Parse Set-Cookie headers into structured JSON, or analyze cookie security flags (Secure, HttpOnly, SameSite, expiry). Flag missing Secure, HttpOnly, and SameSite attributes — free, local, no signup.
Content reviewed October 2026 · About Toolzum
Parse curl commands into method, URL, headers, and body parts for debugging. Dissect a failing Stripe call field by field — local parsing, free, no signup.
Parse any URL into its components — protocol, hostname, path, query parameters, hash, and more with copy-to-clipboard. Host, path, query, and fragment split with decoding — debug redirect chains precisely. Runs locally, free, no signup.
Parse cron expressions into human-readable descriptions. Includes common presets for quick reference. Presets plus plain-English schedules prevent 3am surprises — local parsing, free, no signup.
Transforms well-formed XML documents into equivalent JSON structures, merging attributes into their elements with text content preserved.
Parses free-text Indian addresses into structured fields — line 1, line 2, city, district, state, and pincode. Handles multiple Indian address formats with state and city recognition. Local processing only.
Name, value, domain, path, expires/max-age, secure flag, HttpOnly flag, SameSite attribute, and other Set-Cookie directives are extracted and displayed.
Yes. The tool analyzes Secure, HttpOnly, SameSite, and domain settings, flagging missing or insecure configurations.
Yes. If a cookie has an Expires attribute in the past, the tool flags it as expired. It also shows max-age countdown for session cookies.
Yes. Paste multiple Set-Cookie headers and the tool parses each one separately, displaying structured data for every cookie.
No. All parsing happens locally in your browser. No cookie data is transmitted to any server.
CORS Inspector
Run a real CORS preflight from your browser — a cross-origin request that shows whether an endpoint allows it, with the exact server headers to confirm.
HTTP Security Checker
Run an HTTP security probe on a live URL — reachability, redirect chain, and visible response details, plus a reference checklist for HSTS, X-Frame-Options, and CSP.