HTTPSpot

An HTTP request & response testing service inspired by httpbin.org, running on Cloudflare Workers.

More reliable, faster, and more modern.

Endpoints

/ This page.
/absolute-redirect/:n 302 Absolute redirects n times.
/anything Returns anything that is passed to the request.
/anything/:anything Returns anything that is passed to the request.
/base64/:value Decodes a Base64-encoded string.
/base64/decode/:value Explicit URL for decoding a Base64 string.
/base64/encode/:value Encodes a string into URL-safe Base64.
/basic-auth/:user/:password Challenges HTTPBasic Auth.
/bearer Checks Bearer token header - returns 401 if not set.
/brotli Returns brotli-encoded data. Must include the Accept-Encoding: br header.
/bytes/:n Generates n random bytes of binary data, accepts an optional seed integer parameter.
/cache Returns 200 unless an If-Modified-Since or If-None-Match header is provided, when it returns a 304.
/cache/:n Sets a Cache-Control header for n seconds.
/cookies Returns cookie data.
/cookies/delete?name Deletes one or more simple cookies.
/cookies/set?name=value Sets one or more simple cookies.
/deflate Returns deflate-encoded data. Must include the Accept-Encoding: deflate header.
/delay/:n Delays responding for min(n, 10) seconds.
/delete Returns request data. Allows only DELETE requests.
/deny Denied by robots.txt file.
/drip?numbytes=n&duration=s&delay=s&code=code Drips data over the given duration after an optional initial delay, simulating a slow HTTP server.
/dump/request Returns the given request in its HTTP/1.x wire approximate representation.
/encoding/utf8 Returns page containing UTF-8 data.
/etag/:etag Assumes the resource has the given etag and responds to If-None-Match header with a 200 or 304 and If-Match with a 200 or 412 as appropriate.
/forms/post HTML form that submits to /post
/get Returns GET data.
/gzip Returns gzip-encoded data. Must include the Accept-Encoding: gzip header.
/head Returns response headers. Allows only HEAD requests.
/headers Returns request header dict.
/hidden-basic-auth/:user/:password 404'd BasicAuth.
/html Renders an HTML Page.
/hostname Returns the name of the host serving the request.
/image Returns a PNG image based on sent Accept header.
/image/avif Returns a AVIF image.
/image/gif Returns a GIF image.
/image/heic Returns a HEIC image.
/image/jpeg Returns a JPEG image.
/image/jxl Returns a JPEG XL image.
/image/png Returns a PNG image.
/image/svg Returns a SVG image.
/image/webp Returns a WEBP image.
/ip Returns Origin IP.
/json Returns JSON.
/links/:n Returns page containing n HTML links.
/patch Returns request data. Allows only PATCH requests.
/post Returns request data. Allows only POST requests.
/put Returns request data. Allows only PUT requests.
/range/1024?duration=s&chunk_size=code Streams n bytes, and allows specifying a Range header to select a subset of the data with chunk_size and request duration parameter.
/redirect-to?url=foo&status_code=307 307 Redirects to the foo URL.
/redirect/:n 302 Redirects n times.
/relative-redirect/:n 302 Relative redirects n times.
/response-headers?key=val Returns given response headers.
/robots.txt Returns some robots.txt rules.
/status/:code Returns given HTTP Status code.
/stream-bytes/:n Streams n random bytes of binary data, accepts optional seed and chunk_size integer parameters.
/stream/:n Streams min(n, 100) lines.
/user-agent Returns user-agent.
/uuid Generates a UUIDv4 value.
/websocket/echo A WebSocket echo service.
/xml Returns some XML
/zstd Returns zstd data. Must include the Accept-Encoding: zstd header.

Description

Testing an HTTP library can become difficult sometimes. RequestBin is fantastic for testing POST requests, but doesn't let you control the response. This exists to cover all kinds of HTTP scenarios. Additional endpoints are being considered.

All endpoint responses are JSON-encoded.

Examples

$ curl https://httpspot.dev/ip

{
    "origin": "127.0.0.1"
}

$ curl https://httpspot.dev/user-agent

{
    "user-agent": "curl/7.79.1"
}

$ curl -I https://httpspot.dev/status/418

HTTP/1.1 418 I'm a teapot
Date: Mon, 01 Jan 2025 12:00:00 GMT
Content-Type: application/json
Content-Length: 135
Connection: close
Server: cloudflare
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: true

$ curl https://httpspot.dev/anything -d "data"

{
    "args": {},
    "data": "data",
    "files": {},
    "form": {},
    "headers": {
        "accept": "*/*",
        "content-length": "4",
        "content-type": "application/x-www-form-urlencoded",
        "host": "httpspot.dev",
        "user-agent": "curl/7.79.1"
    },
    "json": null,
    "method": "POST",
    "origin": "127.0.0.1",
    "url": "https://httpspot.dev/anything"
}

Author

Ported to Cloudflare Workers by ratazzi.

From the original Kenneth Reitz project.

HTTPSpot

Endpoints

Description

Examples

Author

See Also