Clean a payload before debugging
Format incoming data, infer its shape, and turn it into typed code when the contract is stable.
23 tools · 2 workflows
Format, minify, validate, inspect, and secure code-adjacent text without opening a heavyweight IDE.
Designed for the small checks developers do dozens of times a day: JSON, CSS, HTML, JWT, regex, headers, env files, and schemas.
Format incoming data, infer its shape, and turn it into typed code when the contract is stable.
Minify assets, audit security headers, and check the regex or env values that surround a release.
Format, validate, and minify JSON instantly — right in your browser.
Minify JSON into a compact single line, optionally sort object keys, and keep everything local.
Minify JavaScript — strip comments, whitespace, optional name shortening. 40-70% smaller.
Lightly obfuscate JavaScript in the browser: strip comments, remove debugger/console calls, and optionally wrap strings with base64.
Minify CSS — strip comments, whitespace, shorten colors, merge selectors. 30-60% smaller.
Minify HTML — strip comments, whitespace, optional attributes, inline CSS/JS. 40-60% smaller.
Format and beautify YAML — re-indent, validate, minify, sort keys.
Pretty-print, minify, and validate XML in your browser — preserves CDATA, comments, and namespaces.
Format and beautify SQL — supports MySQL, PostgreSQL, BigQuery, SQLite and 17 more dialects.
GraphQL formatter + minifier — beautify query/mutation/subscription/schema, validate syntax, copy minified single-line for HTTP body.
Test JavaScript regex live — match highlighting, group capture, replace preview, flag toggles — browser-only
Regex from examples — paste positive matches + negative non-matches, get a regex that hits all positives and rejects all negatives, with multiple candidate patterns ranked by specificity.
.env file validator — parse Bash-style .env, detect dups / missing required / unsafe values / leaked secret patterns; cross-compare prod / staging / dev envs.
Scan .env files, config snippets, and CI logs locally for likely API keys, tokens, private keys, JWTs, and database URLs.
Audit raw response headers for HSTS, CSP, cookie flags, MIME sniffing, clickjacking, referrer, and permissions policy gaps.
Paste JSON or NDJSON samples and infer a Draft 2020-12 style schema with types, required fields, formats, enums, and examples.
JSON to TypeScript interface — paste JSON, get clean interfaces with union types from arrays, optional vs required detection, root name customizable.
TypeScript to Zod schema converter — paste interface/type, get z.object() schema, supports unions/optionals/nested/generics/enum/Record/Map/Set.
Decode JWT header / payload / signature — verify structure, check exp, copy claims — browser-only
Encode JWT — pick algorithm (HS256/HS384/HS512), set header/payload/secret, get token.
Inspect Content-Security-Policy directives for unsafe sources, missing fallbacks, framing gaps, object-src, base-uri, and reporting coverage.
Audit OpenAPI JSON or YAML for endpoint coverage, missing operation IDs, security gaps, and weak response documentation.
Inspect package-lock.json, pnpm-lock.yaml, or yarn.lock for duplicate versions, risky sources, prereleases, and missing integrity.