HTTrail vs HeaderX

HTTrail is a native network inspection workbench for developers building and testing apps on iPhone, iPad, and Mac. Capture and decrypt the HTTPS traffic from your own device, inspect every request and response down to the byte, then compose and replay requests with a full-featured API client. Everything runs on-device. No account, no backend, no analytics, no ads — your traffic never leaves your device. INTERCEPTING PROXY • Decrypt HTTPS with an on-device certificate authority that mints per-host certificates on the fly • Inspect headers, bodies, timing, and raw hex for every flow • Block, redirect (map local / map remote), rewrite requests and responses, throttle, and set breakpoints • SSL-proxying allowlist so pinned apps keep working • Export captures as HAR API CLIENT • Compose GET, POST and more with params, headers, auth, and structured bodies (JSON, form-urlencoded, multipart) • GraphQL, pre-request and test scripts, and live response preview • Organize requests into collections with environments and history • Import from cURL, OpenAPI 3, and Postman v2.1 • Generate code: cURL, Swift, JavaScript, Python REALTIME • Connect and test WebSocket, Server-Sent Events, Socket.IO, and MQTT • Built-in local test server PRIVATE BY DESIGN HTTrail captures only your own device's traffic, with your explicit consent, and keeps it on your device. No data is collected. Nothing is ever sent to us. HTTrail is a developer tool for debugging and testing your own apps and APIs.

HeaderX injects custom HTTP request headers into your Safari browsing session — the essential companion for web developers, API testers, and QA engineers. Point HeaderX at your development environment, define your headers once, and flip them on whenever you need them. No proxy setup, no configuration files, no leaving the browser. DEFINE HEADERS AS JSON Describe your headers in a simple JSON editor — paste an entire set at once: {"X-Debug-Mode": "enabled", "Authorization": "Bearer dev-token"} Or use the array format to keep headers saved but individually switched off. TWO VIEWS, ONE TOGGLE Edit as raw JSON or flip to List view, where every header gets its own checkbox. The master toggle in the corner turns everything on or off instantly — your configuration stays saved either way. REUSABLE PROFILES Save named header sets — one per project, environment, or test scenario — and switch between them in two clicks. FEATURES • One-tap master toggle • JSON editor and checkbox list views • Per-header enable/disable • Named profiles for quick switching • Settings persist across browser restarts • Works in Private Browsing (optional) GOOD TO KNOW Standard header names (Authorization, Accept-Language, User-Agent, and other HTTP-spec headers) are applied to all requests through Safari's native rule engine. Custom header names (X-My-Header and similar) are applied to fetch and XHR requests made by web pages — a Safari platform constraint on custom names in network rules. For typical API-debugging workflows, this covers exactly the requests you care about. Headers apply to every site while the toggle is on — remember to switch off when you're done testing, especially with authentication headers. PRIVACY FIRST Everything stays on your device. HeaderX collects no data, phones home to no one, and contains no analytics. What you configure is nobody's business but yours.