HTTP Request Builder: Send Public HTTP Calls Safely

An HTTP request builder lets you set method, URL, headers, and body, then read status, headers, and body from the response. Open the FindUtils HTTP Request Builder to send a request to a public http or https host. Private, local, and metadata addresses are rejected. The abort timeout is 15 seconds. The request body limit is 64 KB.

Only http:// and https:// URLs are allowed. javascript:, data:, and file: are rejected.

Why Use a Request Builder

A builder is faster than writing a one-off script when you need to see a status line. It is also safer than a wide-open proxy, because private and loopback hosts are blocked.

Use this builder when:

• You need a public API status quickly. Send GET or POST and read the body.
• You copied a request from a HAR or cURL. Replay it against a public host.
• You must not hit localhost. The builder rejects loopback, private ranges, and metadata addresses.
• You want typed headers only. The browser call to FindUtils uses credentials: omit. Only headers you type are sent to the destination.

The honest limit: this is not a full desktop API client. It will not open http://127.0.0.1, it will not send findutils.com cookies, and it stops after 15 seconds.

How to Send a Request

Choose a method. Enter a public URL. Add headers and a body only when the server needs them.

Step 1: Set method and URL

Open the FindUtils HTTP Request Builder. Choose GET, POST, PUT, PATCH, DELETE, HEAD, or OPTIONS. Enter a public http or https URL.

Step 2: Add headers and body

Optional. Set Content-Type yourself if the server needs it. The default sample header is Accept: application/json. Keep the body under 64 KB.

Step 3: Send

Click Send. After 15 seconds the request stops.

Step 4: Read the result

The panel shows status, headers, and body. Look up an unfamiliar status on the HTTP Status Code Lookup tool.

HTTP Request Builder vs cURL vs a Desktop Client

Each surface has a different trust and reach model.

Best for: Use FindUtils for a short call to a public host. Use cURL or a desktop client for localhost, private APIs, large bodies, or long-running requests.

If you already have a command, convert it with cURL to Code. If you have a DevTools export, inspect it in the HAR Viewer first.

Practical Examples

Example 1: Check a public JSON endpoint

Method GET. URL https://example.com/. Header Accept: application/json. Read status and body.

Example 2: Replay a public POST from a HAR row

Parse the HAR. Copy cURL. Recreate method, URL, headers, and body in the builder. Send only if the host is public.

Example 3: Confirm a blocked local URL

Enter http://127.0.0.1:3000/. The builder rejects it. That is the intended safeguard, not a bug.

Common Mistakes

Mistake 1: Pointing the builder at localhost

Localhost, private ranges, and metadata addresses are rejected. Use cURL on your own machine for local servers.

Mistake 2: Omitting Content-Type on JSON POST

The builder does not guess. Add Content-Type: application/json when the server expects JSON.

Mistake 3: Sending a body over 64 KB

The request fails with a body-too-large error. Trim the payload or use cURL.

Mistake 4: Waiting through a hung host

The timeout is 15 seconds. A host that never answers fails with the timeout message.

Limits You Should Plan For

The builder sends only to public http and https hosts. That rule is the product. It is not a temporary CORS workaround.

The timeout is 15 seconds. The body cap is 64 KB. Too many requests in a short window return a rate-limit error. Wait a minute and try again.

The browser call to FindUtils uses credentials: omit. FindUtils cookies are not forwarded. Only headers you type go to the destination.

This page is not a substitute for cURL against localhost or a VPN-only API.

Tools Used in This Guide

• HTTP Request Builder — Send a public HTTP request and read the response
• HAR Viewer — Inspect a DevTools HAR and copy cURL
• cURL to Code — Convert a cURL command into code
• HTTP Status Code Lookup — Explain a status code

FAQ

Q1: Is the HTTP request builder free? A: Yes. FindUtils HTTP Request Builder is free, with no signup.

Q2: Which URLs are allowed? A: Public http and https hosts. Localhost, private ranges, and metadata addresses are rejected.

Q3: Can I hit localhost? A: No. Localhost, private ranges, and metadata addresses are rejected.

Q4: Is there a timeout? A: Yes. 15 seconds.

Q5: Are findutils.com cookies sent? A: No. The browser call to FindUtils uses credentials omit. Only headers you type are sent to the destination.

Q6: Why might a public site fail? A: The host may be down, DNS or TLS may fail, the body may be too large, or you may hit the rate limit.

Q7: Do I need an account? A: No. Set the fields and click Send.

Next Steps

• Inspect captured traffic with the HAR Viewer
• Convert a working command with cURL to Code
• Read the HAR viewer guide
• Look up codes with HTTP Status Code Lookup