Uvlio

Command Palette

Search for a command to run...

Back to Tools/Developerlocal

HTTP Request Header Reference

Look up common HTTP request headers and quickly review client, auth and caching related fields.

Local

Runs locally in your browser by default — nothing is uploaded first.

Search

Header name or keyword
Search stays local in the browser and filters the reference rows instantly.

Reference

Request header referenceAccept

Tells the server which content types the client prefers.

AcceptContent negotiation
Meaning
Tells the server which content types the client prefers.
Accept-LanguageLocalization
Meaning
Lists preferred languages for the response.
AuthorizationAuthentication
Meaning
Carries Bearer tokens, Basic auth or other credentials.
Cache-ControlCaching
Meaning
Influences caching behavior for the request.
Content-TypePayload
Meaning
Describes the MIME type of the request body.
CookieSession
Meaning
Sends browser cookies back to the server.
If-None-MatchCaching
Meaning
Sends an ETag for conditional fetches.
If-Modified-SinceCaching
Meaning
Checks whether a resource changed since a date.
OriginCORS
Meaning
Identifies the calling origin for CORS requests.
RefererNavigation
Meaning
Shows the page URL that initiated the request.
User-AgentClient profile
Meaning
Identifies the browser, runtime or client app.
X-Forwarded-ForProxy
Meaning
Carries the original client IP through proxies.
X-Requested-WithAJAX
Meaning
Legacy indicator commonly used by JavaScript frameworks.

HTTP Request Header Reference runs locally in your browser by default, so you can work with the content without uploading it first.

Review what common request headers mean before you debug auth, CORS, cookies or browser behavior.

  • Understand auth and session headers
  • Check browser request metadata
  • Teach request header differences quickly

Does HTTP Request Header Reference run locally or in the cloud?

HTTP Request Header Reference runs locally in your browser by default, so you can work with the content without uploading it first.

What usually comes after HTTP Request Header Reference?

A common next step is to continue into related workflows such as Code and Data Formatting Tools.

Is a JWT encrypted?

A standard signed JWT is not. The payload is base64url text that anyone with the token can read. Encryption requires the separate JWE format.

About HTTP Request Header Reference

Review what common request headers mean before you debug auth, CORS, cookies or browser behavior.

Common use cases

  • Understand auth and session headers
  • Check browser request metadata
  • Teach request header differences quickly

How to use

  1. Search by a request header or keyword.
  2. Review the matching purpose and category.
  3. Copy the lookup result when needed.

Browse all Developer tools · All tools · Related guide