Sidewire

Sidewire shows your network traffic in a Chrome side panel — no DevTools required. Capture, filter, replay and export requests while keeping your browser layout intact. Everything stays on your machine: no account, no tracking, no remote server. FEATURES • Capture in the active tab (default) or all tabs, with pause/resume and clear (starred entries are kept) • Filters: URL terms with AND + "-" exclusion (e.g. "api -analytics -.png") or /regex/, HTTP method, resource type, status bucket (2xx/3xx/4xx/5xx/errors), domain dropdown, "★ only" toggle • Search inside headers and request/response bodies (optional toggle), not just the URL • Group requests by domain in collapsible sections • Optional response-size column and a compact request timeline (waterfall) with a shared time scale • Flag secrets — highlight sensitive headers (Authorization, Cookie, API keys…) and Set-Cookie values missing Secure/HttpOnly • Slow-request highlight with a configurable threshold • Star entries (☆/★) — preserved across Clear • GraphQL operationName auto-extracted from POST bodies and shown as a badge • Click a row to expand: query params, parsed request/response headers, request body (formData or raw, JSON pretty-printed), response body (when capture enabled), timing breakdown • Diff two requests side by side (headers + bodies, line-level) • Copy URL, Copy as cURL, Copy as fetch, Copy as PowerShell, Copy as node fetch, Copy all visible URLs • HAR export and HAR import — round-trip with DevTools, Postman, Insomnia… • Sensitive header values (Authorization, Cookie, API keys…) redacted in exported HAR files by default • Mocks — answer matching requests with your own status, headers and body, delay them, or make them fail; create a rule from any captured request in one click (uses chrome.debugger, optional permission) • WebSocket and Server-Sent Events messages listed under each connection (with response-body capture on) • Error badge on the toolbar icon: failed requests (4xx/5xx/network errors) on the current page, reset on navigation • Navigation separators mark each page load in the list • Redirect chains — each hop of a redirect (301/302/307/308…) is shown as its own row with its status and target; the request details list the whole chain, and a click jumps to any hop • Replay — re-fire a captured request and see the response inline • Replay with… — open an inline editor to toggle/edit/add query parameters and edit the body (JSON pretty-print) before re-firing • Decode base64 response bodies in one click; JSON pretty-printed automatically when decoded • Optional JWT decoding — auto-shows the decoded header/payload JSON under any JWT-shaped header value (Authorization: Bearer …, etc.) • Light / dark theme — toggle in the title bar, follows OS preference by default • Optional response-body capture via chrome.debugger — the permission is only requested when you first turn on body capture or mocks (Chrome shows its built-in debugger notification bar on the inspected tab while attached) • Filters and display preferences are remembered between sessions • Persistence — request buffer kept in chrome.storage.session, survives service-worker restarts (response bodies stay in memory only, never written to storage) • Keyboard: / focus URL filter, Esc clear filter, P pause/resume, arrow keys between rows, Enter/Space to expand rows and JSON nodes