Decode JWTs without verifying, flag risky algorithms and claims, verify HS256 or RS256 with a key.
10 servers across authentication & identity, learning & documentation, api development, developer tools & repos, cloud & devops and security & testing. The largest is JWT Tools.
Authentication & Identity · Learning & Documentation · API Development · Developer Tools & Repos · Cloud & DevOps · Security & Testing
10 MCP servers. 10 of 10 are free to start.
Build llms.txt from local Markdown or a sitemap.xml and check an existing llms.txt file.
Lint OpenAPI 3.x documents for missing security, responses, descriptions and versioning.
Test regular expressions in a timeout-guarded worker, explain them, find catastrophic backtracking.
Parse, explain and validate 5-field cron expressions and list upcoming runs in a time zone.
Lint Dockerfiles for root users, latest tags, secrets in ENV or ARG, missing HEALTHCHECK and more.
Read-only git statistics for a local repository: log, blame ownership, churn, authors, large files.
Validate JSON against a schema with Ajv, infer a schema from samples and diff two schemas.
Query OSV.dev for known vulnerabilities by package and version, and scan lockfiles in batch.
Fetch a URL's response headers and grade CSP, HSTS, X-Frame-Options and related security headers.
The rest either hold an API key issued by the publisher or ask for nothing.
Listed without a verification tick. Read the listing before installing.