Agent & Developer Utilities
Utilities for building agents and integrations: JSON and OpenAPI validation, MCP manifest checks, JWT inspection, webhook signature verification, cron and regex testing, prompt-injection heuristics.
JSON Validator
Validates a JSON document and, on failure, returns the precise line, column, byte offset and parser reason.
JSON Repair
Repairs malformed JSON — trailing commas, unquoted keys, single quotes, smart quotes, code fences, truncated tails — and lists every repair applied.
JSON Schema Inference
Infers a JSON Schema (draft 2020-12) from one or more sample documents, merging types and marking fields optional when absent from any sample.
JSON Schema Validator
Validates an instance against a supplied JSON Schema and returns every error with its instance path and schema path.
OpenAPI Linter
Lints an OpenAPI 3.x document for structural errors, missing operation IDs, undocumented responses, unresolved $refs and undeclared security.
OpenAPI Normalizer
Normalises an OpenAPI document — resolves internal $refs, sorts keys, fills operation IDs, unifies parameter style — and reports every change.
OpenAPI to MCP Converter
Converts OpenAPI operations into Model Context Protocol tool definitions with JSON Schema input, mapping path, query, header and body parameters.
MCP Manifest Validator
Validates an MCP tool manifest for required fields, name legality, schema validity and duplicate tool names.
API Response Verifier
Checks an API response against expected status, headers, content type and a JSON Schema or field assertions, returning per-assertion results.
HTTP Header Audit
Audits a supplied header set for security posture, caching correctness and content-type consistency, citing the relevant specification for each finding.
Endpoint Health Check
Performs an SSRF-guarded request to a public endpoint and reports status, timing breakdown, redirect chain and TLS summary.
Latency Test
Repeated timed requests to a public endpoint returning min, max, mean, median, p95 and standard deviation.
Webhook Signature Verifier
Verifies HMAC webhook signatures in the Stripe, GitHub, Shopify and generic styles using constant-time comparison, with an optional timestamp tolerance.
JWT Inspector
Decodes JWT header and claims, evaluates temporal claims, and verifies the signature only when a verification key is explicitly supplied.
UUID Generator
Generates UUID v4 or v7 identifiers from a cryptographically secure source, in canonical, compact, URN or Base32 form.
Hash & Checksum
Computes MD5, SHA-1, SHA-256, SHA-512, SHA3-256, BLAKE2b and CRC32 digests over text or base64 input, with optional expected-value comparison.
Timestamp Converter
Converts between Unix seconds, milliseconds, ISO-8601 and named time zones, reporting the UTC offset and DST state applied.
Cron Expression Validator
Validates a cron expression, explains each field in plain language and returns the next fire times in a chosen time zone.
Regex Tester
Tests a regular expression against sample text with named groups, spans and flags, under a hard timeout that blocks catastrophic backtracking.
Prompt Injection Heuristic
Deterministic rule-based scan for prompt-injection patterns — instruction override, role hijack, exfiltration, delimiter escape, encoded payloads — with the matched span for every signal. No model inference involved.