HeaderSwap – Modify HTTP Request & Response Headers

Add, change or remove HTTP request & response headers per site. Fix CORS, set user agent, send auth tokens, redirect URLs.

Modify HTTP request and response headers in Chrome, per site, in a few clicks. Fix CORS, set a user agent, send auth tokens, remove CSP, and redirect URLs while you develop and test - without uploading your header values for Free use. ★ WHAT YOU CAN DO • Add, change or remove request headers: Authorization, Cookie, User-Agent, Referer, X-Forwarded-For, or your own X- headers • Modify response headers: Access-Control-Allow-Origin (CORS), Content-Security-Policy, X-Frame-Options, and more • Set, Append, or Remove each header • Apply to all sites, or only domains / URL patterns / regex - with exclude rules • Redirect URLs with regex capture groups (for example, API calls to localhost) • Profiles + Environment Switcher (Local / Staging / Prod) - Duplicate as Staging in one click • One-click presets: Allow CORS, Disable cache, Mobile user agent, Remove CSP, Bearer token • Share a profile by link (option to hide tokens and cookies). Pause everything with one switch ★ SWITCHING FROM MODHEADER? Export from ModHeader, then paste JSON or drop the file into HeaderSwap. Request headers, response headers, filters, and redirects convert for you - several profiles at once are fine. ★ HOW TO USE 1. Click the HeaderSwap icon. 2. Type a header name and value, or pick a preset. Label Local, then Duplicate as Staging when you need a second token set. 3. Click Allow access if asked, then reload the page. ★ FREE • Up to 10 rules per profile (headers + redirects) • Domain, URL, and regex filters • Up to 2 profiles (e.g. Local + Staging; imports may keep more - extras unlock with Premium) • Environment chips and Duplicate as Staging • Presets, import, export, and share links • No sign-in required for Free ★ PREMIUM - $6.99/month or $69.90/year • Unlimited profiles and rules (including Prod and client setups) • Auto-expiry for temporary headers and redirects (1h / 24h / 7d) • Sync across computers - secret header values stay off the cloud unless you opt in • Version history - restore a previous cloud snapshot • Apply a profile to the current tab only • Sync conflict choice: keep this computer or use the cloud copy Sign in with Google to buy or manage Premium. Unlock opens checkout after sign-in; Account → Sign in alone does not charge you. Cancel anytime from Manage subscription. ★ BUILT FOR MANIFEST V3 AND PRIVACY • declarativeNetRequest: HeaderSwap changes headers but cannot read your pages or traffic • Site access only when you click Allow access - can be limited to specific domains • Header lists stay on this device until you turn on Premium sync • Share links carry the profile in the link fragment - not stored on our server for sharing • Anonymous usage stats (feature counts only - never URLs or header values) can be turned off on Welcome or More Made for web developers, QA testers, API developers, and security testers. HeaderSwap is not affiliated with ModHeader. The name is used only to describe import compatibility. Questions: support@getpickads.com Privacy: https://getpickads.com/headerswap/privacy Product: https://getpickads.com/extensions/headerswap