ReqSwapr

Replace request URLs in the browser using wildcard rules, per tab, and watch the traffic.

ReqSwapr replaces request URLs in the browser using wildcard rules, so a tab can talk to a different server without changing the app. For example, a deployed frontend can call an API or proxy running on your machine. RULES Add a target and a destination, such as: https://api.example.com/* → http://localhost:9002/* Each * in the destination takes the text from the matching * in the target, so paths and query strings carry across. When several rules match, the first in the list wins. Rules can be switched on or off, edited, reordered or deleted. PER TAB OR ALL TABS Nothing is replaced until you add a rule and turn it on. Turn replacing on for just the current tab or for all tabs, and turn it off for individual tabs. The toolbar badge shows ON where replacing is active. Top-level page navigation is never replaced, so the page itself always loads from its real URL. TRAFFIC VIEW While the side panel is open, it lists the active tab's requests: method, URL, status, resource type and timing, with the original and replaced URL side by side. Use it to confirm that a rule matched and to see why a request failed. Request and response bodies and headers aren't shown. HOW REQUESTS ARE REPLACED fetch and XMLHttpRequest calls are rewritten in the page before they're sent, so there's no redirect. Other requests, such as scripts and stylesheets, are replaced by Chrome's declarativeNetRequest API. OPTIONAL: REMOVE PAGE CSP A page's Content-Security-Policy can block the destination you chose. An optional setting, off by default, removes that response header from pages and frames in tabs where ReqSwapr is on. This applies on every site in those tabs, and those pages have less protection while it's on. The side panel shows a warning while it applies. PRIVACY ReqSwapr has no servers, accounts, analytics or ads. Your rules and settings stay in your browser, and the traffic list is held in memory only. Matching requests go only to the destinations you configure. This is a tool for developers. Only point rules at servers you trust, because a replaced request carries whatever the page sends, including any Authorization header and body.