cent-ai — a privacy-conscious engineering toolbox for humans, scripts, and AI agents

Engineering utilities built for sensitive infrastructure data.

Format, validate, and transform everyday DevOps data with documented APIs, consistent behavior, and no storage of your tool input.

What do you need to do?Format JSONValidate YAMLEncode Base64Decode a JWTCalculate a subnetLook up DNS recordsCheck an IP addressInspect a TLS certificateCheck HTTP headers
showing all 20 tools
data formatting

JSON Formatter and Validator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Format, validate, and sort JSON with clear syntax errors, live preview, and one-click copy or download.

  • format
  • validate
  • sort-keys
  • live-preview
data formatting

YAML Formatter and Validator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Format, validate, and sort a single YAML document with clear parse errors and live preview.

  • format
  • validate
  • sort-keys
  • live-preview
encoding

Base64 Encoder and Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Encode text to Base64 or decode it back, with an optional batch mode for multiple values.

  • encode
  • decode
  • batch
  • live-preview
security

JWT Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Decode a JWT's header and payload to read its claims. Does not verify the signature.

  • decode
  • live-preview
security

Hash Generator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Generate an MD5, SHA-1, SHA-256, or SHA-512 hex digest of text input.

  • md5
  • sha1
  • sha256
  • sha512
  • live-preview
networking

CIDR / Subnet Calculator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Calculate network address, broadcast address, netmask, and usable host range from IPv4 CIDR notation.

  • subnet-math
  • live-preview
networking

DNS Lookup

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Look up A, AAAA, CNAME, MX, TXT, and NS records for a hostname.

  • a-record
  • aaaa-record
  • cname-record
  • mx-record
  • txt-record
  • ns-record
networking

IP Lookup

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Classify an IPv4 or IPv6 address (public, private, loopback, link-local) and look up its reverse DNS.

  • classify
  • reverse-dns
networking

HTTP Header Inspector

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Fetch a URL's status code and response headers, following redirects and reporting the redirect chain.

  • fetch-headers
  • follow-redirects
  • live-preview
security

TLS/Certificate Inspector

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Connect to a host over TLS and report its certificate's subject, issuer, validity, and trust status.

  • fetch-certificate
  • trust-check
security

Certificate Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Decode a PEM-encoded X.509 certificate's subject, issuer, validity, SANs, and public key details.

  • decode
  • live-preview
security

HMAC Generator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Generate an HMAC-MD5, HMAC-SHA1, HMAC-SHA256, or HMAC-SHA512 digest of text input using a secret key.

  • md5
  • sha1
  • sha256
  • sha512
  • live-preview
security

CSR Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Decode a PEM-encoded PKCS#10 certificate signing request's subject, public key, and requested SANs.

  • decode
  • live-preview
security

HTTP Security Headers Checker

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Check a domain's HSTS, CSP, and other security-relevant HTTP response headers, with findings and remediation guidance.

  • hsts
  • csp
  • frame-protection
  • findings
security

SSL/TLS Domain Checker

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Check a domain's TLS certificate health: trust, expiry, hostname match, chain, and negotiated protocol/cipher.

  • trust-check
  • expiry
  • hostname-match
  • chain
  • cipher
  • findings
security

Certificate Analyzer

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Analyze a pasted PEM certificate's fields, extensions, and expiry, with clear findings and remediation guidance.

  • analyze
  • expiry
  • findings
security

Certificate Chain Validator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Validate a live host's certificate chain: ordering, missing intermediates, expired links, and basic constraints.

  • chain-validation
  • findings
security

Certificate Expiry Checker

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Check certificate expiry from a live domain or a pasted/uploaded PEM certificate, with clear severity levels.

  • expiry
  • findings
security

Secret Scanner

Processing: Browser. Processed entirely in your browser — this input never leaves your device.

Scan text for likely secrets — cloud/API tokens, private keys, database URLs — entirely in your browser by default.

  • pattern-detection
  • contextual-detection
  • entropy-detection
  • redaction
  • findings
security

.env Security Scanner

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Scan .env-style configuration for exposed secrets, publicly-shipped credentials, weak defaults, and risky settings — paste content directly, or check a live URL.

  • pattern-detection
  • contextual-detection
  • entropy-detection
  • config-risk-checks
  • findings

JSON Formatter and Validator is cent-ai’s reference tool — every other tool follows the same pattern for privacy, accessibility, and API design.

Browse all toolsView API docs

Categories

01 — 2 tools

Data formatting

Format, validate, and transform structured data formats.

02 — 1 tool

Encoding

Encode and decode common text representations.

03 — 13 tools

Security

Inspect tokens and generate digests, processed only by cent-ai's API and never forwarded to external services.

04 — 4 tools

Networking

Work out addressing and subnetting for infrastructure you manage.

Planned

More categories

Kubernetes manifests, Docker/Helm utilities, and cloud utilities are on the roadmap, not shipped yet.

How your input is handled

Every tool on cent-ai runs through our API by default: your input is sent over HTTPS, processed in memory to produce the result, and discarded — it is never persisted, logged, cached by application code, or included in analytics or error reporting. This is documented per endpoint in the API docs and enforced by automated tests, not just a policy statement.

Read the full Privacy policy and Security pages for the complete picture, including current limitations.

Popular workflows

Pretty-print a minified API response

Paste a one-line JSON response into the JSON Formatter to read it, then sort keys to diff it against another response.

Sanity-check a Kubernetes manifest before applying it

Catch a YAML indentation mistake in the YAML Formatter before it becomes a kubectl apply error.

Decode a Base64-encoded Kubernetes Secret value

Decode a single value, or switch on batch mode to decode a whole list of secret values at once.

Recently added

  • .env Security ScannerScan .env-style configuration for exposed secrets, publicly-shipped credentials, weak defaults, and risky settings — paste content directly, or check a live URL.
  • Secret ScannerScan text for likely secrets — cloud/API tokens, private keys, database URLs — entirely in your browser by default.
  • Certificate Expiry CheckerCheck certificate expiry from a live domain or a pasted/uploaded PEM certificate, with clear severity levels.

API and automation

Every tool is backed by a versioned REST endpoint under /v1/tools/* — the same API the web UI calls, so you can script against it directly (CI pipelines, editor plugins, your own tooling) with the same privacy guarantees. Responses use one consistent envelope and error-code set across every tool.

Read the API documentation

FAQ

Is cent-ai free to use?

Yes. Every tool is free, with no account required.

Do you store what I paste into a tool?

No. Input is sent to our API to be processed and is never persisted, logged, cached, or included in analytics. See the Privacy policy and each tool's own privacy section for specifics.

Is there an API I can call directly?

Yes — every tool is backed by a versioned REST API under /v1/tools/*. See the API documentation for request/response shapes, limits, and error codes.