Framer AI AgentsDesign and publish professional sites with AI
WebSlurp
The Fastest Way to Test API Security Inside Chrome DevTools
18 followers
The Fastest Way to Test API Security Inside Chrome DevTools
18 followers
WebSlurp is a free, open-source Chrome DevTools extension for API testing. WebSlurp lets you capture network requests directly from Chrome DevTools, edit them, and replay them instantly — no proxy setup, no switching between tools. It's the fastest way to inspect and replay HTTP requests when testing web applications and APIs. Think Burp-style request replay with a Postman-like interface, built right into your browser.
Hi Product Hunt! 👋
I'm excited to finally share **WebSlurp** with you.
I built WebSlurp because I wanted an API inspector that does more than just capture requests. During debugging and security testing, I kept switching between DevTools, curl, Postman, and various security tools just to inspect a single API call.
WebSlurp brings those workflows together.
✨ A few highlights:
* Capture XHR & Fetch requests in real time
* Edit and replay requests instantly
* Built-in OAuth 2.0, Bearer Token, and Basic Auth support
* Copy requests as cURL
* Save and restore request history locally
* Automatic security checks for headers, secrets, tokens, and sensitive data
One thing that's especially important to me: **everything runs locally in your browser.** Your captured requests aren't uploaded to any server, and no account is required.
This is only the first release, and I already have a long list of ideas for future updates.
I'd love to hear your feedback, feature requests, or workflows that you'd like WebSlurp to support. Thanks so much for checking it out! 🚀
WebSlurp is open source. If you find it useful, consider giving the project a ⭐ on GitHub. It really helps the project grow and reach more developers.
Love having something like this built right into DevTools, especially the security check is clutch. One thing that would be sweet is letting me save and group captures into collections or projects, so when I'm juggling multiple endpoints across different features I can switch contexts without losing my place.
@nuriyeyflm Thanks, Nuriye! I really like the idea of collections/projects—that's definitely on my roadmap. 😊 I also just added multipart/form-data support, so feel free to pull the latest changes!
Love that it runs entirely inside DevTools instead of spinning up a separate proxy, keeps the workflow feeling seamless when debugging. The Quick Security Check built right into the request panel is a really thoughtful touch for catching leaks early.
@ekinsbzl Thanks, Ekin! That seamless DevTools workflow was exactly what I was aiming for. 😊 I just shipped multipart/form-data support as well, so feel free to pull the latest changes and give it a try!
finally a lightweight way to test endpoints without spinning up Postman or a proxy, and the secret detection in the security check caught an api key i forgot was in a response header.
@sedat1276640 Thanks, Sedat! That's exactly the kind of issue I hoped the security check would catch. 😊 I also just shipped multipart/form-data support. Feel free to pull the latest changes!
Love that it runs without an external proxy, that was a dealbreaker for me with other tools. One thing that would make it way more useful for me: saved request diffing between environments, so I can replay the same call against staging vs prod and see exactly which headers or response fields changed.
@erginel28238 Thank you for the valuable suggestion! I'll definitely keep this in mind and explore it as WebSlurp continues to evolve.
Really useful for quick API debugging right in the browser, love that it doesn’t need an external proxy. One thing that would make it even better is letting me save and organize captured requests into named collections so I can come back to them across sessions, maybe with a simple sidebar for grouped replays.
@cafermqyf Thanks, Cafer! Collections with grouped replays would make a great addition—I appreciate the suggestion. 😊 I just shipped multipart/form-data support as well, so feel free to pull the latest changes!
Caught a misconfigured auth header on my first replay, which was honestly more useful than I expected from a quick install. The Quick Security Check saving me from accidentally leaking a test token was a nice surprise.
@taagzahide13498 Thanks! That's exactly the kind of workflow I built WebSlurp for. I'm glad the replay feature and Quick Security Check proved useful right away. I appreciate you giving it a try!