API Workbench
/tools/api
Flagship REST client with collections, auth, environments, imports, and response inspection.
Loading...
ROADMAP.md
This roadmap keeps utility tools as SEO entry points while prioritizing debugging workflows for logs, traces, APIs, auth, CI, mobile, Kubernetes, and production incidents. The live registry has 56 implemented tool routes: 18 stable local tools and 38 beta or experimental tools that work but need polish.
/tools/api
Flagship REST client with collections, auth, environments, imports, and response inspection.
/tools/ai
Analyze errors, API responses, cURL notes, JSON issues, and stack traces with optional OpenAI BYOK support.
/tools/http-status
Reference HTTP codes and response meanings while debugging requests.
/tools/http-profiler
Inspect HAR exports for timing, redirects, failures, payload sizes, and slow requests.
/tools/fetch-logger
Live in-page panel that records every fetch request and response — try it live, then drop it into your own app.
/tools/security-headers
Score response headers, missing browser protections, and cookie security flags.
/tools/json
Format, validate, repair, and inspect JSON payloads without sending data to a server.
/tools/jwt
Decode and inspect JSON Web Token claims during auth debugging.
/tools/base64
Encode and decode Base64 strings and files.
/tools/hash
Generate SHA hashes locally in the browser.
/tools/regex
Test regular expressions with live matches.
/tools/url
Encode, decode, and inspect URLs and query strings.
/tools/crash-beautifier
Clean up and inspect stack traces from mobile and web runtimes.
/tools/stack-trace
Extract error type, root frame, app frames, dependencies, and likely cause from pasted stack traces.
/tools/log-trace
Group multiline logs by trace ID, request ID, correlation ID, severity, and related details.
/tools/error-tracker
Fingerprint repeated errors into deduplicated triage groups with likely causes.
/tools/otel-trace-viewer
Summarize OTLP traces, spans, root spans, error spans, and slow operations.
/tools/k8s-debug
Detect common pod failure signals and generate focused kubectl debug commands.
/tools/ci-debugger
Inspect GitHub Actions workflows for jobs, steps, local act commands, and risky patterns.
/tools/saml-oidc-debugger
Paste SAML responses, OIDC errors, redirect URLs, discovery JSON, callback logs, or token exchange notes to detect auth-flow breakage.
/tools/certificate-viewer
Paste PEM certificates, openssl output, TLS errors, or chain notes to spot expiry, SAN, issuer, and trust-chain problems.
/tools/android-logcat
Paste Android Logcat output to identify fatal exceptions, ANRs, native crashes, process restarts, and device clues.
/tools/react-native-debug
Analyze Metro logs, Hermes errors, bridge warnings, startup markers, and React Native stack traces.
/tools/mobile-network-debug
Turn device proxy, Chucker, OkHttp, Charles, Proxyman, and API failure notes into a repeatable mobile network debugging plan.
/tools/api-auth-config
Inspect API auth headers, signing inputs, scopes, environments, and credential wiring for common config mistakes.
/tools/oauth-token-inspector
Inspect OAuth token clues, claims, scopes, expiry, refresh failures, issuer mismatch, and audience problems.
/tools/websocket-debug
Analyze WebSocket handshakes, close codes, auth headers, reconnect loops, ping/pong timing, and message samples.
/tools/redirect-inspector
Inspect redirect chains, status codes, canonical loops, HTTPS upgrades, auth callbacks, and cache-control mistakes.
/tools/cookie-security
Inspect Set-Cookie headers for SameSite, Secure, HttpOnly, domain/path scope, expiry, and auth-session risks.
/tools/csp-parser
Parse Content Security Policy headers, blocked-resource reports, unsafe directives, and hardening recommendations.
/tools/secret-scanner
Scan pasted logs, env snippets, configs, and stack traces for likely tokens, keys, credentials, and redaction gaps.
/tools/schema-validator
Validate JSON payloads and schema notes for type mismatches, missing required fields, enum errors, and API-contract drift.
/tools/sql-explain
Explain query plans, indexes, joins, scans, sort steps, and likely SQL performance bottlenecks from pasted EXPLAIN output.
/tools/sql-flow
Turn SQL statements and logs into execution flow, dependency, lock, transaction, and migration-risk notes.
/tools/flamegraph-viewer
Analyze folded stacks, profiler summaries, hot paths, samples, and function-level performance evidence.
/tools/perfetto-summary
Summarize Perfetto trace notes, thread activity, frame delays, binder calls, slices, and slow sections.
/tools/heap-visualizer
Analyze allocation/free logs, heap growth, leak symptoms, GC pressure, OOM clues, and suspicious object lifecycle patterns.
/tools/node-performance
Analyze Node.js event-loop lag, CPU profiles, heap pressure, async bottlenecks, and server timing evidence.
/tools/python-profiler
Summarize Python profiler output, hot frames, blocking calls, asyncio stalls, import cost, and CPython stack snapshots.
/tools/java-thread-dump
Parse Java thread dumps for blocked threads, deadlock clues, hot stacks, thread states, and JVM investigation notes.
/tools/jvm-gc-log
Analyze JVM GC logs for pause spikes, allocation pressure, heap tuning clues, promotion failures, and memory regressions.
/tools/native-debug-session
Parse GDB or LLDB transcripts into breakpoints, signals, frames, variables, commands, and next native-debugging actions.
/tools/binary-inspector
Inspect pasted hex or Base64 bytes, magic numbers, endian clues, file signatures, encoding mistakes, and binary payload notes.
/tools/code-diff
Compare snippets during review and debugging sessions.
/tools/build-diff
Compare build outputs and artifact changes.
/tools/bundle-analyzer
Inspect bundle size and composition.
/tools/startup-profiling
Visualize React Native startup timelines.
/tools/html
Edit, format, preview, and export HTML.
/tools/css
Minify, beautify, and validate CSS.
/tools/markdown
Write and preview Markdown content.
/tools/color
Pick, convert, and inspect color values.
/tools/icons
Search icon libraries for UI assets.
/tools/database
Run SQLite queries in a focused local workspace.
/tools/uuid
Generate UUID v4 values in bulk.
/tools/timestamp
Convert Unix, ISO, UTC, and local dates.
/tools/password-generator
Generate strong local passwords with length, symbol, ambiguity, copy, and strength controls.
/tools/saml-oidc-debugger
Decode auth redirects, SAML responses, OIDC discovery, claims, scopes, callback URLs, nonce/state issues, and common identity-provider failures.
/tools/certificate-viewer
Inspect pasted PEM certificates, chains, issuers, subjects, SANs, expiry, fingerprints, and validation warnings.
/tools/android-logcat
Analyze Logcat, fatal exceptions, ANRs, process IDs, package names, device info, and root-cause candidates.
/tools/react-native-debug
Combine Metro logs, Hermes errors, React Native stack traces, network notes, startup markers, and Flipper-alternative guidance.
/tools/mobile-network-debug
Generate setup steps for Charles, Proxyman, HTTP Toolkit, Requestly, Android Network Inspector, Chucker, OkHttp logging, and device proxy debugging.
/tools/api-auth-config
Generate and test API auth headers, tokens, sample credentials, request signing inputs, and endpoint-specific auth fixtures.
/tools/oauth-token-inspector
Inspect access tokens, refresh-token notes, scopes, audiences, expiry, issuer mismatch, and common OAuth flow failures.
/tools/websocket-debug
Inspect WebSocket connection notes, close codes, handshake headers, message samples, auth failures, and reconnect loops.
/tools/redirect-inspector
Analyze redirect chains, status codes, canonical loops, HTTPS upgrades, auth callbacks, and cache-control mistakes.
/tools/cookie-security
Inspect Set-Cookie headers for SameSite, Secure, HttpOnly, domain/path scope, expiry, partitioning, and auth-session risks.
/tools/csp-parser
Parse Content Security Policy headers, flag unsafe directives, explain blocked-resource reports, and suggest tighter policies.
/tools/secret-scanner
Scan pasted logs, env snippets, and config files for likely tokens, keys, credentials, and redaction gaps.
/tools/schema-validator
Validate JSON payloads against schemas, explain mismatches, and produce API-contract debugging reports.
/tools/sql-explain
Explain pasted query plans, indexes, joins, scans, and likely performance bottlenecks.
/tools/sql-flow
Turn SQL statements and logs into execution flow, dependency, lock, and migration-risk notes.
/tools/flamegraph-viewer
View folded stacks or sampled profiles, identify hot paths, and produce performance-debugging notes.
/tools/perfetto-summary
Summarize Perfetto trace exports into timeline highlights, slow sections, thread activity, and next checks.
/tools/heap-visualizer
Visualize allocation/free event logs, heap growth, suspicious leaks, and memory lifecycle patterns.
/tools/node-performance
Analyze Node.js timing, event-loop, memory, CPU, and async bottleneck evidence from pasted profiler output.
/tools/python-profiler
Summarize sampling profiler output, hot frames, blocking calls, and CPython stack snapshots.
/tools/java-thread-dump
Parse Java thread dumps for blocked threads, deadlock clues, hot stacks, thread states, and next JVM checks.
/tools/jvm-gc-log
Analyze GC logs for pause spikes, allocation pressure, heap tuning clues, and memory-regression evidence.
/tools/native-debug-session
Parse GDB or LLDB transcripts into breakpoints, signals, frames, variables, commands, and next actions.
/tools/binary-inspector
Inspect pasted hex or Base64 bytes, detect magic numbers, convert endian values, and surface file signatures.
Open-source debugging utilities such as HTTP troubleshooters, GDB frontends, profilers, dump formatters, debug containers, and trace tools.
Monitoring, logs, metrics, traces, OpenTelemetry, Prometheus, Grafana, APM, and production diagnosis signals.
Adjacent tool hub with API debugging, certificate inspection, Base64, sample-data utilities, and hidden/upcoming validators.
Java-focused debugging ideas including hot reload, hot deploy, quick Java method calls, Groovy scripts, SQL timing, and URL-to-method lookup.
Stack Trace Explainer and Log Trace Rebuilder are implemented as local-first debugging workflows with parsing, highlighted evidence, root-cause hints, and fix checklists.
API Workbench and HAR Analyzer / HTTP Profiler are live, while smaller URL and HTTP status utilities stay available as SEO entry tools.
Security Headers and JWT Decoder are live local tools for hardening response headers and inspecting token claims.
CI / GitHub Actions Debugger, Kubernetes Debug Helper, and OpenTelemetry Trace Viewer are implemented as lightweight paste/upload analyzers.
JSON, Base64, Hash, UUID, Timestamp, Regex, Code Diff, Build Diff, HTML, CSS, Markdown, Color, Icons, and Database tools remain available but no longer define the product edge.
`/tools/all` lists the live registry and links to implemented tool routes. It is a catalog, not a standalone tool.
Security Headers is live, but the route should add deeper CORS-specific diagnosis for preflight failures, credentialed requests, wildcard origins, and cache behavior.
REST requests, tabs, headers, auth helpers, environments, history, local collections, imports, API documentation generation, AI context export, safer cURL reproduction, private-mode cleanup, and optional authenticated collection sync are live. Cloud rename/update polish is still needed.
Parses pasted module-size lines and produces a summary, top modules, copy, and download output. It does not yet ingest native webpack stats JSON or analyzer HTML directly.
Parses `[Performance] Name: 123ms` style logs into phase totals and a simple timeline. Broader log formats and imported trace support are not implemented yet.
Define the organization, workspace, member, role, project, collection, and debug-report model before adding team controls to the API Workbench.
The P0/P1/P2 routes now exist. Next work is improving parsers with richer imports, examples, exports, and route-specific test fixtures.
Continue moving reusable parsing and transform logic out of client pages so browser tools, tests, exports, and a future CLI can share implementations.
Add focused tests for the catalog and high-risk tools so registry claims, route counts, samples, exports, and mobile layouts stay aligned with routed code.
Start with pipe-friendly commands for tools that already have shared or easily extractable logic: JSON, JWT, Base64, hash, regex, URL, diff, and HTTP status.
Preview Swagger/OpenAPI specs, endpoints, schemas, and examples.
Run GraphQL queries with variables, headers, and schema introspection.
Capture, replay, and debug webhook payloads from external services.
Convert cURL commands into fetch, Python, Go, and Postman-style requests.
Inspect browser network exports with request waterfalls and timing data.
Resolve A, AAAA, CNAME, MX, TXT, and NS records from a simple workbench.
Format, validate, and convert YAML, TOML, and JSON configuration files.
Format SQL queries and highlight common syntax mistakes.
Explain schedules, preview next run times, and validate cron expressions.
Review Dockerfiles for ordering, caching, security, and image size issues.
Validate manifests and surface common deployment configuration problems.
Inspect contrast, labels, landmark structure, and common WCAG issues.
Generate QR codes for URLs, Wi-Fi, contact cards, and payload testing.