LessInAILessInAI home
Skip to content

Developer · Tools

HTTP Headers Inspect

Parse a raw HTTP header block and explain every header line.

Runs locally in your browser. Your input is not uploaded or stored. You can verify this in your browser’s network panel.

What does this tool solve?

HTTP headers are name: value lines sent with every request and response. They control caching, content types, cookies, and a large part of web security. This tool parses the raw block you copied and flags the headers that matter most for security.

Continue with URL Inspect

What examples should you start with?

Inspect response headers

Input
HTTP
HTTP/2 200
content-type: text/html; charset=utf-8
cache-control: no-store
Output
HTTP
content-type: text/html; charset=utf-8
cache-control: no-store

Inspect security headers

Input
HTTP
strict-transport-security: max-age=63072000
x-content-type-options: nosniff
Output
HTTP
strict-transport-security: HSTS note
x-content-type-options: MIME sniffing note

How does it work?

Each non-empty line is parsed as a case-insensitive field name followed by a colon and its value. An initial request or status line is skipped automatically.

Known security headers receive a short explanation. The parser also joins obsolete folded continuation lines so copied real-world headers remain readable.

What are the edge cases and limits?

  • A leading status or request line (HTTP/2 200, GET / HTTP/1.1) is detected and skipped.
  • Obsolete folded continuation lines are joined back into their header.
  • Header names are case-insensitive; the table normalizes them to lowercase.

Technical reference

Related tools

  • URL InspectParse a URL into scheme, host, port, path, query parameters, and fragment.