-
Notifications
You must be signed in to change notification settings - Fork 0
Home
Welcome to ModHead - a powerful Chrome extension for modifying HTTP request headers.
ModHead is a Chrome extension that allows you to dynamically modify HTTP request headers based on user-defined rules. Whether you're a developer testing APIs, debugging authentication flows, or working with CORS issues, ModHead provides a simple and intuitive interface to manage your HTTP headers.
- Add, modify, or remove HTTP request headers on the fly
- Support for all HTTP request types (XHR, Fetch, main frames, sub-frames, scripts, etc.)
- Real-time updates without browser restart
- Flexible URL matching with
startsWith,endsWith, andequalsoptions - Multiple target domains per rule
- Optional tab URL filtering for site-specific rules
- Define reusable variables for header values
- Sensitive variable support with password masking
- Use variables across multiple rules with
${variableName}syntax
- Automatically refresh authentication tokens
- Support for multiple HTTP methods (GET, POST, PUT, PATCH, DELETE)
- Custom headers and body in refresh requests
- Response transformation to extract specific values (JSON path, templates, or full response)
- Clean, intuitive React-based interface
- Dark theme support
- Enable/disable rules with a single click
- Visual feedback with toast notifications

-
Getting Started - Installation and first steps
- How to install the extension
- Creating your first rule
- Understanding URL pattern matching
-
Variables - Learn about the variables system
- Creating and managing variables
- Sensitive variables
- Using variables in headers
-
Auto-Refresh Tokens - Automatic token management
- Setting up token auto-refresh
- HTTP methods and configuration
- Response transformation
- OAuth and JWT examples
-
Advanced Features - Power user features
- Complex response transformations
- Nested variable usage
- Multi-stage authentication
- Tab URL filtering
-
Examples - Real-world use cases
- API key injection
- Bearer token authentication
- CORS headers for development
- OAuth token refresh
- Multi-stage authentication flows
-
FAQ - Frequently asked questions
- Security considerations
- Troubleshooting
- Limitations
- When rules apply
Here's a simple example of adding an API key to all requests to api.example.com:
-
Create a rule
- Name: "Example API Key"
- Target Domain:
api.example.com(startsWith)
-
Add a header
- Name:
X-API-Key - Value:
your-api-key-here
- Name:
-
Enable the rule and you're done!
All requests to api.example.com/* will now include your API key header.
ModHead is built with modern web technologies:
- Manifest V3: Uses Chrome's latest extension architecture
- React: Modern UI with TypeScript
- declarativeNetRequest API: Chrome's powerful API for header modification
- Chrome Storage API: Persistent storage for rules and variables
ModHead is an open-source project. Contributions are welcome!
If you encounter issues or have questions:
- Check the FAQ
- Review the relevant documentation sections
- Open an issue on GitHub
Ready to get started? Head over to the Getting Started Guide!