GraphQL Operator Chrome extension security report

GraphQL Operator is a DevTools panel for working with GraphQL traffic. Open DevTools, switch to the GraphQL tab, and every GraphQL operation the page makes (over `fetch` or `XMLHttpRequest`, including batched requests) shows up with its operation name, type, status, and timing. Read it easily • Queries, variables, and responses render as collapsible, syntax‑highlighted code - not one giant escaped string. • Large response/variable blocks auto‑collapse; an "Inline fragments" toggle expands `...FragmentSpreads` in place so fragment‑heavy queries read as one tree. • Filter by text or by chips (errors / mutations / ruled), and find text inside a query or response. • Search all requests (Ctrl/Cmd+F) - one string searched across every recorded operation's variables, query text, response bodies and headers. Hits are grouped per operation with the field and line number, and clicking one jumps straight to that line. Scope to variables/query/response/headers, with match‑case and regex. Act on any operation (right‑click) • Resend - replay a captured request (runs in the page, so cookies/auth are kept). • Modify & resend - edit the query and variables (or raw body), headers, and URL. • Block - return a synthetic GraphQL error. • Delay - hold matching requests N seconds to test loading/timeout states. • Override response - return a custom body / GraphQL error / HTTP status without hitting the server (force empty or error states). • Copy the query, variables, or a ready‑to‑run cURL command. Reusable rules Block / rewrite / delay / override rules persist across sessions and apply to all tabs. Match by exact operation name, regex, operation type, HTTP method, or URL substring. Export / import captured operations as JSON to share a repro. Privacy: everything runs locally in your browser. GraphQL Operator has no servers, no analytics, and never transmits your data anywhere.