TL;DR

HTTP got a new method: QUERY (RFC 10008, June 2026). It's a safe, idempotent, cacheable request that carries a body — "GET with a body."

It fixes a decade-old pain: complex reads (search/filter/graph queries) that don't fit in a URL, without abusing POST.

The subtle part is caching: the RFC requires the request body to be part of the cache key. Get it wrong and one client gets another client's response.

http-queryable is a small library that does this correctly for Express, Fastify, raw http, and the browser.