ToolAPI

Base64-decode to UTF-8.

Base64-encode UTF-8.

Base64url-decode to UTF-8.

Base64url-encode UTF-8 (no padding, URL-safe).

Bcrypt-hash a password for storage.

Verify password against bcrypt hash.

Parse Keep-a-Changelog style markdown into version sections.

Calculate IPv4/IPv6 network info from CIDR (hosts, broadcast, private).

Check if IP address falls within a CIDR range.

Extract fenced code blocks from markdown (language + code).

WCAG contrast ratio between two hex colors (AA/AAA). When: WCAG contrast ratio for UI color pairs.

Convert color between hex, rgb(), and hsl().

Validate docker-compose YAML and flag privileged/host-network/secret env issues.

Parse Content-Type header into mime/charset/params.

Lint Conventional Commits message (feat/fix/chore…).

Parse Cookie request header into name/value map. When: Parse Cookie request headers.

Check CORS Allow-Origin vs credentials for unsafe combinations.

Human-readable natural language description of cron expression (EN + ZH).

Check if a cron expression matches a specific datetime (ISO-8601).

Preview next N execution times for a 5-field cron expression.

Parse 5-field cron into named fields (minute hour dom month dow).

Validate cron field syntax and value ranges (minute 0-59, hour 0-23, etc.).

Check cron string has exactly five fields.

Batch semantic validate of 5-field cron expressions.

Parse Content-Security-Policy header and flag unsafe directives.

Convert CSV text to JSON array of row objects. When: Convert CSV rows → JSON array of objects.

Validate CSV structure — consistent column counts / header. When: Check CSV column consistency before import.

Convert amount between currencies using latest ECB rates.

List supported fiat currencies (Frankfurter/ECB, no API key).

Latest exchange rates (Frankfurter ECB data, no API key).

Parse unix timestamp or ISO-8601 into UTC ISO + unix.

Extract name@version from requirements/lockfile/go.mod/Cargo snippets. When: Extract name@version from lock/requirements snippets (best-effort).

DNS lookup for domain (A, AAAA, MX, TXT, NS, CNAME, SOA).

Lint Dockerfile for common security/style issues (root user, curl|sh, secrets).

Parse domain into labels, TLD, registrable domain, subdomain. When: Split domain into subdomain/registrable/TLD (best-effort eTLD).

Parse duration (ISO-8601 PnDTnHnMnS or human 1h30m / 90s) to seconds. When: Parse ISO-8601 / human durations to seconds.

Validate .editorconfig syntax and common keys.

Validate email address format. When: Syntax-check a single email address.

Diff two .env files — only_in_a / only_in_b / changed values. When: Diff two .env files for missing/changed keys.

Parse .env / dotenv text into key-value variables.

Check .env text contains required keys (and non-empty values).

Extract email addresses from text. When: Pull email addresses from free text / logs.

Extract HTTP/HTTPS URLs from arbitrary text.

Parse YAML frontmatter from markdown (--- ... ---). When: Split YAML frontmatter from markdown body.

Parse git remote URL (ssh/https) into host/owner/repo. When: Parse git@ / https remotes into owner/repo.

Lint GitHub Actions workflow YAML (triggers, unpinned actions, curl|bash).

Review .gitignore for common missing ignores (.env, node_modules, keys).

Match paths against .gitignore rules (ignore / negate). When: Test paths against .gitignore rules (best-effort).

Match paths against glob patterns (gitignore-style fnmatch).

List GraphQL query/mutation/subscription names and type defs. When: List GraphQL ops/types from a document (best-effort).

Diff two GraphQL schemas for removed types/fields (breaking changes).

Validate GraphQL query or schema SDL syntax (parse only).

Compare two hash digests (case-insensitive).

MD5 hex digest of UTF-8 text. When: MD5 digest (non-crypto integrity / legacy checksums).

SHA256 hex digest.

SHA512 hex digest.

Hex string to UTF-8 text.

UTF-8 text to hex string.

HMAC sign message (sha1/sha256/sha512); hex or base64 output.

Verify HMAC signature (hex or base64).

Parse /etc/hosts style file into IP → hostnames entries. When: Parse /etc/hosts style IP→hostname maps.

Unescape HTML entities.

Escape HTML entities.

Scan HTML for XSS-prone patterns (javascript: URLs, inline handlers, eval). Note: best-effort / heuristic — not a full language parser.

Convert HTML to Markdown text. When: Convert HTML → markdown for docs the agent edits.

Fetch HTTP response headers (HEAD/GET) for URL.

Parse raw HTTP request/response header block into map. When: Parse raw HTTP header blocks.

Classify HTTP status codes into 2xx/3xx/4xx/5xx buckets.

Explain HTTP status code (e.g. 404, 429, 503).

Format bytes to human size, or parse '1.5 GB' to bytes. When: Format or parse human byte sizes (1.5 GB).

Validate identifier for python/javascript/typescript (keywords + syntax).

List imports from python/js source and flag duplicates. Note: best-effort / heuristic — not a full language parser.

Parse INI / simple key=value config into sections. When: Parse INI/section configs into structured maps.

Geolocate public IP: country, city, lat/lon, timezone, ISP.

Detect IPv4/IPv6 and classify private/loopback/global. When: Classify IPv4/IPv6 and private/global.

Classify IP as private/loopback/link-local/global (SSRF helper).

Assert JSONPath expressions against JSON (exists/equals/type) — agent self-check.

Deep-compare two JSON documents and list differing paths.

Flatten nested JSON to dot-key map. When: Flatten nested JSON keys before comparing or exporting.

Pretty-print JSON with indent. When: Pretty-print JSON when the agent needs readable output.

Deep-merge two JSON objects (second overlays first).

Apply RFC 7396 JSON Merge Patch (null deletes keys). When: RFC 7396 merge patch — use when patching JSON configs.

Minify JSON (remove whitespace). When: Minify JSON for compact payloads or size checks.

Apply RFC 6902 JSON Patch ops (add/remove/replace/test/move/copy). When: Apply RFC 6902 ops (add/remove/replace/test/move/copy).

Get value by RFC 6901 JSON Pointer (e.g. /user/id). When: Read one field by RFC 6901 pointer without full walk in the agent.

Unified diff of two JSON documents (pretty-printed).

Infer a Draft-7 JSON Schema from a sample JSON document (agent favorite).

Validate JSON data against JSON Schema (Draft 7).

Batch JSON Schema (Draft 7) validation — up to 25 documents (agent favorite).

Recursively sort JSON object keys. When: Canonicalize JSON key order for stable diffs/hashes.

Convert JSON array of objects to CSV text.

Convert JSON object text to TOML string.

Convert JSON text to YAML string. When: Convert JSON → YAML for config files agents write.

Summarize JSON value types (counts per type in tree).

Validate JSON text; return parsed object or error.

Validate JSON Lines (NDJSON); optional per-line JSON Schema. When: Validate NDJSON / JSON Lines logs or datasets.

Query JSON with JSONPath expression; returns matching values.

Decode JWT header/claims (no verify) and flag alg=none, missing exp, privileged roles.

Decode JWT payload and header (no signature verification).

Sign JWT payload (HS* with secret, RS* with private_key PEM).