cURL Command Builder

Fill in the request — method, URL, parameters, headers, body, and authentication — pick the flags and your shell, and press Build cURL command. Quotes and escapes are handled for you.

Try a preset

1. Request

2. Query parameters and headers

3. Request body

4. Authentication

5. Behavior and flags

6. Output format

About this cURL command builder

curl is the universal tool for testing APIs, scripting downloads, and reproducing bugs, but its hundreds of options and shell quoting rules make long commands error-prone. This builder turns a simple form into a correct command. Query parameters are encoded into the URL, headers and bodies get the right flags, JSON is validated and compacted, form fields are URL-encoded, and multipart uploads use -F with @file paths. Basic, bearer, and API-key authentication are supported, along with redirects, compression, verbose output, TLS skipping, timeouts, cookies, and saving to a file. Quoting adapts to bash and zsh, Windows CMD, or PowerShell, so values with spaces, quotes, or dollar signs survive intact.

How to build a curl command

  1. Describe the request. Choose the method, enter the URL, and add parameters and headers, or start from a preset.
  2. Add body and auth. Pick a body type and enter the content, then set basic, bearer, or API-key authentication if needed.
  3. Pick flags and press Build. Choose flags, timeouts, and your shell, press Build cURL command, and copy it into your terminal.

Frequently asked questions

Should I use single or double quotes?

On macOS and Linux shells, single quotes are safest because nothing inside them is expanded. Windows CMD needs double quotes, so that style always uses them.

Why does PowerShell use curl.exe?

In Windows PowerShell, curl is an alias for Invoke-WebRequest, which takes different options. curl.exe calls the real curl that ships with Windows 10 and later.

What is the difference between -d and --data-urlencode?

-d sends text as is, so characters like & or spaces must already be encoded. --data-urlencode encodes the value for you, which is why the form option uses it.

Is it safe to use -k?

Only for local testing. -k skips certificate checks, so a man-in-the-middle could read or change the traffic. Never use it against production services.

Are my tokens sent anywhere?

No. The command is built in your browser. Still, be careful when sharing commands that contain real tokens or passwords.