Tool
Deep Link Route Inspector
Paste a link to see its scheme, host, path, query and fragment, with notes on what each part means for app routing: custom schemes, ports, trailing dots, intent fallbacks and parameters that could become open redirects. It parses text only; it does not visit the link or test a device.
In short
- Reads https links, custom schemes and Chrome intent:// links.
- Compares the path with a pattern using * and ? wildcards.
- Flags parameters that carry a full web address.
- Exports the link, its parts, the findings and your notes as a CSV file.
Inspect a link
What each finding means
- https link. Can work as an Android App Link or iOS universal link once the host is verified for your app; the Android guide and the iOS guide explain verification.
- Plain http. Both association files must be served over https, and Android stops verifying App Links if the file host redirects, including http to https.
- Custom scheme. Any app can register it, so it proves nothing about which app receives the link, and nothing happens if no app handles it.
- Intent link. The inspector reads package, scheme and
S.browser_fallback_url. Chrome removes the fallback before the app receives the intent, and only opens an app after a user gesture. - Port, IP address or trailing dot. Apple's guidance is not to put ports in applinks domains; verification is per domain name; Android asks you to check that a dotted host serves the same content.
- Destination parameter. A parameter such as
nextorurlholding a full address is an open redirect if your server or app follows it without an allowlist. See the deep link security guide. - Pattern match. Uses
*for any characters and?for one character, case-sensitive. Real matching rules differ slightly between Apple's components and Android's dynamic rules, so confirm on a device.
Privacy
The page sends nothing to a server. The CSV is created in your browser. Do not paste links that contain personal data or session tokens into any tool, including this one.
Questions
Does the inspector check whether my link opens the app?
No. It reads the text of the link. Whether a link opens the app depends on the device, the install state and verification, which the device test plan for deep links covers.
Why does a CSV export start some cells with an apostrophe?
Cells that begin with =, +, - or @ are prefixed so spreadsheet programs treat them as text and do not run them as formulas.
Sources
- Chrome for Developers, Android Intents with Chrome, last updated December 12, 2023.
- OWASP Cheat Sheet Series, Unvalidated Redirects and Forwards Cheat Sheet, no date shown.
- Android Developers, Troubleshoot App Links, last updated October 23, 2026.
- Apple Developer, TN3155: Debugging universal links, latest revision May 15, 2025.
How we choose and date sources: data sources.