Cookied
Open source · MIT

The HTTP interceptor you install without reading the permissions policy.

Redirect requests, rewrite headers, unblock CORS and mock responses — in the browser, on your machine. No account. No cloud. Nothing leaves the device unless you ask it to.

Five permissions, each explained in the extension. Site access is asked for one domain at a time.

Every rule type, no limits, on the free tier

  • Redirect

    Send a request somewhere else, or swap out its host.

  • Headers

    Add, replace or remove request and response headers.

  • Block

    Cancel a request before it leaves the browser.

  • Query

    Add, replace or strip URL query parameters.

  • CORS

    Spoof the origin and return permissive CORS headers. No backend needed.

  • Cookie

    Create, change or delete cookies by pattern.

  • Script

    Inject JavaScript or CSS into matching pages.

  • Mock

    Replace or patch a response body, override the status, or add a delay.

  • WebSocket

    Drop, replace or patch WebSocket messages as they pass through.

Local-first by default. Your rules stay on your device unless you turn sync on.