPS URLs. You can add allowed headers and a request body, then inspect the returned status, headers, body, and duration.
The request passes through the FindUtils request service so public endpoints can be tested without destination browser CORS permission. The service follows redirects, stops after 15 seconds, and rejects local, private, metadata, and single-label hosts.
The builder limits request and response sizes and rate limits repeated use. Use the Webhook Tester for a temporary receive URL, or convert a reviewed command with cURL to Code.
How it compares
A browser fetch is limited by the destination's CORS policy. This builder uses a controlled request service for public hosts, but it does not provide local network access, collections, history, or automated assertions.
A desktop API client can store collections and test scripts. FindUtils is better for a short public-endpoint check. Use HAR to cURL when the source request comes from a browser archive.
HTTP Request Tips
- Use HTTPS when a request contains credentials or other sensitive data.
- Set Content-Type yourself when the destination expects JSON or another specific format.
- Keep the request body below 64,000 characters and the URL below 2,048 characters.
- Review the response ending because bodies longer than 200,000 characters are truncated.
- Do not use this tool for localhost, private networks, metadata services, or single-label internal hosts.
Frequently Asked Questions
Which URLs are allowed?
FindUtils allows public HTTP and HTTPS hosts. Localhost, private ranges, metadata addresses, and single-label internal hosts are rejected.
Why can a normal browser fetch fail with CORS?
A destination can reject a direct browser request through its CORS policy. FindUtils uses a controlled request service for permitted public hosts.
Can I hit localhost?
No. Localhost, private ranges, metadata addresses, and single-label internal hosts are rejected. The tool is for public endpoints only.
Is there a timeout?
Yes. The browser stops waiting after 15 seconds. A slow or unavailable destination can therefore return a timeout result.
Are findutils.com cookies sent?
No. The browser call to FindUtils omits browser credentials. The service forwards only allowed request headers that you enter.
Does the request pass through FindUtils?
Yes. A FindUtils request service sends the request to the public destination. It returns a limited response to the browser page.
Does it follow redirects?
Yes. The request service follows redirects. Every destination in the redirect path must still meet the public-host rules.
What are the body limits?
The request body limit is 64,000 characters. A response body is limited to 200,000 characters and receives an ellipsis when truncated.
Can I add any HTTP header?
You can add normal request headers. The service ignores restricted or connection-specific names, including Host, Content-Length, Connection, and Set-Cookie.
Is there a rate limit?
Yes. The service allows 30 requests per minute for one client IP. Wait before another request when the limit returns an error.