ToolsTray CORS & API Client Helper

Companion to the ToolsTray API Client. Sends requests a browser tab cannot: no CORS, all headers, real cookies, Digest auth.

This extension works only on the ToolsTray API Client at https://toolstray.com/tools/api-client. It does nothing on any other site, and it is not a general-purpose CORS unblocker. A browser tab is not allowed to make the requests an API client needs to make. It is subject to CORS, so an API that has not explicitly allowed the page refuses to answer at all. It can read only seven response headers. It cannot read Set-Cookie, cannot see the redirects it was sent through, and refuses to send headers the browser writes itself, such as Origin, User-Agent and Cookie. With this extension installed, the API Client can: - Send without CORS, so an API that never allowed the page still answers. - Show every response header the server sent, not the seven a page may read. - Send Origin, User-Agent, Cookie, Referer and the rest exactly as you type them. - Report the cookies the server set and the chain of redirects it sent you through. - Break the time down into connecting, waiting and downloading. - Answer Digest and NTLM authentication challenges, which a page cannot do at all. Permissions are asked for one address at a time. Installing it grants nothing: the first time a request needs a host, the extension asks for that host alone, and you can withdraw any of them from your browser's extensions page whenever you like. It collects nothing, sends us nothing, contains no analytics and no remote code. Requests go from your machine to the address you typed. Privacy policy: https://toolstray.com/privacy