Skip to main content

Web standards

Edit this page on GitHub

Throughout this documentation, you'll see references to the standard Web APIs that SvelteKit builds on top of. Rather than reinventing the wheel, we use the platform, which means your existing web development skills are applicable to SvelteKit. Conversely, time spent learning SvelteKit will help you be a better web developer elsewhere.

These APIs are available in all modern browsers and in many non-browser environments like Cloudflare Workers, Deno and Vercel Edge Functions. During development, and in adapters for Node-based environments (including AWS Lambda), they're made available via polyfills where necessary (for now, that is — Node is rapidly adding support for more web standards).

In particular, you'll get comfortable with the following:

Fetch APIspermalink

SvelteKit uses fetch for getting data from the network. It's available in hooks and endpoints as well as in the browser.

A special version of fetch is available in load functions for invoking endpoints directly during server-side rendering, without making an HTTP call, while preserving credentials. (To make credentialled fetches in server-side code outside load, you must explicitly pass cookie and/or authorization headers.) It also allows you to make relative requests, whereas server-side fetch normally requires a fully qualified URL.

Besides fetch itself, the Fetch API includes the following interfaces:


An instance of Request is accessible in hooks and endpoints as event.request. It contains useful methods like request.json() and request.formData() for e.g. getting data that was posted to an endpoint.


An instance of Response is returned from await fetch(...). Fundamentally, a SvelteKit app is a machine for turning a Request into a Response.


The Headers interface allows you to read incoming request.headers and set outgoing response.headers:

/** @type {import('@sveltejs/kit').RequestHandler} */
export function GET(event) {
// log all headers
Type 'Headers' is not an array type.2461Type 'Headers' is not an array type.
return {
body: {
// retrieve a specific header
userAgent: event.request.headers.get('user-agent')

Stream APIspermalink

Most of the time, your endpoints will return complete data, as in the userAgent example above. Sometimes, you may need to return a response that's too large to fit in memory in one go, or is delivered in chunks, and for this the platform provides streamsReadableStream, WritableStream and TransformStream.

URL APIspermalink

URLs are represented by the URL interface, which includes useful properties like origin and pathname (and, in the browser, hash). This interface shows up in various places — event.url in hooks and endpoints, $page.url in pages, from and to in beforeNavigate and afterNavigate and so on.


Wherever you encounter a URL, you can access query parameters via url.searchParams, which is an instance of URLSearchParams:

const foo = url.searchParams.get('foo');

Web Cryptopermalink

The Web Crypto API is made available via the crypto global. It's used internally for Content Security Policy headers, but you can also use it for things like generating UUIDs:

const uuid = crypto.randomUUID();
We stand with Ukraine. Donate → We stand with Ukraine. Petition your leaders. Show your support.