HTTP Methods Exposure Checker

Paste an Allow header or options response and flag exposed methods.

Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.

HTTP Methods Exposure Checker

How to use this tool

  1. Enter your values in the fields above.
  2. Press Generate to see the result.
  3. Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.

Worked example

TRACE and PUT in the sample are flagged, while GET and POST are treated as usual.

What this tool does not do / Limits

This only reads text you paste. It does not probe a live server, and a method listed in pasted text may still be blocked in practice.

Frequently asked questions

Does it probe my server?

No. It only reads the Allow text you paste.

Is PUT always dangerous?

Not always, but methods beyond the usual set deserve review, so they are flagged here.

Related tools

JSON Studio

Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.

Live

Regex Tester

Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.

Live

Security Header and DNS Checker

Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).

Live