RequestPilot — HTTP Header & Request Modifier

Modify HTTP request and response headers for development and testing. Fast, secure, privacy-first.

RequestPilot is a fast, lightweight developer extension designed to simplify API testing, cross-origin request debugging, and environment routing. Whether you're developing locally, testing microservices on staging, or debugging third-party integrations, RequestPilot gives you complete control over your browser's network requests without clunky proxies or server re-deployments. ⚡ KEY FEATURES 🚀 1-Click Environment Switching Create organized profiles (e.g., Staging API, Localhost, QA) and switch active header rule sets instantly with one click or keyboard shortcut (Shift+Cmd+H). 🔓 Effortless CORS Bypass Override Access-Control-Allow-Origin, Headers, and Methods on the fly. Test local frontend applications against remote staging APIs without CORS errors. 🔑 Automated Auth & JWT Token Manager Automatically fetch OAuth2 / JWT bearer tokens, decode payloads in real time, monitor token expiration with a live countdown timer, and auto-inject Authorization headers into your requests. 🛡️ Sensitive Data Masking & Zero Telemetry Keep your credentials safe. Sensitive tokens and API keys are masked in the UI. 100% of your rules, profiles, and data stay exclusively inside your browser sandbox — zero analytics, zero external servers. 🔍 Native Chrome DevTools Panel Monitor rule execution in real time directly inside the Chrome DevTools network panel with detailed match diagnostics and debug logs. 🔄 JSON Import & Export Easily share mock rules, environment profiles, and variable templates with your engineering team via clean JSON files. ⚙️ GRANULAR RULE CONFIGURATION - Target by domain, prefix, exact URL, wildcards, or regex patterns. - Filter by HTTP method (GET, POST, PUT, DELETE, PATCH, OPTIONS, HEAD). - Filter by resource type (Fetch/XHR, Main Frame, Sub Frame, Script, Stylesheet, etc.). - Inject, replace, or remove request headers, response headers, and query parameters.