ModHeader – HTTP Header Editor & Redirect

Add, edit or remove HTTP headers per site. Fix CORS, change user agents, add auth tokens, and redirect or block URLs

Modify HTTP request and response headers in Chrome, per site, in a few clicks. Fix CORS, set a user agent, send auth tokens, remove CSP, redirect or block URLs while you develop and test. No sign-in for Free, and your header values are never uploaded. ★ WHAT YOU CAN DO • Add, change or remove request headers: Authorization, Cookie, User-Agent, Referer, X-Forwarded-For, or your own X- headers • Modify response headers: Access-Control-Allow-Origin (CORS), Content-Security-Policy, X-Frame-Options, and more • Set, Append or Remove each header - turn a whole section on or off in one click • Apply to all sites, or only domains / URL patterns / regex - with exclude rules • Limit a profile to request methods (GET, POST…) and request types (page, XHR/fetch, script…) • Redirect URLs with regex capture groups (for example, production API calls to localhost) • Block URLs to test how your app handles a failed request • Test a URL: see which rules would run on a request - and why the others would not • Copy as cURL: reproduce the request with your headers in a terminal • Profiles + Environment Switcher (Local / Staging / Prod) - Duplicate as Staging in one click • One-click presets: Allow CORS, Bearer token, Disable cache, Remove CSP, Allow iframe, Mobile user agent, JSON API, Googlebot user agent • Keyboard shortcuts: Alt+Shift+H pauses everything, Alt+Shift+P switches profile • Share a profile by link (option to hide tokens and cookies) ★ IMPORT YOUR EXISTING PROFILES Paste a ModHeader JSON export or drop the file on the welcome page. Request headers, response headers, URL filters and redirects convert for you - several profiles at once are fine. ★ HOW TO USE - Click the ModHeader icon. - Type a header name and value, or pick a Quick add preset. Press Enter to add the next one. - Click Allow access if asked, then reload the page. The top line tells you where your rules are running. ★ FREE • Up to 10 rules per profile (headers + redirects + blocks) • Domain, URL and regex filters, method and request-type limits • Up to 2 profiles (e.g. Local + Staging; imports may keep more - extras unlock with Premium) • Environment chips and Duplicate as Staging • Test a URL, Copy as cURL, presets, import, export and share links • No sign-in required for Free ★ PREMIUM - $6.99/month or $69.90/year • Unlimited profiles and rules (including Prod and client setups) • Auto-expiry for temporary headers, redirects and blocks (1h / 24h / 7d) • Sync across computers - secret header values stay off the cloud unless you opt in • Version history - restore a previous cloud snapshot • Apply a profile to the current tab only • Sync conflict choice: keep this computer or use the cloud copy Sign in with Google to buy or manage Premium. Unlock opens checkout after sign-in; Account → Sign in alone does not charge you. Cancel anytime from Manage subscription. ★ BUILT FOR MANIFEST V3 AND PRIVACY • declarativeNetRequest: ModHeader changes headers but cannot read your pages or traffic • Site access only when you click Allow access - can be limited to specific domains • Header lists stay on this device until you turn on Premium sync • Share links carry the profile in the link fragment - not stored on our server for sharing Made for web developers, QA testers, API developers and security testers. Questions: support@getpickads.com Privacy: https://getpickads.com/headerswap/privacy Product: https://getpickads.com/extensions/headerswap