HTTP Header Parser

Paste raw HTTP request or response headers to parse and inspect them. Common headers include explanations.

Raw HTTP Headers

Response200 HTTP/2

Header	Value	Description
content-type	application/json; charset=utf-8	Indicates the media type of the resource/body, including optional charset.
cache-control	no-cache, no-store, must-revalidate	Directives for caching mechanisms in requests and responses.
x-request-id	4f3a2b1c-8d9e-4f1a-b2c3-d4e5f6a7b8c9	Unique identifier for the request, used for tracing.
x-ratelimit-limit	1000	Maximum number of requests allowed in the rate limit window.
x-ratelimit-remaining	999	Number of requests remaining in the current rate limit window.
x-ratelimit-reset	1750000000	Unix timestamp when the rate limit window resets.
strict-transport-security	max-age=31536000; includeSubDomains; preload	Forces browsers to only use HTTPS for this domain.
content-encoding	gzip	Encoding applied to the response body (gzip, br, deflate).
vary	Accept-Encoding	Tells caches which request headers to use for cache key variation.
access-control-allow-origin	*	CORS header specifying which origins can access this resource.
content-length	342	The size of the response body in bytes.

HTTP Header Parser

HTTP headers carry metadata about requests and responses. Security headers like Strict-Transport-Security, Content-Security-Policy, and X-Content-Type-Options protect against common attacks. Cache headers like Cache-Control and ETag control browser caching behavior. Copy headers from browser DevTools (Network tab → Headers) or from curl -v output.