18 tools · 6 families · nothing leaves your browser

Thedevtoolboxthatrunsinyourtab.

18 utilities for the work that happens between two systems, grouped into 6 families: JSON, encoders and decoders, hashing and identity, time and scheduling, regex and diffs, code and style. All of it is client-side JavaScript, so a production payload never leaves the machine you pasted it on.

/

Built for the formats you deal with every day

JSONJSONCNDJSONBase64base64urldata URISHA-256SHA-512SHA-1Unix secondsUnix msISO 8601JavaScriptPCREPython rePostgreSQLMySQLSQL ServerJSONJSONCNDJSONBase64base64urldata URISHA-256SHA-512SHA-1Unix secondsUnix msISO 8601JavaScriptPCREPython rePostgreSQLMySQLSQL Server
Inside developer tools

6 families,
grouped by the problem.

A family groups tools that share a problem, which means they also share an engine. That is why a fix to number handling, error reporting or the sensitive-data scan lands across a whole family at once instead of one page at a time.

Where the 18 tools sitBars are scaled against the largest family, not against the total, so the smallest family is still readable. Every tool belongs to exactly one.
One JSON tree fanning out into a spreadsheet, a set of generated types and a minified line with its measured saving
5 tools

JSON tools

Read it, shrink it, prove it, convert it

JSON is what almost every API answers in, so a great deal of debugging starts by making a single unbroken line of it readable. This family covers the whole round trip: expand and explore a payload, strip it back down, prove it is valid, and turn it into a spreadsheet or into typed code.

One lossless parser behind all five

All five run on one parser that carries numbers through as raw text, so a 64-bit snowflake ID or a 19-digit order total comes out byte-identical instead of quietly rounded by JavaScript floats. The same engine repairs broken payloads and itemises what it changed, reports gzip size from the browser compression API rather than an estimate, and scans in-tab for tokens and personal data before you paste a snippet into a ticket.

Reach for it when
  • Reading a minified response you just copied out of the network panel
  • Finding the exact line and column a parser is choking on
  • Turning a sample payload into typed models without hand-writing them
SpeaksJSONJSONCNDJSONCSVTSVTypeScriptZodGoRustPython
Plain bytes encoding into a transport-safe string and decoding back, with the payload type identified and a second encoding layer peeled off
3 tools

Encoders & decoders

Reversible transport formats, both directions

Encoding is not encryption. It is the packaging that lets arbitrary bytes survive a place that only accepts safe characters — a URL, an HTTP header, a JSON string. Base64, percent-encoding and the base64url segments inside a JWT are the three you meet constantly, and every one of them is meant to be turned back.

Names what it decoded, verifies offline

These decode and then tell you what they found: the file type hiding behind a data URI, a payload peeled through several layers of encoding, a query string laid out as an editable table. The JWT tool goes further and verifies the signature — HMAC, RSA and ECDSA — inside your own tab, so you can prove a token is genuinely valid without handing a live credential to someone else’s server.

Reach for it when
  • Working out what a mystery blob in a log line actually contains
  • Checking whether a rejected token is expired or simply malformed
  • Stripping tracking parameters out of a link before sharing it
SpeaksBase64base64urldata URIhexpercent-encodingpunycodeJWTJWKPEM
Input of any length funnelled into equal-length digests, a segmented identifier read back to its version and timestamp, and a verified match
2 tools

Hashing & identity

One-way fingerprints and collision-free IDs

A hash is a one-way fingerprint: the same input always produces the same digest, and the digest reveals nothing about the input. Identifiers are the mirror-image problem, where you need a value nothing else will ever collide with. Between them they answer "is this the same file?" and "what do I call this row?".

Detects the algorithm, decodes the ID

Paste a bare checksum with no label and verify mode works out the algorithm from its shape, then does the comparison for you. Files are streamed through Web Crypto in chunks, so a multi-gigabyte image hashes without being loaded into memory first. The identifier side does not only mint UUIDs, it reads them back — version, variant, and for v1 and v7 the timestamp buried inside.

Reach for it when
  • Confirming a download matches the checksum on the release page
  • Signing a webhook payload the way the receiver expects to verify it
  • Generating sortable primary keys for a batch insert
SpeaksSHA-256SHA-512SHA-1MD5CRC32HMACPBKDF2UUID v4UUID v5UUID v7
An epoch value converting both ways into a clock face, above a schedule timeline whose upcoming runs include one skipped by a daylight saving change
2 tools

Time & scheduling

Epochs, timezones and crontab

Time is where systems disagree most. One service stores seconds, the next stores milliseconds, the database hands back an ISO string with an offset, and the scheduler only speaks crontab. This family translates between all of them and shows what a schedule will actually do rather than what it looks like it says.

Flags the DST runs that get skipped

Paste a value with no context and the format is detected for you across Unix seconds and milliseconds, ISO 8601, RFC 3339, Windows FILETIME, .NET ticks, Mongo ObjectIds and Excel serials. Both tools are timezone-aware instead of timezone-blind, so the cron preview lists real upcoming runs in the zone you choose and flags the daylight-saving transitions where a job silently runs twice or never runs at all.

Reach for it when
  • Working out which timestamp in a log lines up with the incident
  • Proving a nightly job will not be skipped by the clock change
  • Converting a whole column of epochs into something readable
SpeaksUnix secondsUnix msISO 8601RFC 3339FILETIME.NET ticksObjectIdcrontabQuartzIANA zones
A pattern with its matches highlighted across sample text, above two versions of a file compared side by side with a removed and an added line
2 tools

Regex & text patterns

Match what you meant, see what changed

Two jobs that look unrelated and are not: describing a pattern precisely enough for a machine to find it, and describing the difference between two versions of the same text. Both fail the same way — quietly, on the one edge case nobody tested.

Measures ReDoS, diffs JSON by path

The regex tester reads your pattern back to you in plain English, benchmarks it against adversarial input so catastrophic backtracking shows up as a measurement instead of a hunch, and emits the equivalent code for nine languages. The diff checker compares JSON by path rather than by line, so a reordered key stops being reported as a change, and it surfaces moved blocks and invisible characters that a line-based diff hides completely.

Reach for it when
  • Testing a validation pattern against the inputs that broke it
  • Finding the single changed value between two config files
  • Checking a log parser will not hang on one unusually long line
SpeaksJavaScriptPCREPython reGo RE2.NETJavaunified diffside-by-sideJSON path diff
A query reformatted into aligned clauses beside a review warning, above tiles for a verified minification saving, a colour scale and a contrast score
4 tools

Code & style

The little languages inside your language

SQL, markup and CSS colour values are all things you write inside another codebase, and all three are easy to ship slightly wrong in a way no compiler complains about. This family lays them out properly, shrinks them where size matters, and reviews them for the mistakes that survive review.

Reviews the code, not just the layout

The SQL formatter does not stop at indentation — it reviews the query for the errors that cost money: a missing join condition that becomes a cartesian product, a DELETE with no WHERE, a NOT IN against a nullable column. The minifier re-parses its own output and compares the resulting DOM, so a saving is never a silent breakage. The colour converter scores contrast with both WCAG 2 and APCA and hands you the nearest passing colour instead of only reporting the failure.

Reach for it when
  • Making an ORM-generated query readable before you tune it
  • Cutting a bloated email template down without breaking the layout
  • Fixing a button whose label quietly fails contrast
SpeaksPostgreSQLMySQLSQL ServerBigQuerySnowflakeHTMLCSSHEXOKLCHDisplay-P3
The toolbox

18 tools.
One tab. No uploads.

Every family, flattened back out into one list. Each card is a working page rather than a waitlist, and it is ready on the first click.

JSON Formatter: JSON shown as an indented, collapsible tree
Start here

JSON Formatter

Beautify and inspect JSON with a collapsible tree, path copying and lossless number handling.

  • Collapsible tree with one-click JSON path copying
  • 64-bit IDs and high-precision decimals survive the round trip
  • Broken payloads get repaired and itemised, not rejected
Open JSON Formatter
JSON toolsJSON MinifierStrip whitespace and see the real gzip cost, plus which branches are making the payload heavy.Measured gzip, not a guessOpen toolJSON toolsJSON ValidatorPinpoint the exact line and column, get a plain-language fix, and catch duplicate keys.Explains the error, then fixes itOpen toolJSON toolsJSON to CSVFlatten nested payloads into a spreadsheet, with column control, Excel-safe output and formula-injection guards.Excel opens it correctlyOpen toolJSON toolsJSON to TypeScriptGenerate types from a payload across seven languages, with optionality merged from every sample and a confidence report.TS, Zod, Go, Rust, PythonOpen toolEncoders & decodersJWT DecoderDecode, explain and actually verify a token in your own tab — HMAC, RSA and ECDSA — with a security audit of the claims.Verifies the signature offlineOpen toolEncoders & decodersBase64 EncoderEncode, decode and identify. Peels double-encoded payloads, handles files and data URIs, and names what it found.Peels double encodingOpen toolHashing & identityUUID GeneratorBulk v4, v7 and v5 identifiers from the crypto API — plus an inspector that reads the version and timestamp back out.Decodes UUIDs, not just makes themOpen toolHashing & identityHash GeneratorSHA family, MD5, CRC32, HMAC and PBKDF2 over text or huge files — and a verify mode that guesses the algorithm for you.Auto-detects the checksum typeOpen toolEncoders & decodersURL EncoderComponent-aware encoding, a live query-parameter editor, tracker stripping and a phishing-shape safety check.Flags deceptive URLsOpen toolTime & schedulingTimestamp ConverterPaste any time format and get every other one, in any timezone, with DST traps and batch conversion built in.Detects the format for youOpen toolTime & schedulingCron ParserRead a cron line in plain English, preview real runs in any timezone, and get warned about the traps that skip jobs.Shows DST-skipped runsOpen toolRegex & text patternsRegex TesterMatch, replace and split with a plain-English breakdown, a ReDoS benchmark and code output for nine languages.Measures catastrophic backtrackingOpen toolCode & styleHTML / CSS MinifierWhitespace-aware minification with an itemised saving report and a DOM check that proves nothing was lost.Verifies the output still matchesOpen toolCode & styleHTML / CSS FormatterTransform minified markup into readable code with proper indentation, accessibility checking, and document stats.Checks accessibility as it formatsOpen toolCode & styleSQL FormatterDialect-aware formatting plus a review pass that catches missing joins, unsafe deletes and NULL traps.Reviews the query, not just the layoutOpen toolRegex & text patternsDiff CheckerLine, word and structural diffs — including JSON path comparison, moved-block detection and regex-based ignore rules.Diffs JSON by path, not by lineOpen toolCode & styleColor ConverterEvery CSS colour space both ways, with WCAG and APCA contrast, colour-blind previews and a one-click accessible fix.Fixes contrast for youOpen tool
The developer set is completeAll 6 families are finished. What gets built next is decided by what people ask for.
JSON tools5Encoders & decoders3Hashing & identity2Time & scheduling2Regex & text patterns2Code & style4Request a tool
The difference

Why build these
at all?

Because most online utilities stop at pretty printing, and the interesting problems start just after that. These six rules hold in every family, not only the one you opened.

Lossless by default

Large integers and long decimals are carried through as raw text. A snowflake ID or an order total is the same on the way out as it was on the way in.

Repairs, not rejections

Output from a language model, a log line or a hand-edited config gets fixed and the changes listed, instead of a bare "unexpected token".

A local secret scan

Payloads are checked in-tab for tokens, keys and personal data, with one-click redaction before the snippet goes into a ticket or a group chat.

Measured, not estimated

Gzip sizes come from the browser compression API and regex cost from a real benchmark, so the numbers you optimise against are actual numbers.

Private because it is local

Every tool is client-side JavaScript. There is no request to intercept, no server log to trust and nothing left behind to delete.

Built for the debugging moment

Paste, read the answer, copy, close the tab. No modal, no upload progress bar and no cookie wall between you and the output.

How it works

Three steps,
no round trip

There is no upload step to wait on, because there is no upload.

01

Paste it in

A payload, a token, a query, a checksum or a whole file. It stays on your device — open the network panel and check.

02

Read the answer

Output updates as you type, with the diagnosis alongside it: where the error is, what it costs, what it decodes to.

03

Take it with you

Copy the result, or export to CSV, YAML, TypeScript, Zod, Go and the other formats each tool supports.

By the numbers

The shape of
this release

Counted honestly, including the numbers that are zero on purpose.

18Tools live today
6Tool families
0Bytes uploaded
100%Runs client-side
Help

Your questions,
answered

Everything worth knowing before you paste something in.

Into 6 families: JSON tools (5), Encoders & decoders (3), Hashing & identity (2), Time & scheduling (2), Regex & text patterns (2), Code & style (4). A family is a group of tools that share a problem rather than a menu heading, so the tools inside one also share an engine — which is why a fix to number handling or error reporting lands across a whole family at once.

Encoding is reversible packaging with no secret involved: Base64 and percent-encoding exist so arbitrary bytes survive a URL or a header, and anyone can undo them. Hashing is one-way — the same input always gives the same digest, and there is no route back — which is what makes it useful for checking that two files are identical. Encryption is reversible but only with a key. The tools here cover the first two; neither is a way to keep something secret.

JSON Formatter, JSON Minifier, JSON Validator, JSON to CSV, JSON to TypeScript. All five sit on one parser that treats numbers as raw text, so a 64-bit ID keeps every digit, and they share the auto-repair, the duplicate-key check, the measured gzip size and the local sensitive-data scan.

JSON, for most people — it is the biggest family and the one that gets opened mid-debug. If you arrived with a specific string rather than a payload, the encoders and decoders family is the faster route: paste the blob and it will tell you what it is before you have decided what to do with it.

Yes, and you can verify it rather than take our word for it. Each tool is JavaScript running in your tab, so open the network panel while you work and you will see no request carrying your input. Once the page has loaded, the tools keep working with the connection off.

It is free with no account, no daily quota and no paid tier that unlocks a bigger file. Because the work happens on your device instead of our servers, there is no per-request cost to pass on.

Nothing imposed by us. The ceiling is your own device memory, which is usually far more generous than a free upload quota. Very large inputs simply refresh a little less eagerly while you type.

Every developer tool currently planned has shipped, so the next additions come from requests and from the text, PDF and image categories. If a family here is missing the one utility you keep opening elsewhere, that is the fastest thing to tell us.

Get started

Open a tool. Nothing to install.

18 developer utilities across 6 finished families, every one ready now. No account, no upload, no waiting.