HTTP/2 200
date: Mon, 21 Jul 2025 09:47:12 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"afc4e19c443ebd2c5784b4d9313eedab"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: origin-when-cross-origin, strict-origin-when-cross-origin
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=mJPkLx7kVgvKCnnhsSxQEC1exleCsalWlNVUMDfxzxrI5HiEj3pfiTqxPS1uee3qAAHMqxXHHML%2BeiyVxNMYuqnOhluO0L5mb%2BimwWwgVCQn52XP6z4USyMclQRR6Am1LwtAu4uak%2FCA0YzSVOP0NoCftCdik6nbTr2guUOHnBr3iL3XdIpSjzh9IeK%2BtOz0h%2BuWFUU08PSBtMnMogVYHszNAxVZvJ2dwYdYBws4eDiF20O%2F2jDiZ%2FSfqN7JwP9J5%2FZhK%2Bfti%2FeQh3zWUcYG2g%3D%3D--yxbAqJKFTJ1L4D5E--LA3Kq336qVihRTzi8z%2Bi1Q%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1832726433.1753091231; Path=/; Domain=github.com; Expires=Tue, 21 Jul 2026 09:47:11 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Tue, 21 Jul 2026 09:47:11 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: 878E:A43E1:1B65DB7:22FFF12:687E0C9F
HTTP Toolkit · GitHub
HTTP Toolkit
Beautiful & open-source tools to debug, test and develop with HTTP(S)
Verified
We've verified that the organization httptoolkit controls the domain:
Pinned
Loading
HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac 🎉 Open an issue here to give feedback or ask for help.
3.1k
78
Powerful friendly HTTP mock server & proxy library
TypeScript
814
95
The UI of HTTP Toolkit
TypeScript
314
121
The backend of HTTP Toolkit
JavaScript
498
112
Electron wrapper to build and distribute HTTP Toolkit for the desktop
TypeScript
673
93
Automatic Android interception & debugging with HTTP Toolkit, for Android
Java
557
86
Repositories
Showing 10 of 79 repositories
httptoolkit/frida-interception-and-unpinning’s past year of commit activity
JavaScript
1,500
AGPL-3.0
226
61
1
Updated Jul 18, 2025
httptoolkit/android-ssl-pinning-demo’s past year of commit activity
Kotlin
155
Apache-2.0
32
0
0
Updated Jul 18, 2025
httptoolkit/httptoolkit-ui’s past year of commit activity
TypeScript
314
AGPL-3.0
121
9
13
Updated Jul 18, 2025
accounts
Public
The API & dashboard that power HTTP Toolkit account management
httptoolkit/accounts’s past year of commit activity
TypeScript
10
AGPL-3.0
6
0
1
Updated Jul 17, 2025
mockttp
Public
Powerful friendly HTTP mock server & proxy library
httptoolkit/mockttp’s past year of commit activity
TypeScript
814
Apache-2.0
95
36
2
Updated Jul 17, 2025
xz-decompress
Public
XZ decompression for the browser & Node without native code, via WebAssembly
httptoolkit/xz-decompress’s past year of commit activity
JavaScript
10
6
2
0
Updated Jul 17, 2025
httptoolkit/openapi-directory-js’s past year of commit activity
TypeScript
24
MIT
6
1
0
Updated Jul 15, 2025
httptoolkit-desktop
Public
Electron wrapper to build and distribute HTTP Toolkit for the desktop
httptoolkit/httptoolkit-desktop’s past year of commit activity
TypeScript
673
AGPL-3.0
93
8
4
Updated Jul 1, 2025
httptoolkit-website
Public
The main website of HTTP Toolkit: beautiful, cross-platform & open-source tools to debug, test and develop with HTTP(S).
httptoolkit/httptoolkit-website’s past year of commit activity
MDX
83
MIT
34
1
2
Updated Jul 1, 2025
frida-js
Public
Pure-JS bindings to control Frida from node.js & browsers
httptoolkit/frida-js’s past year of commit activity
TypeScript
38
Apache-2.0
8
0
0
Updated Jun 24, 2025
You can’t perform that action at this time.