Inspect Set-Cookie SameSite, Secure, prefixes and expiry attributes locally
Input stays in this browser and is not uploaded or saved. Results and copied reports mask cookie values; the original remains in the input until cleared.
Use one Set-Cookie per line. A comma inside an Expires date is not a cookie separator. Domain and Path attribute values remain visible.
Paste headers, then choose Inspect locally.
Only the pasted text is inspected. Without the response URL or browser context, this cannot determine whether a cookie was actually accepted or sent.
How to read this
Secure, HttpOnly and SameSite depend on the actual request and browser. Cookie values are masked, but names and Domain, Path and Expires attributes remain visible. Copied reports omit cookie values.
Up to 64 KiB of input, 200 cookies and 8192 characters per line; excess is rejected or flagged.