Interceptor | Network Debugger vs Edit HTTP Headers for Safari

Interceptor helps you inspect HTTPS traffic for selected hosts on your own iPhone or iPad. View saved request and response headers, cookies, and available JSON bodies, and inspect supported service tokens. The app uses an iOS VPN configuration to direct selected hosts through a proxy running on your device. It does not provide a remote VPN server, change your public IP address, or protect public Wi-Fi traffic. HTTPS inspection requires you to install and trust a locally generated certificate authority certificate in iOS Settings. At startup, Interceptor explains what it can access and requires agreement to the current data-use notice before you can access the main interface. Agreement alone does not start capture, install a certificate or VPN configuration, or request notification permission. Captured traffic can contain sensitive cookies, authentication tokens, account identifiers, and request or response content. Use it only with accounts and devices you are authorized to inspect. Capture is limited by the app's configured hosts; service changes or certificate restrictions may prevent capture. New capture records are stored in the app's local shared storage. New certificates, private keys, and saved tokens use Keychain items with iCloud Keychain synchronization disabled. Interceptor does not upload captured data to a developer-operated server, sell it, use it for advertising, or automatically share it with third parties. Requests still reach their original destination services. Data you choose to copy, earlier iCloud Keychain copies, and operating-system backups are separate from this local capture flow. You can review the notice and withdraw consent in Settings → Data Use & Consent. Withdrawal stops the VPN, disables automatic reconnection and clears capture notifications, and returns to the required consent screen until you agree again. Withdrawal does not erase saved records, tokens, certificates, or private keys, or remove an installed certificate profile. Clear saved request history from Home. Optional local notifications announce captured records without including tokens or captured headers and bodies in the notification.

Edit HTTP Headers for Safari is a Safari extension that lets you create rules to set or remove HTTP request headers for specific websites. Use it when you need Safari to send a custom header before a page, script, image, iframe, stylesheet, font, media file, or XHR/fetch request loads. Features: · Create Custom Header Rules: Add HTTP header rules for the websites you choose. · Set Request Headers: Replace or add a header value before Safari loads a matching request. · Remove Request Headers: Remove selected headers from matching requests when you do not want them sent. · Per-Website Rules: Create different header rules for different domains. · Resource Type Controls: Choose exactly where a rule applies, including main pages, iframes, scripts, images, stylesheets, fonts, media, and XHR/fetch requests. · iCloud Sync: Keep your header rules synced across iPhone, iPad, and Mac. · Privacy-first design: No data collection, tracking, or logging, your browsing stays completely private. · Multilingual support: Use the extension in multiple languages for a globally friendly experience. · Clean, user-friendly UI: Enjoy a streamlined design that integrates smoothly into your workflow. · Seamless Safari integration: Built to work across Safari on macOS, iOS, and iPadOS. Common Uses: · Test Mobile User Agents: Send an iPhone, iPad, or desktop User-Agent header to test how a website responds. · Set Language Headers: Ask a website to show content in a different language by changing the language header. · Test API Requests: Add custom headers used by development, staging, or internal tools. · Debug Website Behavior: Compare how a site behaves when certain request headers are added, changed, or removed. · Remove Unwanted Headers: Stop selected headers from being sent to specific websites. · Per-Site Development Setup: Keep different header rules for different domains, test servers, or environments.