HEADER_POOL_TOKEN=secret python -m header_pool.server --db headers.db --port 8093 Every call needs the token: "Authorization: Bearer ", "X-Token: " or "?token=". GET /header?browser=chrome&os=windows&mobile=0 -> {"id": 12, "headers": {...}} GET /headers?n=50&browser=chrome,edge -> [{"id": .., "headers": {...}}, ...] POST /report {"id": 12, "ok": false} -> blocked (ok=false) / worked (ok=true) GET /stats POST /import?filename=dump.har&keep_session=0 body = the raw file