toolapi.org

Validate JSON text; return parsed object or error.

Pretty-print JSON with indent.

Minify JSON (remove whitespace).

Convert CSV text to JSON array of row objects.

Convert JSON array of objects to CSV text.

Validate YAML text; return parsed object or error.

Parse YAML and return JSON-compatible object.

Convert JSON text to YAML string.

Validate XML markup (well-formed check).

Pretty-print XML with indentation.

Query JSON with JSONPath expression; returns matching values.

Deep-merge two JSON objects (second overlays first).

Flatten nested JSON to dot-key map.

Unified diff of two JSON documents (pretty-printed).

Recursively sort JSON object keys.

Summarize JSON value types (counts per type in tree).

Validate JSON data against JSON Schema (Draft 7).

Validate TOML text; return parsed object or error.

Parse TOML and return JSON-compatible object.

Convert JSON object text to TOML string.

Validate TOML config against JSON Schema (Draft 7) in one step.

Format SQL text (never executed; reindent + keyword case).

Validate GraphQL query or schema SDL syntax (parse only).

Validate OpenAPI 3.

Compare two OpenAPI specs and flag breaking vs non-breaking API changes.

Audit package.

Diff two GraphQL schemas for removed types/fields (breaking changes).

Validate docker-compose YAML and flag privileged/host-network/secret env issues.

Lint GitHub Actions workflow YAML (triggers, unpinned actions, curl|bash).

Audit Python requirements.

Batch JSON Schema (Draft 7) validation — up to 25 documents (agent favorite).

Assert JSONPath expressions against JSON (exists/equals/type) — agent self-check.

Deep-compare two JSON documents and list differing paths.

Parse YAML then validate against JSON Schema (Draft 7).

Lint tsconfig.

Get value by RFC 6901 JSON Pointer (e.

Apply RFC 6902 JSON Patch ops (add/remove/replace/test/move/copy).

Infer a Draft-7 JSON Schema from a sample JSON document (agent favorite).

Validate JSON Lines (NDJSON); optional per-line JSON Schema.

Convert XML document to JSON (attributes as @attr).

Apply RFC 7396 JSON Merge Patch (null deletes keys).

Validate CSV structure — consistent column counts / header.

Parse INI / simple key=value config into sections.

List OpenAPI path operations (method, path, operationId, tags).

List GraphQL query/mutation/subscription names and type defs.

Parse Java .

Current UTC unix timestamp and ISO-8601.

Convert unix seconds or ISO-8601 to both formats.

Convert datetime between IANA timezones (e.

List common IANA timezone names for conversion.

Parse unix timestamp or ISO-8601 into UTC ISO + unix.

Parse duration (ISO-8601 PnDTnHnMnS or human 1h30m / 90s) to seconds.

Test regex pattern; returns match, groups, span.

Replace regex matches in text (supports backreferences in replacement).

Unified line diff between two texts (like git diff).

URL-safe slug from title or heading.

Count chars, words, lines, sentences; estimate reading time.

Convert case: lower, upper, title, snake, kebab, camel, pascal.

Generate lorem ipsum placeholder paragraphs.

Convert color between hex, rgb(), and hsl().

Convert units: length, weight, temperature, data, speed, time.

List supported units per category for unit_convert.

Convert Markdown text to HTML.

Convert HTML to Markdown text.

Pick one item from a list (optional seed for reproducibility).

Truncate text with ellipsis.

Extract HTTP/HTTPS URLs from arbitrary text.

Extract email addresses from text.

Validate email address format.

Wrap text to a maximum line width.

Deduplicate list items preserving order.

Fill {{variable}} placeholders in a template string.

Unicode normalization (NFC/NFD/NFKC/NFKD).

Parse User-Agent string into browser, OS, and device hints.

Scan text for hardcoded secrets (API keys, tokens, private keys).

Lint Dockerfile for common security/style issues (root user, curl|sh, secrets).

Check .

Check filesystem path for traversal / absolute / sensitive system paths.

Validate SPDX license expression against common license IDs.

Validate robots.

Parse Content-Security-Policy header and flag unsafe directives.

Check CORS Allow-Origin vs credentials for unsafe combinations.

Extract markdown/bare links and flag javascript: URLs.

Review .

Validate .

Lint nginx config snippets (braces, SSLv3, server_tokens, HSTS hints).

Scan SQL text for dangerous patterns (DROP/TRUNCATE/DELETE without WHERE).

Scan HTML for XSS-prone patterns (javascript: URLs, inline handlers, eval).

Lint Conventional Commits message (feat/fix/chore…).

Parse Keep-a-Changelog style markdown into version sections.

Extract TODO/FIXME/HACK/XXX comments with line numbers.

Extract fenced code blocks from markdown (language + code).

Parse unified diff — files changed, lines added/removed.

Match paths against glob patterns (gitignore-style fnmatch).

Validate identifier for python/javascript/typescript (keywords + syntax).

SequenceMatcher similarity ratio between two texts.

List imports from python/js source and flag duplicates.

Parse YAML frontmatter from markdown (--- .

Build a table of contents from markdown headings.

Match paths against .

Shell-escape a string for posix/powershell/cmd (safe quoting).

Normalize filesystem path (resolve .

Diff two .

List scripts from package.

Detect and normalize line endings to lf/crlf/cr.

Parse #!

Scan text for trailing whitespace and tab characters.

Extract table names from SQL (FROM/JOIN/INTO/UPDATE/TABLE).

Extract name@version from requirements/lockfile/go.

WCAG contrast ratio between two hex colors (AA/AAA).

Format bytes to human size, or parse '1.

Offline password strength heuristic (length/classes/common).

Parse /etc/hosts style file into IP → hostnames entries.

MD5 hex digest of UTF-8 text.

SHA256 hex digest.

SHA512 hex digest.

Base64-encode UTF-8.

Base64-decode to UTF-8.

Base64url-encode UTF-8 (no padding, URL-safe).

Base64url-decode to UTF-8.

Percent-encode URL component.

Decode percent-encoded string.

Escape HTML entities.

Unescape HTML entities.

UTF-8 text to hex string.

Hex string to UTF-8 text.

Generate UUID v1/v3/v4/v5 (batch supported).

Parse UUID string: version, variant, hex bytes.

Generate URL-friendly nanoid (like npm nanoid).

Cryptographically secure random password.

Decode JWT payload and header (no signature verification).

Verify JWT signature (HS* with secret, RS* with public_key PEM).

Sign JWT payload (HS* with secret, RS* with private_key PEM).

HMAC sign message (sha1/sha256/sha512); hex or base64 output.

Verify HMAC signature (hex or base64).

Bcrypt-hash a password for storage.

Verify password against bcrypt hash.

Convert number between bases 2-36 (binary, octal, decimal, hex).

Generate QR code as SVG (base64 data URI included).

Random integer in inclusive range (optional seed).

Random string (alphanumeric, hex, base64 charset or custom).

Compare two hash digests (case-insensitive).

Decode JWT header/claims (no verify) and flag alg=none, missing exp, privileged roles.

Remote desktop tools comparison JSON for AI citation.

Parse URL into scheme, host, path, query components.

Explain HTTP status code (e.

Parse semver string into major, minor, patch, prerelease.

Compare two semver strings (less / equal / greater).

Check if version satisfies npm-style range (^ ~ >= <= > <).

Batch semver range checks for dependency audits (max 50).

Heuristic check whether two semver ranges share any sample versions (conflict hint).

Sort a list of semver versions ascending or descending.

Pick the highest version that satisfies a semver range (npm-style).

Bump a semver version by major/minor/patch.

Calculate IPv4/IPv6 network info from CIDR (hosts, broadcast, private).

Check if IP address falls within a CIDR range.

Geolocate public IP: country, city, lat/lon, timezone, ISP.

Parse .

List PEM blocks in text (label, DER size, SHA256 fingerprint).

Parse X.

DNS lookup for domain (A, AAAA, MX, TXT, NS, CNAME, SOA).

Domain registration lookup via RDAP (registrar, dates, nameservers).

Fetch live TLS certificate from host:port (expiry, issuer, SAN).

Reverse DNS (PTR) lookup for IP address.

TCP port open/closed check with latency ms.

Fetch HTTP response headers (HEAD/GET) for URL.

List supported fiat currencies (Frankfurter/ECB, no API key).

Latest exchange rates (Frankfurter ECB data, no API key).

Convert amount between currencies using latest ECB rates.

Check URL for SSRF risk (localhost, private IP, metadata hosts).

Classify IP as private/loopback/link-local/global (SSRF helper).

Normalize URL (lowercase host, sort query, drop fragment).

Parse Content-Type header into mime/charset/params.

Classify HTTP status codes into 2xx/3xx/4xx/5xx buckets.

Parse URL query string into key/value map (supports multi-values).

Build URL query string from params object.

Parse Cookie request header into name/value map.

Lookup MIME type by file extension/path, or extensions by MIME.

Join base URL with relative path (urllib urljoin).

Parse domain into labels, TLD, registrable domain, subdomain.

Parse git remote URL (ssh/https) into host/owner/repo.

Parse raw HTTP request/response header block into map.

Detect IPv4/IPv6 and classify private/loopback/global.

Parse 5-field cron into named fields (minute hour dom month dow).

Check cron string has exactly five fields.

Validate cron field syntax and value ranges (minute 0-59, hour 0-23, etc.

Preview next N execution times for a 5-field cron expression.

Human-readable natural language description of cron expression (EN + ZH).

Check if a cron expression matches a specific datetime (ISO-8601).

Batch semantic validate of 5-field cron expressions.

Create disposable receive-only inbox @mail.

List messages in a temp inbox (requires token from mail_inbox_create).

Read full message body from temp inbox.