HeaderSwap – Modify HTTP Headers for Web Development

Add, change, or remove HTTP request and response headers for selected sites. HeaderSwap helps developers and QA teams test CORS behavior, set user agents, send authentication tokens, adjust security headers, and redirect URLs while developing and testing web applications.

Apply profiles to all sites or limit them to specific domains, URL patterns, or regular expressions. Label Local / Staging / Prod and Duplicate as Staging in one click.

Free plan available. Premium is $6.99 / month or $69.90 / year.

HeaderSwap editing request and response headers1 / 5

What Is HeaderSwap?

HeaderSwap is a Chrome extension for managing HTTP headers and URL redirects during web development and testing. Create profiles for different projects or environments, apply presets, and switch configurations when needed.

It uses Chrome’s declarativeNetRequest API. HeaderSwap changes headers but is designed not to read page content or network traffic - see the privacy policy for details.

Moving from ModHeader? Export profiles there, then paste JSON or drop the file into HeaderSwap for conversion where supported.

Key Features

Modify request headers

Add, change, or remove headers such as Authorization, Cookie, User-Agent, Referer, and custom X- headers.

Modify response headers

Change supported response headers, including those used when testing CORS or browser security behavior.

Site-specific rules

Apply settings to all sites or restrict them by domain, URL pattern, or regular expression.

URL redirects

Redirect URLs using regular expressions and capture groups.

Environment Switcher

Label profiles Local / Dev, Staging, or Prod. Duplicate as Staging keeps headers and filters so you can swap tokens fast.

Auto-expiry and sync

Premium: auto-expire temporary tokens (1h / 24h / 7d), sync across computers with secrets off by default, and restore from version history.

Presets

Use supported presets such as Allow CORS, Disable cache, Mobile user agent, Remove CSP, and Bearer token.

Import from ModHeader

Import compatible profiles by pasting JSON or dropping an exported file.

Share and pause

Share profile configurations through links (option to hide tokens), and pause all modifications with one switch.

Free vs Premium

Free

$0

  • Up to 10 rules per profile (headers + redirects).
  • Domain, URL, and regex filters.
  • Up to 2 profiles (e.g. Local + Staging).
  • Environment chips and Duplicate as Staging.
  • Presets, ModHeader import, export, and share links.

Premium

$6.99 / month or $69.90 / year

  • Unlimited profiles and rules (including Prod).
  • Auto-expiry for temporary headers and redirects (1h / 24h / 7d).
  • Cloud sync - secret header values stay off unless you opt in.
  • Version history restore and sync conflict choice.
  • Apply a profile to the current tab only.
  • Cancel anytime.

Who Is HeaderSwap for HTTP Headers For?

Web developers

Test request and response behavior across local, staging, and production environments.

QA engineers

Reproduce header-related conditions and verify how applications respond to different headers.

API developers

Test authorization headers, user-agent behavior, and API routing scenarios.

CORS debugging

Adjust supported response headers to test CORS behavior during development. Changing browser-side headers does not replace correct server-side CORS configuration in production.

Security testers

Test selected browser and HTTP header configurations in authorized environments.

How to Use HeaderSwap

  1. Install HeaderSwap from the Chrome Web Store.
  2. Open the extension and create or select a profile. Label it Local, then Duplicate as Staging when you need a second token set.
  3. Add a header, choose a preset, or configure a supported redirect.
  4. Restrict the profile to the relevant domains or URL patterns.
  5. Grant site access if prompted, then reload the page to test the configuration.

Frequently Asked Questions

What are HTTP headers?

HTTP headers carry metadata between clients and servers. Developers use them for authentication, caching, content handling, and browser security policies.

Can HeaderSwap help test CORS?

It can modify supported headers for testing. Proper production CORS behavior still needs to be configured by the server or API owner.

Can I change the User-Agent?

The product supports setting the User-Agent header in applicable requests. Browser-level behavior and site restrictions may affect results.

Can I use different profiles for different projects?

Yes. Free includes up to 2 profiles (for example Local + Staging). Premium unlocks unlimited profiles including Prod, plus sync and auto-expiry.

Can I import ModHeader profiles?

Yes. Export profiles from ModHeader, then paste the JSON or drop the file into HeaderSwap for conversion where supported.

Does HeaderSwap read my page content?

HeaderSwap is built on Chrome’s declarativeNetRequest API and is designed to modify headers without reading page content or traffic. See the privacy policy for details.

How much does Premium cost?

Premium is $6.99 / month or $69.90 / year.

Privacy

Profiles stay on your device unless you turn on Premium sync. Secret-like values are omitted from sync by default. Anonymous usage stats can be turned off. See the privacy policy for full details.

HeaderSwap privacy policy

Test HTTP Headers Without Repeating Manual Setup

Create profiles, target specific sites, and switch header configurations for your development and QA workflows.

Get HeaderSwap for Chrome

All Extensions · Contact · Terms