ToolAPI

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Free public MCP for AI agents — 193 tools, 44 workflows. No API key.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "ToolAPI": {
      "url": "https://toolapi.org/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (193)

• json_validate

  Validate JSON text; return parsed object or error.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_format

  Pretty-print JSON with indent. When: Pretty-print JSON when the agent needs readable output.

  Parameters:

  • text (required) — string
  • indent — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_minify

  Minify JSON (remove whitespace). When: Minify JSON for compact payloads or size checks.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• csv_to_json

  Convert CSV text to JSON array of row objects. When: Convert CSV rows → JSON array of objects.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_to_csv

  Convert JSON array of objects to CSV text.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• yaml_validate

  Validate YAML text; return parsed object or error.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• yaml_to_json

  Parse YAML and return JSON-compatible object.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_to_yaml

  Convert JSON text to YAML string. When: Convert JSON → YAML for config files agents write.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• xml_validate

  Validate XML markup (well-formed check).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• xml_format

  Pretty-print XML with indentation. When: Pretty-print XML after the agent edits markup.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jsonpath_query

  Query JSON with JSONPath expression; returns matching values.

  Parameters:

  • text (required) — string — JSON text
  • path (required) — string — e.g. $.store.book[*].author

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_merge

  Deep-merge two JSON objects (second overlays first).

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_flatten

  Flatten nested JSON to dot-key map. When: Flatten nested JSON keys before comparing or exporting.

  Parameters:

  • text (required) — string
  • separator — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_pretty_diff

  Unified diff of two JSON documents (pretty-printed).

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_sort_keys

  Recursively sort JSON object keys. When: Canonicalize JSON key order for stable diffs/hashes.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_type_summary

  Summarize JSON value types (counts per type in tree).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_schema_validate

  Validate JSON data against JSON Schema (Draft 7).

  Parameters:

  • data (required) — string — JSON document text
  • schema (required) — string — JSON Schema (Draft 7)
  • max_errors — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• toml_validate

  Validate TOML text; return parsed object or error.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• toml_to_json

  Parse TOML and return JSON-compatible object.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_to_toml

  Convert JSON object text to TOML string.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• toml_schema_validate

  Validate TOML config against JSON Schema (Draft 7) in one step.

  Parameters:

  • toml (required) — string — TOML document text
  • schema (required) — string — JSON Schema (Draft 7)
  • max_errors — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sql_format

  Format SQL text (never executed; reindent + keyword case).

  Parameters:

  • text (required) — string
  • reindent — boolean
  • keyword_case — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• graphql_validate

  Validate GraphQL query or schema SDL syntax (parse only).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• openapi_validate

  Validate OpenAPI 3.x document (JSON or YAML snippet).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• openapi_diff

  Compare two OpenAPI specs and flag breaking vs non-breaking API changes.

  Parameters:

  • old (required) — string — Previous OpenAPI JSON/YAML
  • new (required) — string — New OpenAPI JSON/YAML

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• package_manifest_audit

  Audit package.json or pyproject.toml — license, risky scripts, loose ranges; emit semver_checks for batch. Note: best-effort / heuristic — not a full language parser.

  Parameters:

  • text (required) — string — Manifest file contents
  • kind — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• graphql_schema_diff

  Diff two GraphQL schemas for removed types/fields (breaking changes).

  Parameters:

  • old (required) — string
  • new (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• compose_validate

  Validate docker-compose YAML and flag privileged/host-network/secret env issues.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• github_actions_lint

  Lint GitHub Actions workflow YAML (triggers, unpinned actions, curl|bash).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• requirements_audit

  Audit Python requirements.txt for unpinned/VCS/deprecated packages.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_schema_validate_batch

  Batch JSON Schema (Draft 7) validation — up to 25 documents (agent favorite).

  Parameters:

  • items (required) — array
  • max_errors — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_assert_paths

  Assert JSONPath expressions against JSON (exists/equals/type) — agent self-check.

  Parameters:

  • data (required) — string
  • assertions (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_equal

  Deep-compare two JSON documents and list differing paths.

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• yaml_schema_validate

  Parse YAML then validate against JSON Schema (Draft 7).

  Parameters:

  • yaml (required) — string
  • schema (required) — string
  • max_errors — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• tsconfig_lint

  Lint tsconfig.json structure (compilerOptions, strict hints).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_pointer_get

  Get value by RFC 6901 JSON Pointer (e.g. /user/id). When: Read one field by RFC 6901 pointer without full walk in the agent.

  Parameters:

  • data (required) — string
  • pointer — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_patch_apply

  Apply RFC 6902 JSON Patch ops (add/remove/replace/test/move/copy). When: Apply RFC 6902 ops (add/remove/replace/test/move/copy).

  Parameters:

  • data (required) — string
  • patch (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_schema_infer

  Infer a Draft-7 JSON Schema from a sample JSON document (agent favorite).

  Parameters:

  • data (required) — string
  • title — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jsonl_validate

  Validate JSON Lines (NDJSON); optional per-line JSON Schema. When: Validate NDJSON / JSON Lines logs or datasets.

  Parameters:

  • text (required) — string
  • schema — string
  • max_lines — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• xml_to_json

  Convert XML document to JSON (attributes as @attr). When: Convert XML → JSON for agents that prefer JSON tools.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• json_merge_patch

  Apply RFC 7396 JSON Merge Patch (null deletes keys). When: RFC 7396 merge patch — use when patching JSON configs.

  Parameters:

  • target (required) — string
  • patch (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• csv_validate

  Validate CSV structure — consistent column counts / header. When: Check CSV column consistency before import.

  Parameters:

  • text (required) — string
  • delimiter — string
  • has_header — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ini_parse

  Parse INI / simple key=value config into sections. When: Parse INI/section configs into structured maps.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• openapi_operations_list

  List OpenAPI path operations (method, path, operationId, tags). When: List OpenAPI operations before validate/diff.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• graphql_operations_list

  List GraphQL query/mutation/subscription names and type defs. When: List GraphQL ops/types from a document (best-effort).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• properties_parse

  Parse Java .properties key=value file. When: Parse Java .properties key=value configs (best-effort).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• time_now

  Current UTC unix timestamp and ISO-8601.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• time_convert

  Convert unix seconds or ISO-8601 to both formats.

  Parameters:

  • value (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• timezone_convert

  Convert datetime between IANA timezones (e.g. UTC to Asia/Shanghai).

  Parameters:

  • value (required) — string — Unix seconds or ISO datetime
  • to_timezone (required) — string — e.g. Asia/Shanghai
  • from_timezone — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• timezone_list

  List common IANA timezone names for conversion.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• datetime_parse

  Parse unix timestamp or ISO-8601 into UTC ISO + unix.

  Parameters:

  • value (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• duration_parse

  Parse duration (ISO-8601 PnDTnHnMnS or human 1h30m / 90s) to seconds. When: Parse ISO-8601 / human durations to seconds.

  Parameters:

  • value (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• regex_test

  Test regex pattern; returns match, groups, span.

  Parameters:

  • pattern (required) — string
  • text (required) — string
  • flags — string — i, m, s

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• regex_replace

  Replace regex matches in text (supports backreferences in replacement).

  Parameters:

  • pattern (required) — string
  • replacement (required) — string
  • text (required) — string
  • count — integer — Max replacements when global
  • flags — string — i, m, s
  • global_replace — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_diff

  Unified line diff between two texts (like git diff).

  Parameters:

  • left (required) — string
  • right (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_slugify

  URL-safe slug from title or heading. When: Make URL-safe slugs from titles/filenames.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_stats

  Count chars, words, lines, sentences; estimate reading time.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_case_convert

  Convert case: lower, upper, title, snake, kebab, camel, pascal.

  Parameters:

  • text (required) — string
  • mode (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_lorem

  Generate lorem ipsum placeholder paragraphs.

  Parameters:

  • paragraphs — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• color_convert

  Convert color between hex, rgb(), and hsl().

  Parameters:

  • color (required) — string — hex, rgb(), or hsl()
  • to_format — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• unit_convert

  Convert units: length, weight, temperature, data, speed, time.

  Parameters:

  • value (required) — number
  • from_unit (required) — string
  • to_unit (required) — string
  • category — string — optional: length, weight, temperature, data, speed, time

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• unit_list

  List supported units per category for unit_convert.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• markdown_to_html

  Convert Markdown text to HTML. When: Render markdown → HTML for previews or emails.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• html_to_markdown

  Convert HTML to Markdown text. When: Convert HTML → markdown for docs the agent edits.

  Parameters:

  • html (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• pick_choice

  Pick one item from a list (optional seed for reproducibility).

  Parameters:

  • items (required) — array
  • seed — integer — Optional RNG seed

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• string_truncate

  Truncate text with ellipsis. When: Truncate long strings with ellipsis for UI/logs.

  Parameters:

  • text (required) — string
  • ellipsis — string
  • max_length — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• extract_urls

  Extract HTTP/HTTPS URLs from arbitrary text.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• extract_emails

  Extract email addresses from text. When: Pull email addresses from free text / logs.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• email_validate

  Validate email address format. When: Syntax-check a single email address.

  Parameters:

  • email (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_wrap

  Wrap text to a maximum line width. When: Hard-wrap text to a column width.

  Parameters:

  • text (required) — string
  • width — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• list_unique

  Deduplicate list items preserving order.

  Parameters:

  • items (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• template_fill

  Fill {{variable}} placeholders in a template string.

  Parameters:

  • template (required) — string
  • variables (required) — object

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• unicode_normalize

  Unicode normalization (NFC/NFD/NFKC/NFKD).

  Parameters:

  • text (required) — string
  • form — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• user_agent_parse

  Parse User-Agent string into browser, OS, and device hints.

  Parameters:

  • user_agent (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• secrets_scan

  Scan text for hardcoded secrets (API keys, tokens, private keys). Returns redacted findings.

  Parameters:

  • text (required) — string
  • min_entropy — number — Entropy threshold for heuristic strings

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• dockerfile_lint

  Lint Dockerfile for common security/style issues (root user, curl|sh, secrets).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• env_required_check

  Check .env text contains required keys (and non-empty values).

  Parameters:

  • text (required) — string
  • required (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• path_safety_check

  Check filesystem path for traversal / absolute / sensitive system paths.

  Parameters:

  • path (required) — string
  • allow_absolute — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• spdx_license_check

  Validate SPDX license expression against common license IDs.

  Parameters:

  • expression (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• robots_txt_validate

  Validate robots.txt syntax and User-agent rules.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• csp_parse

  Parse Content-Security-Policy header and flag unsafe directives.

  Parameters:

  • header (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cors_check

  Check CORS Allow-Origin vs credentials for unsafe combinations.

  Parameters:

  • allow_origin (required) — string
  • origin — string
  • allow_credentials — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• markdown_link_extract

  Extract markdown/bare links and flag javascript: URLs.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• gitignore_check

  Review .gitignore for common missing ignores (.env, node_modules, keys).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• editorconfig_validate

  Validate .editorconfig syntax and common keys.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• nginx_config_lint

  Lint nginx config snippets (braces, SSLv3, server_tokens, HSTS hints).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sql_danger_scan

  Scan SQL text for dangerous patterns (DROP/TRUNCATE/DELETE without WHERE). Note: best-effort / heuristic — not a full language parser.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• html_security_scan

  Scan HTML for XSS-prone patterns (javascript: URLs, inline handlers, eval). Note: best-effort / heuristic — not a full language parser.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• conventional_commit_lint

  Lint Conventional Commits message (feat/fix/chore…).

  Parameters:

  • message (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• changelog_parse

  Parse Keep-a-Changelog style markdown into version sections.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• todo_comment_extract

  Extract TODO/FIXME/HACK/XXX comments with line numbers.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• code_fence_extract

  Extract fenced code blocks from markdown (language + code).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• unified_diff_parse

  Parse unified diff — files changed, lines added/removed.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• glob_match_batch

  Match paths against glob patterns (gitignore-style fnmatch).

  Parameters:

  • paths (required) — array
  • patterns (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• identifier_validate

  Validate identifier for python/javascript/typescript (keywords + syntax).

  Parameters:

  • name (required) — string
  • language — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• text_similarity

  SequenceMatcher similarity ratio between two texts.

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• import_list_analyze

  List imports from python/js source and flag duplicates. Note: best-effort / heuristic — not a full language parser.

  Parameters:

  • text (required) — string
  • language — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• frontmatter_parse

  Parse YAML frontmatter from markdown (--- ... ---). When: Split YAML frontmatter from markdown body.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• markdown_toc

  Build a table of contents from markdown headings. When: Build heading TOC from markdown docs.

  Parameters:

  • text (required) — string
  • max_level — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• gitignore_match

  Match paths against .gitignore rules (ignore / negate). When: Test paths against .gitignore rules (best-effort).

  Parameters:

  • paths (required) — array
  • gitignore (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• shell_escape

  Shell-escape a string for posix/powershell/cmd (safe quoting). When: Safely quote strings for posix/powershell/cmd.

  Parameters:

  • text (required) — string
  • shell — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• path_normalize

  Normalize filesystem path (resolve . and ..) for posix or windows. When: Resolve . and .. in filesystem paths.

  Parameters:

  • path (required) — string
  • style — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• env_diff

  Diff two .env files — only_in_a / only_in_b / changed values. When: Diff two .env files for missing/changed keys.

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• package_scripts_list

  List scripts from package.json or pyproject.toml (poetry/PEP 621). When: List npm/poetry/PEP 621 scripts from manifests.

  Parameters:

  • text (required) — string
  • kind — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• line_ending_normalize

  Detect and normalize line endings to lf/crlf/cr. When: Detect/normalize CRLF vs LF.

  Parameters:

  • text (required) — string
  • style — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• shebang_parse

  Parse #! shebang line — interpreter and args. When: Parse #! interpreter lines in scripts.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• trailing_whitespace_scan

  Scan text for trailing whitespace and tab characters. Note: best-effort / heuristic — not a full language parser.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• sql_tables_extract

  Extract table names from SQL (FROM/JOIN/INTO/UPDATE/TABLE). When: Heuristic extract of SQL table names (best-effort).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• dependency_versions_extract

  Extract name@version from requirements/lockfile/go.mod/Cargo snippets. When: Extract name@version from lock/requirements snippets (best-effort).

  Parameters:

  • text (required) — string
  • ecosystem — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• color_contrast

  WCAG contrast ratio between two hex colors (AA/AAA). When: WCAG contrast ratio for UI color pairs.

  Parameters:

  • fg (required) — string
  • bg (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• human_bytes

  Format bytes to human size, or parse '1.5 GB' to bytes. When: Format or parse human byte sizes (1.5 GB).

  Parameters:

  • text — string
  • value — number
  • precision — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• password_strength

  Offline password strength heuristic (length/classes/common). When: Offline password strength heuristic (not a cracker).

  Parameters:

  • password (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hosts_file_parse

  Parse /etc/hosts style file into IP → hostnames entries. When: Parse /etc/hosts style IP→hostname maps.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hash_md5

  MD5 hex digest of UTF-8 text. When: MD5 digest (non-crypto integrity / legacy checksums).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hash_sha256

  SHA256 hex digest.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hash_sha512

  SHA512 hex digest.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• base64_encode

  Base64-encode UTF-8.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• base64_decode

  Base64-decode to UTF-8.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• base64url_encode

  Base64url-encode UTF-8 (no padding, URL-safe).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• base64url_decode

  Base64url-decode to UTF-8.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• url_encode

  Percent-encode URL component.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• url_decode

  Decode percent-encoded string.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• html_encode

  Escape HTML entities.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• html_decode

  Unescape HTML entities.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hex_encode

  UTF-8 text to hex string.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hex_decode

  Hex string to UTF-8 text.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uuid_generate

  Generate UUID v1/v3/v4/v5 (batch supported). v3/v5 need name + namespace.

  Parameters:

  • name — string — Required for v3/v5
  • count — integer
  • version — integer
  • namespace — string — UUID string for v3/v5 namespace
  • namespace_type — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• uuid_parse

  Parse UUID string: version, variant, hex bytes.

  Parameters:

  • uuid (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• nanoid_generate

  Generate URL-friendly nanoid (like npm nanoid).

  Parameters:

  • size — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• password_generate

  Cryptographically secure random password.

  Parameters:

  • length — integer
  • symbols — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jwt_decode

  Decode JWT payload and header (no signature verification).

  Parameters:

  • token (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jwt_verify

  Verify JWT signature (HS* with secret, RS* with public_key PEM).

  Parameters:

  • token (required) — string
  • secret — string — For HS256/384/512
  • algorithms — array — e.g. ["HS256"]
  • public_key — string — PEM public key for RS algorithms

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jwt_sign

  Sign JWT payload (HS* with secret, RS* with private_key PEM).

  Parameters:

  • payload (required) — object — Claims object or JSON string
  • header — object — Optional extra JWT header fields
  • secret — string
  • algorithm — string
  • private_key — string — PEM private key for RS algorithms

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hmac_sign

  HMAC sign message (sha1/sha256/sha512); hex or base64 output.

  Parameters:

  • message (required) — string
  • secret (required) — string
  • encoding — string
  • algorithm — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hmac_verify

  Verify HMAC signature (hex or base64).

  Parameters:

  • message (required) — string
  • secret (required) — string
  • signature (required) — string
  • algorithm — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• bcrypt_hash

  Bcrypt-hash a password for storage.

  Parameters:

  • password (required) — string
  • rounds — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• bcrypt_verify

  Verify password against bcrypt hash.

  Parameters:

  • password (required) — string
  • hash (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• radix_convert

  Convert number between bases 2-36 (binary, octal, decimal, hex).

  Parameters:

  • value (required) — string
  • from_base (required) — string — 2-36 or binary/octal/decimal/hex
  • to_base (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• qr_generate

  Generate QR code as SVG (base64 data URI included).

  Parameters:

  • text (required) — string
  • border — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• random_int

  Random integer in inclusive range (optional seed).

  Parameters:

  • min_val (required) — integer
  • max_val (required) — integer
  • seed — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• random_string

  Random string (alphanumeric, hex, base64 charset or custom).

  Parameters:

  • seed — integer
  • length — integer
  • charset — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• hash_compare

  Compare two hash digests (case-insensitive).

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• jwt_claims_audit

  Decode JWT header/claims (no verify) and flag alg=none, missing exp, privileged roles.

  Parameters:

  • token (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• remote_matrix

  Remote desktop tools comparison JSON for AI citation.

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• url_parse

  Parse URL into scheme, host, path, query components.

  Parameters:

  • url (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• http_status_lookup

  Explain HTTP status code (e.g. 404, 429, 503).

  Parameters:

  • code (required) — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_parse

  Parse semver string into major, minor, patch, prerelease.

  Parameters:

  • version (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_compare

  Compare two semver strings (less / equal / greater).

  Parameters:

  • a (required) — string
  • b (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_satisfies

  Check if version satisfies npm-style range (^ ~ >= <= > <).

  Parameters:

  • version (required) — string
  • range (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_satisfies_batch

  Batch semver range checks for dependency audits (max 50).

  Parameters:

  • checks (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_range_intersects

  Heuristic check whether two semver ranges share any sample versions (conflict hint).

  Parameters:

  • range_a (required) — string
  • range_b (required) — string
  • samples — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_sort

  Sort a list of semver versions ascending or descending. When: Sort semver lists before picking latest/oldest.

  Parameters:

  • versions (required) — array
  • reverse — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_max_satisfying

  Pick the highest version that satisfies a semver range (npm-style).

  Parameters:

  • versions (required) — array
  • range (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• semver_inc

  Bump a semver version by major/minor/patch. When: Bump major/minor/patch when cutting a release.

  Parameters:

  • version (required) — string
  • release — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cidr_calc

  Calculate IPv4/IPv6 network info from CIDR (hosts, broadcast, private).

  Parameters:

  • cidr (required) — string — e.g. 192.168.1.0/24

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cidr_contains

  Check if IP address falls within a CIDR range.

  Parameters:

  • cidr (required) — string
  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ip_geolocation

  Geolocate public IP: country, city, lat/lon, timezone, ISP.

  Parameters:

  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• env_parse

  Parse .env / dotenv text into key-value variables.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• pem_decode

  List PEM blocks in text (label, DER size, SHA256 fingerprint).

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• x509_parse

  Parse X.509 certificate PEM: subject, issuer, validity, SAN, fingerprint.

  Parameters:

  • pem (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• dns_lookup

  DNS lookup for domain (A, AAAA, MX, TXT, NS, CNAME, SOA).

  Parameters:

  • domain (required) — string
  • record_type — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• whois_lookup

  Domain registration lookup via RDAP (registrar, dates, nameservers).

  Parameters:

  • domain (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ssl_cert_fetch

  Fetch live TLS certificate from host:port (expiry, issuer, SAN).

  Parameters:

  • host (required) — string
  • port — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• reverse_dns

  Reverse DNS (PTR) lookup for IP address.

  Parameters:

  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• port_check

  TCP port open/closed check with latency ms.

  Parameters:

  • host (required) — string
  • port (required) — integer

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• http_headers_fetch

  Fetch HTTP response headers (HEAD/GET) for URL.

  Parameters:

  • url (required) — string
  • method — string
  • follow_redirects — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• currency_list

  List supported fiat currencies (Frankfurter/ECB, no API key).

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• currency_rates

  Latest exchange rates (Frankfurter ECB data, no API key).

  Parameters:

  • base — string
  • symbols — array — Optional target currencies e.g. CNY, EUR

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• currency_convert

  Convert amount between currencies using latest ECB rates.

  Parameters:

  • amount (required) — number
  • from_currency (required) — string
  • to_currency (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• url_ssrf_check

  Check URL for SSRF risk (localhost, private IP, metadata hosts).

  Parameters:

  • url (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ipv4_private_check

  Classify IP as private/loopback/link-local/global (SSRF helper).

  Parameters:

  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• url_normalize

  Normalize URL (lowercase host, sort query, drop fragment).

  Parameters:

  • url (required) — string
  • sort_query — boolean
  • drop_fragment — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• content_type_parse

  Parse Content-Type header into mime/charset/params.

  Parameters:

  • header (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• http_status_classify

  Classify HTTP status codes into 2xx/3xx/4xx/5xx buckets.

  Parameters:

  • codes (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• query_string_parse

  Parse URL query string into key/value map (supports multi-values). When: Parse URL query strings into maps.

  Parameters:

  • query (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• query_string_build

  Build URL query string from params object. When: Build query strings from param objects.

  Parameters:

  • params (required) — object
  • doseq — boolean

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cookie_header_parse

  Parse Cookie request header into name/value map. When: Parse Cookie request headers.

  Parameters:

  • header (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mime_lookup

  Lookup MIME type by file extension/path, or extensions by MIME. When: Map file extension ↔ MIME type.

  Parameters:

  • mime — string
  • path_or_ext — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• url_join

  Join base URL with relative path (urllib urljoin). When: Join base URL + relative path correctly.

  Parameters:

  • base (required) — string
  • path (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• domain_parse

  Parse domain into labels, TLD, registrable domain, subdomain. When: Split domain into subdomain/registrable/TLD (best-effort eTLD).

  Parameters:

  • domain (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• git_url_parse

  Parse git remote URL (ssh/https) into host/owner/repo. When: Parse git@ / https remotes into owner/repo.

  Parameters:

  • url (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• http_headers_parse

  Parse raw HTTP request/response header block into map. When: Parse raw HTTP header blocks.

  Parameters:

  • text (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• ip_version_detect

  Detect IPv4/IPv6 and classify private/loopback/global. When: Classify IPv4/IPv6 and private/global.

  Parameters:

  • ip (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_parse

  Parse 5-field cron into named fields (minute hour dom month dow).

  Parameters:

  • expr (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_validate

  Check cron string has exactly five fields.

  Parameters:

  • expr (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_semantic_validate

  Validate cron field syntax and value ranges (minute 0-59, hour 0-23, etc.).

  Parameters:

  • expr (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_next_runs

  Preview next N execution times for a 5-field cron expression.

  Parameters:

  • expr (required) — string
  • count — integer
  • timezone — string
  • from_time — string — Optional unix or ISO start time

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_describe

  Human-readable natural language description of cron expression (EN + ZH).

  Parameters:

  • expr (required) — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_matches

  Check if a cron expression matches a specific datetime (ISO-8601).

  Parameters:

  • expr (required) — string
  • at_time (required) — string — ISO-8601 datetime
  • timezone — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• cron_validate_batch

  Batch semantic validate of 5-field cron expressions.

  Parameters:

  • expressions (required) — array

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mail_inbox_create

  Create disposable receive-only inbox @mail.toolapi.org (24h TTL). Returns address + secret token.

  Parameters:

  • prefix — string — Optional local-part prefix (alphanumeric)

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mail_inbox_list

  List messages in a temp inbox (requires token from mail_inbox_create).

  Parameters:

  • token (required) — string
  • address — string
  • inbox_id — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

• mail_inbox_read

  Read full message body from temp inbox.

  Parameters:

  • message_id (required) — string
  • token (required) — string
  • address — string
  • inbox_id — string

  Hints: read-only not declared · destructive not declared · idempotent not declared · open-world not declared

Publisher website Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.