Per-request settings
Each HTTP request has its own Settings tab. Use it when one request must behave differently from the rest, for example to stop following redirects or to wait longer for a slow report.
Open the Settings tab
Open an HTTP request.
In the request editor, select the Settings tab.
Change a setting. It applies the next time you send.
The tab title shows a dot (Settings •) when the request differs from the defaults. Reset to defaults at the bottom puts every setting back.
Settings are saved with the request, so they travel with the collection.
Settings reference
Some settings have three choices: Default, On and Off. Default follows the app-wide value in App settings, and the button shows what that currently is, for example Default (on).
Redirects
| Setting | What it does | Default |
|---|---|---|
| Follow redirects | Follow 3xx responses to their Location. Off shows the 3xx response itself. | Follows Settings |
| Maximum redirects | How many redirects to follow before stopping, from 0 to 100. | Follows Settings (10 unless you changed it) |
| Keep the original method | On 301 and 302, resend POST, PUT and other methods instead of switching to GET. | Off |
| Keep Authorization on redirects to other hosts | Keep the Authorization header when a redirect leaves the original host. | Off |
| Remove Referer on redirects | Do not send the Referer header on redirected requests. | Off |
WARNING
Keep Authorization on redirects to other hosts sends your credentials to whatever server the redirect points at. Normally the header is dropped when a redirect leaves the original host, so credentials are not leaked. Turn it on only when you trust both servers.
Security, encoding and cookies
| Setting | What it does | Default |
|---|---|---|
| Verify TLS certificates | Off accepts self-signed and invalid certificates for this request only. | Follows Settings |
| Encode URL automatically | Percent-encode characters in the URL and params that need it. Off sends them as typed, as far as a valid URL allows. | On |
| Use the cookie jar | Send stored cookies and keep the ones this response sets. | On |
If the cookie jar is turned off in Settings, the Use the cookie jar line says so, and the switch has no effect until the jar is on again. See Cookies.
Timeout
| Setting | What it does | Default |
|---|---|---|
| Timeout (ms) | How long to wait for this request's response, in milliseconds, from 100 to 3,600,000 (one hour). | The Response timeout (s) from Settings |
Leave a number field empty to use the default. The field shows the default as a hint, for example Default (60000).
Common tasks
See a redirect instead of following it
Set Follow redirects to Off and send. The response is the 3xx itself, with its Location header on the Headers tab.
Call a local server with a self-signed certificate
Set Verify TLS certificates to Off on that request. Other requests keep checking certificates, which is safer than turning the check off for the whole app.
Wait for a slow endpoint
Type a larger number in Timeout (ms), for example 300000 for five minutes.
Send a URL exactly as typed
Turn off Encode URL automatically when a server expects characters such as [ or | unencoded, or when your URL is already encoded and must not be encoded again.
Fix "Stopped after … redirects"
A request that hits the redirect limit fails with a message such as "Stopped after 10 redirects (the maximum)". The server may be redirecting in a loop. If the chain is expected, raise Maximum redirects.
Settings from Postman
When you import from Postman, a request's Postman settings land on this tab: following redirects, the redirect limit, SSL verification, URL encoding, the cookie jar, the timeout, and the three redirect options above. They are written back when you export a Postman collection.