cURL Share Help Try It

Command line tool and library for transferring data with URLs

Category

Network

License

MIT

Platforms

Windows macOS Linux

Released

1998

Path

c:\curl\curl.exe

Benefits

Free, thread-safe, IPv6 compatible, feature rich, well supported and fast.

Notes

All documentation is available in markdown format.

Used by

Adobe, Altera, AOL, Apple, AT&T, BBC, Blackberry, BMW, Bosch, Broadcom, Chevrolet, Cisco, Comcast, Facebook, Google, Hitachi, Honeywell, HP, Huawei, HTC, IBM, Intel, LG, Mazda, Mercedes-Benz, Microsoft, Motorola, NASA, Netflix, Nintendo, Oracle, Panasonic, Philips, Pioneer, RBS, Samsung, SanDisk, SAP, SAS Institute, SEB, Sharp, Siemens, Sony, Spotify, Sun, Swisscom, Tomtom, Toshiba, VMware, Xilinx, Yahoo, Yamaha

Examples

curl.exe https://api.twilio.com/2010-04-01/Accounts/#TwilioAccountSID#/Messages.json -X POST --data-urlencode "To=+1#Phone#" --data-urlencode "From=+#TwilioFromNumber#" --data-urlencode "Body=#MessageText#" --data-urlencode "statusCallback=#CallbackURL#?id=#ID#" -u #TwilioAccountSid#:#TwilioAuthToken# >#TwilioWorkDir#\#ID#.json

curl.exe -s -verbose -A "CustomUserAgent" https://www.adobe.com/robots.txt --stderr - 2>&1

curl.exe -s -verbose --resolve www.adobecoldfusioncom:443:8.8.8.8 -A "" https://www.adobe.com/robots.txt --stderr - 2>&1

curl.exe --header "Host: www.example.com" http://127.0.0.1/

curl.exe https://www.google.com/ -o /dev/null -w "Response %{http_code} %{time_total}s\n" -s & sleep 1

Try it

• Simple GET request
  Fetch a webpage and show the response body (first 2000 characters)
• Response headers
  Fetch response headers from a URL using HEAD request
• Check SSL certificate
  Check SSL certificate details and expiration date for any HTTPS URL
• Check SSL against badssl.com test hosts
  Run checkSSL() against a curated list of public badssl.com test endpoints (expired, self-signed, hostname mismatch, weak ciphers, old TLS versions, large SAN counts). Useful for seeing exactly what curl reports for each kind of certificate failure.

Agree to terms to run demos.

# cURL - Help

Source: https://curl.se/

```
--abstract-unix-socket <path>  Connect via abstract Unix domain socket
     --alt-svc <filename>          Enable alt-svc with this cache file
     --anyauth                     Pick any authentication method
 -a, --append                      Append to target file when uploading
     --aws-sigv4 <provider1[:prvdr2[:reg[:srv]]]>  AWS V4 signature auth
     --basic                       HTTP Basic Authentication
     --ca-native                   Load CA certs from the OS
     --cacert <file>               CA certificate to verify peer against
     --capath <dir>                CA directory to verify peer against
 -E, --cert <certificate[:password]>  Client certificate file and password
     --cert-status                 Verify server cert status OCSP-staple
     --cert-type <type>            Certificate type (DER/PEM/ENG/PROV/P12)
     --ciphers <list>              TLS 1.2 (1.1, 1.0) ciphers to use
     --compressed                  Request compressed response
     --compressed-ssh              Enable SSH compression
 -K, --config <file>               Read config from a file
     --connect-timeout <seconds>   Maximum time allowed to connect
     --connect-to <HOST1:PORT1:HOST2:PORT2>  Connect to host2 instead of host1
 -C, --continue-at <offset>        Resumed transfer offset
 -b, --cookie <data|filename>      Send cookies from string/load from file
 -c, --cookie-jar <filename>       Save cookies to <filename> after operation
     --create-dirs                 Create necessary local directory hierarchy
     --create-file-mode <mode>     File mode for created files
     --crlf                        Convert LF to CRLF in upload
     --crlfile <file>              Certificate Revocation list
     --curves <list>               (EC) TLS key exchange algorithms to request
 -d, --data <data>                 HTTP POST data
     --data-ascii <data>           HTTP POST ASCII data
     --data-binary <data>          HTTP POST binary data
     --data-raw <data>             HTTP POST data, '@' allowed
     --data-urlencode <data>       HTTP POST data URL encoded
     --delegation <LEVEL>          GSS-API delegation permission
     --digest                      HTTP Digest Authentication
 -q, --disable                     Disable .curlrc
     --disable-eprt                Inhibit using EPRT or LPRT
     --disable-epsv                Inhibit using EPSV
     --disallow-username-in-url    Disallow username in URL
     --dns-interface <interface>   Interface to use for DNS requests
     --dns-ipv4-addr <address>     IPv4 address to use for DNS requests
     --dns-ipv6-addr <address>     IPv6 address to use for DNS requests
     --dns-servers <addresses>     DNS server addrs to use
     --doh-cert-status             Verify DoH server cert status OCSP-staple
     --doh-insecure                Allow insecure DoH server connections
     --doh-url <URL>               Resolve hostnames over DoH
     --dump-ca-embed            Write the embedded CA bundle to standard output
 -D, --dump-header <filename>      Write the received headers to <filename>
     --ech <config>                Configure ECH
     --egd-file <file>             EGD socket path for random data
     --engine <name>               Crypto engine to use
     --etag-compare <file>         Load ETag from file
     --etag-save <file>            Parse incoming ETag and save to a file
     --expect100-timeout <seconds>  How long to wait for 100-continue
 -f, --fail                        Fail fast with no output on HTTP errors
     --fail-early                  Fail on first transfer error
     --fail-with-body              Fail on HTTP errors but save the body
     --false-start                 Enable TLS False Start
 -F, --form <name=content>         Specify multipart MIME data
     --form-escape                 Escape form fields using backslash
     --form-string <name=string>   Specify multipart MIME data
     --ftp-account <data>          Account data string
     --ftp-alternative-to-user <command>  String to replace USER [name]
     --ftp-create-dirs             Create the remote dirs if not present
     --ftp-method <method>         Control CWD usage
     --ftp-pasv                    Send PASV/EPSV instead of PORT
 -P, --ftp-port <address>          Send PORT instead of PASV
     --ftp-pret                    Send PRET before PASV
     --ftp-skip-pasv-ip            Skip the IP address for PASV
     --ftp-ssl-ccc                 Send CCC after authenticating
     --ftp-ssl-ccc-mode <active/passive>  Set CCC mode
     --ftp-ssl-control             Require TLS for login, clear for transfer
 -G, --get                         Put the post data in the URL and use GET
 -g, --globoff                     Disable URL globbing with {} and []
     --happy-eyeballs-timeout-ms <ms>  Time for IPv6 before IPv4
     --haproxy-clientip <ip>       Set address in HAProxy PROXY
     --haproxy-protocol            Send HAProxy PROXY protocol v1 header
 -I, --head                        Show document info only
 -H, --header <header/@file>       Pass custom header(s) to server
 -h, --help <subject>              Get help for commands
     --hostpubmd5 <md5>            Acceptable MD5 hash of host public key
     --hostpubsha256 <sha256>      Acceptable SHA256 hash of host public key
     --hsts <filename>             Enable HSTS with this cache file
     --http0.9                     Allow HTTP/0.9 responses
 -0, --http1.0                     Use HTTP/1.0
     --http1.1                     Use HTTP/1.1
     --http2                       Use HTTP/2
     --http2-prior-knowledge       Use HTTP/2 without HTTP/1.1 Upgrade
     --http3                       Use HTTP/3
     --http3-only                  Use HTTP/3 only
     --ignore-content-length       Ignore the size of the remote resource
 -k, --insecure                    Allow insecure server connections
     --interface <name>            Use network interface
     --ip-tos <string>             Set IP Type of Service or Traffic Class
     --ipfs-gateway <URL>          Gateway for IPFS
 -4, --ipv4                        Resolve names to IPv4 addresses
 -6, --ipv6                        Resolve names to IPv6 addresses
     --json <data>                 HTTP POST JSON
 -j, --junk-session-cookies        Ignore session cookies read from file
     --keepalive-cnt <integer>     Maximum number of keepalive probes
     --keepalive-time <seconds>    Interval time for keepalive probes
     --key <key>                   Private key filename
     --key-type <type>             Private key file type (DER/PEM/ENG)
     --krb <level>                 Enable Kerberos with security <level>
     --libcurl <file>              Generate libcurl code for this command line
     --limit-rate <speed>          Limit transfer speed to RATE
 -l, --list-only                   List only mode
     --local-port <range>          Use a local port number within RANGE
 -L, --location                    Follow redirects
     --location-trusted          As --location, but send secrets to other hosts
     --login-options <options>     Server login options
     --mail-auth <address>         Originator address of the original email
     --mail-from <address>         Mail from this address
     --mail-rcpt <address>         Mail to this address
     --mail-rcpt-allowfails        Allow RCPT TO command to fail
 -M, --manual                      Display the full manual
     --max-filesize <bytes>        Maximum file size to download
     --max-redirs <num>            Maximum number of redirects allowed
 -m, --max-time <seconds>          Maximum time allowed for transfer
     --metalink                    Process given URLs as metalink XML file
     --mptcp                       Enable Multipath TCP
     --negotiate                   Use HTTP Negotiate (SPNEGO) authentication
 -n, --netrc                       Must read .netrc for username and password
     --netrc-file <filename>       Specify FILE for netrc
     --netrc-optional              Use either .netrc or URL
 -:, --next                        Make next URL use separate options
     --no-alpn                     Disable the ALPN TLS extension
 -N, --no-buffer                   Disable buffering of the output stream
     --no-clobber                  Do not overwrite files that already exist
     --no-keepalive                Disable TCP keepalive on the connection
     --no-npn                      Disable the NPN TLS extension
     --no-progress-meter           Do not show the progress meter
     --no-sessionid                Disable SSL session-ID reusing
     --noproxy <no-proxy-list>     List of hosts which do not use proxy
     --ntlm                        HTTP NTLM authentication
     --ntlm-wb                     HTTP NTLM authentication with winbind
     --oauth2-bearer <token>       OAuth 2 Bearer Token
 -o, --output <file>               Write to file instead of stdout
     --output-dir <dir>            Directory to save files in
 -Z, --parallel                    Perform transfers in parallel
     --parallel-immediate          Do not wait for multiplexing
     --parallel-max <num>          Maximum concurrency for parallel transfers
     --pass <phrase>               Passphrase for the private key
     --path-as-is                  Do not squash .. sequences in URL path
     --pinnedpubkey <hashes>       Public key to verify peer against
     --post301                     Do not switch to GET after a 301 redirect
     --post302                     Do not switch to GET after a 302 redirect
     --post303                     Do not switch to GET after a 303 redirect
     --preproxy <[protocol://]host[:port]>  Use this proxy first
 -#, --progress-bar                Display transfer progress as a bar
     --proto <protocols>           Enable/disable PROTOCOLS
     --proto-default <protocol>    Use PROTOCOL for any URL missing a scheme
     --proto-redir <protocols>     Enable/disable PROTOCOLS on redirect
 -x, --proxy <[protocol://]host[:port]>  Use this proxy
     --proxy-anyauth               Pick any proxy authentication method
     --proxy-basic                 Use Basic authentication on the proxy
     --proxy-ca-native             Load CA certs from the OS to verify proxy
     --proxy-cacert <file>         CA certificates to verify proxy against
     --proxy-capath <dir>          CA directory to verify proxy against
     --proxy-cert <cert[:passwd]>  Set client certificate for proxy
     --proxy-cert-type <type>      Client certificate type for HTTPS proxy
     --proxy-ciphers <list>        TLS 1.2 (1.1, 1.0) ciphers to use for proxy
     --proxy-crlfile <file>        Set a CRL list for proxy
     --proxy-digest                Digest auth with the proxy
     --proxy-header <header/@file>  Pass custom header(s) to proxy
     --proxy-http2                 Use HTTP/2 with HTTPS proxy
     --proxy-insecure              Skip HTTPS proxy cert verification
     --proxy-key <key>             Private key for HTTPS proxy
     --proxy-key-type <type>       Private key file type for proxy
     --proxy-negotiate             HTTP Negotiate (SPNEGO) auth with the proxy
     --proxy-ntlm                  NTLM authentication with the proxy
     --proxy-pass <phrase>         Passphrase for private key for HTTPS proxy
     --proxy-pinnedpubkey <hashes>  FILE/HASHES public key to verify proxy with
     --proxy-service-name <name>   SPNEGO proxy service name
     --proxy-ssl-allow-beast       Allow this security flaw for HTTPS proxy
     --proxy-ssl-auto-client-cert  Auto client certificate for proxy
     --proxy-tls13-ciphers <list>  TLS 1.3 proxy cipher suites
     --proxy-tlsauthtype <type>    TLS authentication type for HTTPS proxy
     --proxy-tlspassword <string>  TLS password for HTTPS proxy
     --proxy-tlsuser <name>        TLS username for HTTPS proxy
     --proxy-tlsv1                 TLSv1 for HTTPS proxy
 -U, --proxy-user <user:password>  Proxy user and password
     --proxy1.0 <host[:port]>      Use HTTP/1.0 proxy on given port
 -p, --proxytunnel                 HTTP proxy tunnel (using CONNECT)
     --pubkey <key>                SSH Public key filename
 -Q, --quote <command>             Send command(s) to server before transfer
     --random-file <file>          File for reading random data from
 -r, --range <range>               Retrieve only the bytes within RANGE
     --rate <max request rate>     Request rate for serial transfers
     --raw                         Do HTTP raw; no transfer decoding
 -e, --referer <URL>               Referrer URL
 -J, --remote-header-name          Use the header-provided filename
 -O, --remote-name                 Write output to file named as remote file
     --remote-name-all             Use the remote filename for all URLs
 -R, --remote-time                 Set remote file's time on local output
     --remove-on-error             Remove output file on errors
 -X, --request <method>            Specify request method to use
     --request-target <path>       Specify the target for this request
     --resolve <[+]host:port:addr[,addr]...>  Resolve host+port to address
     --retry <num>                 Retry request if transient problems occur
     --retry-all-errors            Retry all errors (with --retry)
     --retry-connrefused           Retry on connection refused (with --retry)
     --retry-delay <seconds>       Wait time between retries
     --retry-max-time <seconds>    Retry only within this period
     --sasl-authzid <identity>     Identity for SASL PLAIN authentication
     --sasl-ir                     Initial response in SASL authentication
     --service-name <name>         SPNEGO service name
 -S, --show-error                  Show error even when -s is used
 -i, --show-headers                Show response headers in output
     --sigalgs <list>              TLS signature algorithms to use
 -s, --silent                      Silent mode
     --skip-existing               Skip download if local file already exists
     --socks4 <host[:port]>        SOCKS4 proxy on given host + port
     --socks4a <host[:port]>       SOCKS4a proxy on given host + port
     --socks5 <host[:port]>        SOCKS5 proxy on given host + port
     --socks5-basic                Username/password auth for SOCKS5 proxies
     --socks5-gssapi               Enable GSS-API auth for SOCKS5 proxies
     --socks5-gssapi-nec           Compatibility with NEC SOCKS5 server
     --socks5-gssapi-service <name>  SOCKS5 proxy service name for GSS-API
     --socks5-hostname <host[:port]>  SOCKS5 proxy, pass hostname to proxy
 -Y, --speed-limit <speed>         Stop transfers slower than this
 -y, --speed-time <seconds>        Trigger 'speed-limit' abort after this time
     --ssl                         Try enabling TLS
     --ssl-allow-beast             Allow security flaw to improve interop
     --ssl-auto-client-cert        Use auto client certificate (Schannel)
     --ssl-no-revoke               Disable cert revocation checks (Schannel)
     --ssl-reqd                    Require SSL/TLS
     --ssl-revoke-best-effort      Ignore missing cert CRL dist points
     --ssl-sessions <filename>  Load/save SSL session tickets from/to this file
 -2, --sslv2                       SSLv2
 -3, --sslv3                       SSLv3
     --stderr <file>               Where to redirect stderr
     --styled-output               Enable styled output for HTTP headers
     --suppress-connect-headers    Suppress proxy CONNECT response headers
     --tcp-fastopen                Use TCP Fast Open
     --tcp-nodelay                 Set TCP_NODELAY
 -t, --telnet-option <opt=val>     Set telnet option
     --tftp-blksize <value>        Set TFTP BLKSIZE option
     --tftp-no-options             Do not send any TFTP options
 -z, --time-cond <time>            Transfer based on a time condition
     --tls-earlydata               Allow use of TLSv1.3 early data (0RTT)
     --tls-max <VERSION>           Maximum allowed TLS version
     --tls13-ciphers <list>        TLS 1.3 cipher suites to use
     --tlsauthtype <type>          TLS authentication type
     --tlspassword <string>        TLS password
     --tlsuser <name>              TLS username
 -1, --tlsv1                       TLSv1.0 or greater
     --tlsv1.0                     TLSv1.0 or greater
     --tlsv1.1                     TLSv1.1 or greater
     --tlsv1.2                     TLSv1.2 or greater
     --tlsv1.3                     TLSv1.3 or greater
     --tr-encoding                 Request compressed transfer encoding
     --trace <file>                Write a debug trace to FILE
     --trace-ascii <file>          Like --trace, but without hex output
     --trace-config <string>       Details to log in trace/verbose output
     --trace-ids                   Transfer + connection ids in verbose output
     --trace-time                  Add time stamps to trace/verbose output
     --unix-socket <path>          Connect through this Unix domain socket
 -T, --upload-file <file>          Transfer local FILE to destination
     --upload-flags <flags>        IMAP upload behavior
     --url <url/file>              URL(s) to work with
     --url-query <data>            Add a URL query part
 -B, --use-ascii                   Use ASCII/text transfer
 -u, --user <user:password>        Server user and password
 -A, --user-agent <name>           Send User-Agent <name> to server
     --variable <[%]name=text/@file>  Set variable
 -v, --verbose                     Make the operation more talkative
 -V, --version                     Show version number and quit
     --vlan-priority <priority>    Set VLAN priority
 -w, --write-out <format>          Output FORMAT after completion
     --xattr                       Store metadata in extended file attributes
```