Build and send a real HTTP request — method, headers, query params and body — straight from your browser, and see the exact status, headers and body that came back.
This fires a real request from your browser — nothing routes through a server in between. If the target API does not allow cross-origin requests (no Access-Control-Allow-Origin header), your browser will block reading the response. That is standard browser security working as intended, not a bug in this tool — try a public API known to support CORS if you hit it.
Format, validate and minify JSON in your browser — with the line, column and a plain-English reason when it will not parse.
Read the header and payload of a JSON Web Token, with its times explained. Decodes only — it does not verify the signature, and says so.
Test a regular expression against sample text, with every match highlighted and each capture group listed.
Generate UUID v4, v7 or v1, or Nano IDs — one or hundreds at a time, from your browser’s cryptographic random source.