What does this tool do?
The HTTP Headers Reference lists common HTTP headers such as Accept, Authorization, Cache-Control, Content-Type, Set-Cookie and Strict-Transport-Security with descriptions and example values. It tags each header as request, response, entity or general, making it ideal for developers debugging APIs who want to learn quickly what each header does.
How to use it
- Enter an address, domain or value.
- View the results instantly.
- Copy the details you need.
What the header categories mean
Each header in the list carries a colored category badge. Request headers (such as Accept, Cookie, User-Agent) travel from the client to the server; response headers (ETag, Location, Set-Cookie) come back from the server to the client. Entity headers describe the body (Content-Type, Content-Length), while general headers apply in both directions (Cache-Control). Use the category buttons at the top to filter the list so you see only the type of header you are looking for at the moment.
Understanding the security headers
The reference also includes security headers that harden modern sites. Strict-Transport-Security forces the browser to use HTTPS only, X-Content-Type-Options: nosniff stops MIME sniffing, and X-Frame-Options controls whether your page can be embedded in an iframe, mitigating clickjacking. The HttpOnly, Secure and SameSite flags in the Set-Cookie example show the right way to set cookies safely. You can copy any header along with its example value with one click.
Frequently asked questions
Can I filter headers by category?
Yes. Use the all, request, response, entity and general buttons at the top to narrow the list, and type a header name or a word from its description into the search box to filter instantly.
What is the difference between a request and a response header?
Request headers are information the client sends to the server (such as Authorization, Accept-Language). Response headers are information the server returns (such as Location, ETag). The badge next to each header shows its type.
Can I use the example values as-is?
The examples show the format; replace the real values for your environment. For instance, use your own token for Authorization and your own domain for Host.
Is HTTP Headers Reference free?
Yes. HTTP Headers Reference and all 300+ tools on MagmaNex are completely free with no signup or account required.
Is my data safe?
Yes. Everything runs locally in your browser. The data you enter is never sent to a server, stored, or shared.
Does it work on mobile?
Yes. HTTP Headers Reference works on phones, tablets and desktops — no app download needed.
🔒 Privacy: everything runs in your browser, your data is never sent to a server.