Send a REST request with custom method, headers and body, and inspect the response status, headers and body.
Browsers block cross-origin requests unless the target server explicitly allows it (CORS). This is a browser security restriction, not a bug in this tool.