All tools · page 246
6,901 free tools across 25 categories. Tools marked with a lightning bolt are ready to use right now.
Paste an inline script or style and get its sha256 hash plus a ready script-src directive.
Describe your rendering stack and get a per-request nonce workflow with template and header snippets.
Describe tolerance for stale content and get stale-while-revalidate and stale-if-error windows.
Describe content negotiation dimensions and get a correct Vary value with cache busting caveats.
Describe a resource type and get weak versus strong ETag guidance with generation recipes.
Describe concurrent edits and get If-Match based PATCH flow with 409 and 412 handling.
Describe an outcome scenario and get the right status code with body conventions and traps.
List your endpoints and get safe, idempotent, and cacheable properties per method with notes.
List your content types and get Accept-Encoding guidance across gzip, br, and zstd.
Paste X-Forwarded-For and related headers and get client IP extraction steps with trust caveats.
Paste response headers and get total byte size with warnings against common proxy limits.
Describe your domains and get an HSTS max-age ramp with includeSubDomains and preload steps.
Describe privacy needs and get a Referrer-Policy value with leaked-data comparison table.
Enter page parameters to get an RFC 8288 Link header with next, prev, first, and last relations.
Describe resumable download needs and get Accept-Ranges and 206 handling checklist.
List critical assets and get a 103 Early Hints plan with preload and preconnect candidates.
Describe each cookie's role and get a SameSite and Secure decision matrix with breakage notes.
Paste Set-Cookie lines and get a matrix grading Secure, HttpOnly, SameSite, Domain, and Path choices.
Describe your app type and get a session checklist covering regeneration, idle timeout, and fixation defenses.
Answer questions about clients and users to get the right OAuth grant type with flow diagram steps.
Generate a code verifier and matching S256 code challenge offline with length guidance.
Paste a redirect URI and get exact-match, wildcard, and loopback rule feedback with fixes.
Describe your flow and get state and nonce generation plus storage and validation steps.
Describe your input-constrained client and get a device authorization flow walkthrough with polling notes.