14 debugging modules and 55 developer utilities — all local-first, on every browser.
Eyedropper, magnifier, HEX/RGB/HSL/OKLCH formats and code exports.
Simulate mobile, WebView and desktop browsers with one click.
16 device templates, custom sizes and responsive preview.
Environments, variable checks, response assertions, summaries, cURL import and code export.
Preflight analysis with clear server-side fix suggestions.
Performance, SEO checklist and page color extraction.
Extract any article (WeChat-aware) to Markdown / HTML / text, grab images, and unlock copy-protected pages.
Manage current-site browser data and create password-encrypted, origin-bound snapshots with conflict preview and confirmed restore.
jwt.verify(local)Build OAuth/OIDC requests with PKCE, inspect callbacks and state, inspect and redact Token responses, and verify JWTs locally. It performs no Discovery, authorization navigation, Token exchange, remote JWKS fetch, or sensitive-data persistence.
schema.validate(data)Validate JSON locally against a focused JSON Schema 2020-12 subset with precise paths.
policy.review()Parse, edit and review Content-Security-Policy directives with clear risk hints.
qr.render(svg)Generate configurable, downloadable SVG QR codes entirely on your device.
ssh.fingerprint(key)Inspect OpenSSH public keys, calculate SHA-256 fingerprints and flag weak RSA keys without uploading key material.
cidr.inspect(address)Calculate IPv4 and IPv6 networks, ranges, masks and address containment locally.
db.workbench(local)Five local modes: formatting, parameter previews, DDL analysis, synthetic masking and connection strings. It never connects to a DB, executes SQL, uses DNS/network access, reads SQLite files or persists credentials, parameters, source rows or seeds.
yaml.toJSON(data)Convert bounded YAML and JSON documents locally with clear validation errors.
crypto.randomToken()Generate cryptographically random Hex, Base64, Base64URL and API-key values that are never persisted.
x509.inspect(local)Summarize X.509 fields, SHA-256 fingerprints and risk hints locally without claiming trust, hostname or chain validation.